May 2025 Minutes

Background This is the second motion to decide if we are to host our AppSec EU conferences from 2026-2028 in a single location, Vienna.

After a successful site visit by Sam (thank you for that!), we have received very favorable pricing for holding AppSec EU in Vienna for a period of three years at 157k per year.

Additional information

• The costs of Food and Beverage (F&B) bill, which are not included in this contract, would be charged separately, are comparable to other venues that we obtained quotes from.
• The costs of hotel rooms are in line with other European cities at this time of the year
• The timing of the event would be the same dates for all three years, which is something that the Board has wanted, and allows us to plan and advertise well in advance, similar to the way it happens with other major events like RSA, BlackHat and Defcon.
• We would only need to register for VAT once in three years, which simplifies the management of ticket sales and invoicing for sponsorships.

Motion: "Resolved, the Board approves the Executive Director signing a contract with Austria Center Vienna as the host convention center for AppSec EU 2026-2028."

• e-Vote

Sponsor: Harold Blankenship Second: Ricardo Griffith

• Result: 6 YES 0 NO 0 ABSTAIN. Motion passes.

Background This policy establishes the process for creating and managing OWASP working groups. It is intended to provide a clear framework for the establishment, operation, and dissolution of working groups within the OWASP Foundation. The pull request contains changes to the bylaws to allow the creation of working groups, and the committee policy to ensure that the working group policy is the primary source of information for working groups., and lastly, the working group policy itself.

• PR for Working Groups Policy and related Bylaws and policy changes

Motion: "Resolved, the bylaws are amended to allow the creation of working groups. This requires a super majority of the Board."

Sponsor: Steve Springett Second: Ricardo Griffith

• Steve Springett: YES
• Harold Blankenship: YES
• Sam Stepanyan: YES
• Ashwini Siddhi: YES
• Avi Douglen: YES
• Diego Silva Martins: YES
• Ricardo Griffith: YES

Results

Passes 7-0

Motion: "Resolved, the committee policy is amended to ensure that the working group policy is the primary source of information for working groups. This requires a super majority of the Board."

Sponsor: Steve Springett Second: Ricardo Griffith

• Steve Springett: YES
• Harold Blankenship: YES
• Sam Stepanyan: YES
• Ashwini Siddhi: YES
• Avi Douglen: YES
• Diego Silva Martins: YES
• Ricardo Griffith: YES

Results

Passes 7-0

• Committees Policy

Motion: "Resolved, that working groups policy is approved."

Sponsor: Steve Springett Second: Ricardo Griffith

• Steve Springett: YES
• Harold Blankenship: YES
• Sam Stepanyan: YES
• Ashwini Siddhi: YES
• Avi Douglen: YES
• Diego Silva Martins: YES
• Ricardo Griffith: YES

Results

Passes 7-0

• Approved Working Groups Policy

Background The privacy policy outlines how OWASP collects, uses, and protects personal information. It is designed to ensure compliance with applicable privacy laws and regulations, and to provide transparency to individuals about their data.

• Privacy Policy

Motion: "Resolved, that the privacy policy is approved."

Sponsor: Avi Douglen Second: Diego Silva Martins

• Steve Springett: YES
• Harold Blankenship: YES
• Sam Stepanyan: YES
• Ashwini Siddhi: YES
• Avi Douglen: YES
• Diego Silva Martins: YES
• Ricardo Griffith: YES

Results

Passes 7-0

Background The travel policy outlines the guidelines and procedures for OWASP Board members, participants and volunteers when traveling for OWASP-related business. It is designed to ensure consistency, accountability, and cost-effectiveness in travel arrangements.

• PR for Travel Policy

Motion: "Resolved, that the travel policy is approved."

Sponsor: Diego Silva Martins Second: Ricardo Griffith

• Steve Springett: YES
• Harold Blankenship: YES
• Sam Stepanyan: YES
• Ashwini Siddhi: YES
• Avi Douglen: YES
• Diego Silva Martins: YES
• Ricardo Griffith: YES

Results

Passes 7-0

Background The OWASP EU discussion is an ongoing conversation about the future of OWASP in Europe, including potential changes to the organizational structure, funding, and outreach efforts.

Background The Amsterdam summary provides an overview of the recent OWASP Global Board of Directors strategy meeting held in Amsterdam, including key takeaways and action items.

• Amsterdam Strategy Meeting Summary

Background The certification program update provides an overview of the current status of OWASP's certification effort, including any changes or improvements that have been made since the last update.

Shruti Kulkarni provided an update on the Certification curriculum development progress. Shruti Kulkani also ran a session on the certification program at AppSec EU 2025 for more information after the Board meeting.

Presented by Shruti Kulkarni:

• Progress on training programs and proof of concept training event in London being planned.