June 2023 Minutes

The Project Committee wishes to speak to the Board about the current funding model, and how to better support projects.

A discussion on the OWASP Enterprise Advisory Report, and how to better support existing and new corporate members.

The Diversity and Outreach Committee have not yet had a formal charter approved. A discussion on whether the Board should resume their duties until such time as a new charter is finalized.

After many years, Fiona Collins has stepped down as the Compliance Committee Chair. The Board will need to discuss options for the compliance committee, to ensure independence of operation in perception and actuality.

Background The OWASP Foundation would like to simplify the startup level to better reflect the costs involved.

The following changes are proposed:

• Extend the startup duration to 3 years to take COVID into account, and allow firms one extra year to become profitable before becoming standard members
• Fees to remain at $2000 per year for any startup, anywhere in the world
• Remove the $800 regional startup level as this is unprofitable as it currently stands
• Remove the monthly social media benefit to just be a once off thank you
• Remove the trademark license benefit

The reality is that we are starting to get a lot more startups and we need to streamline the offering and provide a reason to go to the full level, but also give startups an additional year to become profitable.

Motion: "Resolved, that the cutoff for the Startup Corporate Supporter level be changed to 3 years, the fees to remain at $2000 per year for any startup anywhere in the world, remove the $800 regional startup level, remove the monthly social media benefit, and remove the trademark license benefit."

Sponsor: Grant Ongers Second: Bil Corry

Bil - Yes Avi - Yes Glenn - Yes Louis - Yes Vandana - Yes Grant - Yes Matt - Yes

PASSES 7-0

Background The OWASP Foundation would like to have a 2017 Board vote repealed as the motion is operational in nature, and prevents innovation and experimentation around the Project Summit model, location, and timing. For example, we would like to support regional or standalone summits, and run them with a variety of formats, including hack-a-thons, work-a-thons, and more.

The request is to repeal the following vote:

2017-09-19 Motion: All OWASP Summits are to be attached to an AppSec event and managed as a global event. Tom Brennan motions, Andrew van der Stock, seconds.. Pass: 5-1. In Favor: 5 (Tom Brennan, Andrew van der Stock, Michael Coates, Josh Sokol and Matt Konda) Against: 1 (Martin Knobloch).

The 2017 motion ties the hands of the Foundation and volunteers, and we would like to repeal it. This does not mean no more Project Summits at Global Events, it just means that funding would be allocated at the start of the year by the Board. The Foundation - in consultation with the community - will decide on how best to hold them as an operational matter.

Motion: "Resolved, that 2017-09-17 Board decision on attaching Summits to an AppSec event is repealed, effective immediately."

Sponsor: Avi Douglen Second: Grant Ongers

Bil - Yes Avi - Yes Glenn - Yes Louis - Yes Vandana - Yes Grant - Yes Matt - Yes

PASSES 7-0

• Date: 27 June 2023
• Time: 1 PM US Eastern, UTC 1700 convert
• Location: Remote