OWASP - User contributions [en]

March 7, 2011

2011-03-08T05:23:11Z

JBernik:

= Votes required =

* '''Remove the "board member representative" requirement for the Global Committees. '''

This idea was intiated as a mechanism to provide the committeess with a "line" to the board. It has evolved, however, into a percieved "veto" option for the board. Instead, I recommend we implement a "requirement" for the Global Committee chair to present their committee progress to the Board during the meetings. This moves the requirement of participation from the Board and provides the Committee an opportunity to present items that require vote. Board members should be allowed to participate as a committee member, but should not be considered a committee chair or looked to as a committee member who has privelages above other committee members.

* '''Approve $5K in funding for the Global Membership, Global Conferences, and Global Chapter Committees for operational support'''

These three committees have initiatives for 2011 as defined during the summit. These initiatives will require many "tasks" that are time consuming and will require uninterrupted hours to complete. I would like the committee chair to "approve" the selection. These contracted staff will be supervised by me, the Operations Director. Tasks managed and outcomes tracked as directed by the committee chairs.

[http://www.owasp.org/images/6/6b/Operational_Support_for_OWASP_Global_Committee.pdf Job Description]

* '''Status of Tesauro Consulting Inititive'''

Is the OWASP Board going to continue working on the Core Values, Core Purpose, and so on, or is this going to be assigned to the Global Committee Chairs to finish?

* '''OWASP/First Relationship'''

[https://lists.owasp.org/pipermail/owasp-board/attachments/20110217/86057c8d/attachment-0001.pdf Partnership agreement] between OWASP and FIRST. Already has the concurrence of the GCC

* ''' Conference Profit Sharing Model'''

GCC approval on Jan 11th 2011 meeting [https://docs.google.com/a/owasp.org/document/d/1eVX6lDyAtsUBrDKp6C7pcPTk8ObCv-QgnFAGq_zj510/edit?hl=en Meeting Minutes]

Local host chapters will share in OWASP event profits under the following schedule. In the case of multiple host chapters, the host chapters will be responsible for determining the division before the event.
* Global AppSec Conference - 25% of event profits with a $5,000 USD cap ($10,000 for multi-chapter events)
* Regional/Theme Events - 30% of event profits with a $4,000 USD cap
* Local Events - 50% of profits with a $3000 USD cap
[https://lists.owasp.org/pipermail/owasp-board/2011-February/004353.html Additional Details]

* '''GCC Representative Funding'''

The board had asked the GCC to discuss the funding mechanism for GCC
representation at events (GCC budget or against individual conferences).
This was discussed and voted upon at the Feb GCC meeting and the committee
decided that it would be best to manage these funds out of a GCC travel
budget for supporting events. The GCC felt that, as at the end of the day
it's all the foundation's money, the benefits of rolling this travel under
the conference budget (therefore showing more "expenses" to their budget,
allegedly encouraging them to earn more money to break "even") did not
outweigh the "perceived" costs of offering conferences direct on-site
support and then "charging" them for it. As the travel costs are likely to
have a small impact on a Global AppSec Budget (approx $2000/trip) it's not
likely going to impact the bottom line of the conference and would not
likely be the sole motivating factor for planners to get additional
sponsorship income. The potential soft costs to the ability of the GCC to
conduct it's oversight role may be significantly impacted by making the
planners pay a "tax" that is wholly internal to the organizations
accounting and has no real allocation. Additionally, in the cases where a
conference planner said "thanks but no thanks" to a GCC rep at their
conference, the larger goals of better contract management, event feedback
and assessments would not be achieved.

''In short, the GCC recommends to the board that this funding stream be placed under the GCC budget as originally requested in the amount of $10,000.''

* '''Projects Committee 2011 Budget Proposal'''
The projects committee has drafted a [https://docs.google.com/a/owasp.org/document/d/11HjbUeJxyRbQ4Jg6Wg7LceMZox0wz3Fz-LUwjfam5eg/edit?hl=en detailed budget] proposal to support four (4) GPC initiatives. For each initiative, the budget outlines projected estimates based on market research and describes ''exactly'' '''how''' and '''when''' the funds would be utilized. The budget also provides a detailed (12 pages long!), well thought out plan with ''concrete goals'' and ''tangible deliverables'' in order to evaluate initiative success. The four initiatives include: Project Hosting, GPC Working Sessions, Project Support, and Project Incentives.

The Global Projects Committee 2011 Budget Proposal can be found [https://docs.google.com/a/owasp.org/document/d/11HjbUeJxyRbQ4Jg6Wg7LceMZox0wz3Fz-LUwjfam5eg/edit?hl=en here].

= Committee Updates =
== '''Conferences''' ==
'''GCC Representative Roles and Responsibilities at Events'''

The GCC will now send a representative to all Global AppSec Events and to
other regional events as budget allows. This member of the GCC will be
identified early and assigned to liaise with the conference planners and
provide a single point of contact for interfacing with the committee. They
will also work with Dave to go through "training" for signature authority on
contracts less than or equal to $15,000 USD in the scope of the assigned
conference. While on-site the GCC representative will provide logistical,
contracting and other on-site support as well as report back to the
committee in the following areas (from the GCC 2011 Comprehensive plan):

GCC member shall:
*interface with the local planning committee at least 1 month before trip (attend planning call)
*Interact with planners/attendees while at conference
*Interact with Sponsors
*Sign conference contracts under $15,000 (once approved)
*At the next GCC meeting the traveling member will be expected to
*Provide an post trip report covering
**Assessment of facility
**Event Marketing Strategy
**Examination of Event Budget
**Estimation of Speaker Quality
**Sponsor engagement/cost-effectiveness & feedback
**Any notable comments from planners/attendees
**Any unique outstanding elements
**Any issues

== Projects ==

GPC Updates:

* The GPC has welcomed three (3) new members (Chris Schmidt, Justin Searle, and Larry Casey) and is looking forward to welcoming Keith Turpin upon completion of his application (Keith has already participated in GPC Meetings).
* [https://docs.google.com/document/d/10qW-Jh7IFoTsp9eh-t_aHiderkCDLFk0KCx2TNOuxoI/edit?hl=en Project Hosting RFP] in final review
* Fleshing out the proposed [https://docs.google.com/a/owasp.org/leaf?id=0B2vv_7Gz8Z7TOWYyN2VjNjgtMWU1My00YjkxLTk0ZGYtNmUyMTNmMDg4YzI0&sort=name&layout=list&num=50 OWASP Project Lifecycle]
** Recent addition of "OWASP Enterprise"
** Hinges on Project Hosting to manage lifecycle and Project Incentives to drive adoption by leaders

== Membership ==

== Education ==

== Industry ==

Discussion Points

* Conference reach out via organizers and local chapters
-Dublin
-Brazil
-US
-China
* Contact list for Industry by vertical
* Budget proposal
* Corporate member structure
* Corp Survey regarding OWASP projects and effectiveness
* Metrics report by Vertical
* Industry alignment by vertical

== Chapters ==

== Connections ==

Global Industry Committee - Application 10

2011-02-17T17:46:03Z

JBernik:

[[How to Join a Committee|Click here to return to 'How to Join a Committee' page]]

----

{| style="width:100%" border="0" align="center"
|-
! colspan="2" align="center" style="background:#4058A0; color:white" | '''COMMITTEE APPLICATION FORM'''
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Applicant's Name'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | Sherif Koussa
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Current and past OWASP Roles'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | OWASP Ottawa Chapter Leader - WebGoat 5.0
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Committee Applying for'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | Global Industry Committee
|}

----

 

----

Please be aware that for an application to be considered by the board, '''you MUST have 5 recommendations'''. An incomplete application will not be considered for vote.

----

 

----

{| style="width:100%" border="0" align="center"
|-
! colspan="8" align="center" style="background:#4058A0; color:white" | '''COMMITTEE RECOMMENDATIONS'''
|-
! align="center" style="background:white; color:white" | 
! align="center" style="background:#7B8ABD; color:white" | '''Who Recommends/Name'''
! align="center" style="background:#7B8ABD; color:white" | '''Role in OWASP'''
! align="center" style="background:#7B8ABD; color:white" | '''Recommendation Content'''
|-
| style="width:3%; background:#cccccc" align="center" | '''1'''
| style="width:20%; background:#cccccc" align="center" | Dinis Cruz
| style="width:20%; background:#cccccc" align="center" | [[O2 Platform]] Project Leader
| style="width:57%; background:#cccccc" align="center" | Sherif is an active OWASP leader and in the past has already made a number of bridges and connections with the Industry. I think he will be a great addition to this Committee
|-
| style="width:3%; background:#cccccc" align="center" | '''2'''
| style="width:20%; background:#cccccc" align="center" | Bruce Mayhew
| style="width:20%; background:#cccccc" align="center" | [[WebGoat]] Project Leader
| style="width:57%; background:#cccccc" align="center" | Sherif is active in the security community, active in OWASP, and has made major contributions to WebGoat. Sherif will be an asset to this committee.
|-
| style="width:3%; background:#cccccc" align="center" | '''3'''
| style="width:20%; background:#cccccc" align="center" | Karim Nathoo
| style="width:20%; background:#cccccc" align="center" | OWASP Ottawa Chapter Co-Leader
| style="width:57%; background:#cccccc" align="center" | Sherif is the driving force behind the Ottawa Chapter.  He is both a very passionate and motivated volunteer and also a talented application security professional.  I am confident he will be an asset to the Global Industry Committee.
|-
| style="width:3%; background:#cccccc" align="center" | '''4'''
| style="width:20%; background:#cccccc" align="center" | Joe Bernik 
| style="width:20%; background:#cccccc" align="center" | Committee member 
| style="width:57%; background:#cccccc" align="center" | Sherif is a driven leader in Canada and will make a great contribution to the Committee.
|-
| style="width:3%; background:#cccccc" align="center" | '''5'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|}

----

Global Industry Committee - Application 7

2011-02-17T17:43:39Z

JBernik:

[[How to Join a Committee|Click here to return to 'How to Join a Committee' page]]

----

{| style="width:100%" border="0" align="center"
|-
! colspan="2" align="center" style="background:#4058A0; color:white" | '''COMMITTEE APPLICATION FORM'''
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Applicant's Name'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | Tony Ucedavelez
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Current and past OWASP Roles'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | List here.
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Committee Applying for'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | Global Industry Committee
|}

----

 

----

Please be aware that for an application to be considered by the board, '''you MUST have 5 recommendations'''. An incomplete application will not be considered for vote.

----

 

----

{| style="width:100%" border="0" align="center"
|-
! colspan="8" align="center" style="background:#4058A0; color:white" | '''COMMITTEE RECOMMENDATIONS'''
|-
! align="center" style="background:white; color:white" | 
! align="center" style="background:#7B8ABD; color:white" | '''Who Recommends/Name'''
! align="center" style="background:#7B8ABD; color:white" | '''Role in OWASP'''
! align="center" style="background:#7B8ABD; color:white" | '''Recommendation Content'''
|-
| style="width:3%; background:#cccccc" align="center" | '''1'''
| style="width:20%; background:#cccccc" align="center" | Joe Bernik 
| style="width:20%; background:#cccccc" align="center" | committee member
| style="width:57%; background:#cccccc" align="center" | Tony is a talented IT Sec pro and would make a great addition to the group
|-
| style="width:3%; background:#cccccc" align="center" | '''2'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|-
| style="width:3%; background:#cccccc" align="center" | '''3'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|-
| style="width:3%; background:#cccccc" align="center" | '''4'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|-
| style="width:3%; background:#cccccc" align="center" | '''5'''
| style="width:20%; background:#cccccc" align="center" |
| style="width:20%; background:#cccccc" align="center" |
| style="width:57%; background:#cccccc" align="center" |
|}

----

Global Industry Committee - Application 6

2011-02-17T02:21:16Z

JBernik:

[[How to Join a Committee|Click here to return to 'How to Join a Committee' page]]

----

{| style="width:100%" border="0" align="center"
|-
! colspan="2" align="center" style="background:#4058A0; color:white" | '''COMMITTEE APPLICATION FORM'''
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Applicant's Name'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | Nishi Kumar
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Current and past OWASP Roles'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | OWASP CBT Project lead and part of OWASP Global Education Committee
|-
| style="width:25%; background:#7B8ABD" align="center" | '''Committee Applying for'''
| colspan="1" style="width:85%; background:#cccccc" align="left" | Global Industry Committee
|}

----

 

----

Please be aware that for an application to be considered by the board, '''you MUST have 5 recommendations'''. An incomplete application will not be considered for vote.

----

 

----

{| style="width:100%" border="0" align="center"
|-
! colspan="8" align="center" style="background:#4058A0; color:white" | '''COMMITTEE RECOMMENDATIONS'''
|-
! align="center" style="background:white; color:white" | 
! align="center" style="background:#7B8ABD; color:white" | '''Who Recommends/Name'''
! align="center" style="background:#7B8ABD; color:white" | '''Role in OWASP'''
! align="center" style="background:#7B8ABD; color:white" | '''Recommendation Content'''
|-
| style="width:3%; background:#cccccc" align="center" | '''1'''
| style="width:20%; background:#cccccc" align="center" | Giorgio Fedon
| style="width:20%; background:#cccccc" align="center" | Owasp Italy TD
| style="width:57%; background:#cccccc" align="center" | Nishi is a talented professional with specific knowledge about large corporates needs for Appsec
|-
| style="width:3%; background:#cccccc" align="center" | '''2'''
| style="width:20%; background:#cccccc" align="center" | Keith Turpin
| style="width:20%; background:#cccccc" align="center" | Project Leader
| style="width:57%; background:#cccccc" align="center" | Nishi represents a large financial sector service and technology provider. She brings extensive industry knowledge and represents a customer set that can directly benefit from OWASP projects. As a industry partner she brings a user based view that will help provide a useful perspective to the committee. Combine this with her excellent technical knowledge as a system architect and she will be an asset as a committee member.
|-
| style="width:3%; background:#cccccc" align="center" | '''3'''
| style="width:20%; background:#cccccc" align="center" | Alexander Fry
| style="width:20%; background:#cccccc" align="center" | GIC Member
| style="width:57%; background:#cccccc" align="center" | In addition to the other stellar recommendations for Nishi; she works hard, does good work, and completes projects. In the GIC, we have a large number of projects to complete and I know Nishi's contributions will be appreciated.
|-
| style="width:3%; background:#cccccc" align="center" | '''4'''
| style="width:20%; background:#cccccc" align="center" | Anurag Agarwal
| style="width:20%; background:#cccccc" align="center" | Project Leader
| style="width:57%; background:#cccccc" align="center" | Nishi is very dynamic and hard working. She has practical experience in handling appsec in a big company. Her experience and knowledge is crucial in OWASP's mission
|-
| style="width:3%; background:#cccccc" align="center" | '''5'''
| style="width:20%; background:#cccccc" align="center" | Joe Bernik 
| style="width:20%; background:#cccccc" align="center" | Former Chapter lead and Commitee member 
| style="width:57%; background:#cccccc" align="center" | Nishi Welcome to the OWASP  Industry commitee and thank you for what I know will be a great contribution!
|}

----