OWASP Board Meeting December 1, 2009 Agenda - Revision history

Mtesauro: /* Brazil Conference Issues */ Added link to AppSec Brazil 2009 report

2009-12-22T22:19:55Z

‎Brazil Conference Issues: Added link to AppSec Brazil 2009 report

Sdeleersnyder: /* Education Committee */

2009-12-01T18:19:16Z

‎Education Committee

Sdeleersnyder: /* Chapters Committee */

2009-12-01T18:18:25Z

‎Chapters Committee

Brennan: /* Projects Committee */

2009-12-01T18:11:25Z

‎Projects Committee

Sdeleersnyder at 17:12, 1 December 2009

2009-12-01T17:12:40Z

Sdeleersnyder: /* NEW BUSINESS */

2009-12-01T17:02:25Z

‎NEW BUSINESS

Sdeleersnyder at 17:01, 1 December 2009

2009-12-01T17:01:59Z

Sdeleersnyder: /* NEW BUSINESS */

2009-12-01T17:01:03Z

‎NEW BUSINESS

Dinis.cruz: /* OTHER */

2009-12-01T16:32:14Z

‎OTHER

Paulo Coimbra: /* Projects Committee */

2009-12-01T15:28:41Z

‎Projects Committee

← Older revision		Revision as of 22:19, 22 December 2009
Line 96:		Line 96:

	[https://docs.google.com/Doc?docid=0ATb3QwFMHCXrZGdubjI3ZHNfMTFndmRoNm5keg&hl=en Google doc] with background information		[https://docs.google.com/Doc?docid=0ATb3QwFMHCXrZGdubjI3ZHNfMTFndmRoNm5keg&hl=en Google doc] with background information
		+
		+	'''Update:''' The group has produced a report [http://www.owasp.org/index.php/OWASP_Investigation_-_AppSec_Brazil_2009 here] --[[User:Mtesauro\|Mtesauro]] 22:19, 22 December 2009 (UTC)

← Older revision		Revision as of 18:19, 1 December 2009
Line 136:		Line 136:

	- [[Proposed statement]] about OWASP getting involved in certification.		- [[Proposed statement]] about OWASP getting involved in certification.
		+
		+	2010 focus:
		+	* academic outreach
		+	**Increase # academic members
		+	**Introduce OWASP material into curriculae
		+	**Support Appsec research grants for students
		+	**Organise events at universities
		+	**Participation in research programs (e.g. advisory boards)
		+	*OWASP BootCamp
		+	*Roll out College OWASP Education kit through chapters

	==Projects Committee==		==Projects Committee==

@@ Line 120: / Line 120: @@
 ==Chapters Committee==
 - How many active chapters?  How many leaders showed up at Summit from them?  '''What is action here?'''
 - Start "OWASP College Chapters" program.  Provide a full "kit" of materials to college student chapter leads.  Goal is to get a touchpoint in every college with a CS department around the world.  Chapter goals are to raise OWASP awareness by students and to influence the curriculum.
 ==Education Committee==

@@ Line 137: / Line 137: @@
 - Proposal to start SOC with 90K grant [http://www.owasp.org/index.php/OWASP_Board_Meetings_June_09 Update]
-- [http://www.owasp.org/index.php/Crm OWASP-CRM Project] - Overview/Update/Roll-out for OWASP Foundation.
+- [http://www.owasp.org/index.php/Crm OWASP-CRM Project] - Overview/Update/Roll-out for OWASP Foundation - [http://www.owasp.org/images/e/e4/CM_Capture_8.png click here]
 - OWASP.COM Google Domain  '''what is action?'''

@@ Line 21: / Line 21: @@
 Outstanding items for 2010
-* [https://docs.google.com/a/owasp.org/Doc?id=dhtj4s2_1crpq2jcd&hl=en RFQ] Outsourcing OWASP Website/Mailing Lists etc & [http://www.owasp.org/index.php/OWASP_Board_Meeting_July_09 Larry Support]
+* [https://docs.google.com/a/owasp.org/Doc?docid=0ASUwHYYmOdvrZGh0ajRzMl8xY3JwcTJqY2Q&hl=en RFQ] Outsourcing OWASP Website/Mailing Lists etc & [http://www.owasp.org/index.php/OWASP_Board_Meeting_July_09 Larry Support]
 ** Question:  Is the scope of this RFQ just the OWASP archive proposed by Matt Tesauro or all of the OWASP IT infrastructure?

@@ Line 31: / Line 31: @@
 * Welcome New Board Members - Matt Tesauro and Eoin Keary
 * OotM Budget + request by NL & IBWAS for Kuai
 ==Finance Report==

@@ Line 188: / Line 188: @@
 ==OTHER==
+* '''New committee''': [[OWASP Connections Committee]]
--New committee - Dinis (Connections committee)
+* Linked'In Group [http://www.linkedin.com/groups?gid=36874&trk=hb_side_g 4715 Members of Linked'In Group] 37 Moderators co-sysops for discussion groups
+* Public Relations [http://www.owasp.org/index.php/Category:OWASP_Newsletter OWASP Newsletter]
-- Linked'In Group
+* Public Relations budget 2010 (what committee)
 =CLOSING=

@@ Line 142: / Line 142: @@
 - Proposal to start a "Provider Registry" for ASVS - http://code.google.com/p/owasp-project-management/wiki/Providers.   Personally, I'm not sure that it's a great idea. Without some attestation as to the skills of the organization, it's essentially worthless.  And I don't think that OWASP is in a good position either philosophically or organizationally to be doing reviews of organization's skills. To me, this is just like certification.  We shouldn't do it, but it might be ok for us to define some criteria for organizations that do it.  So I can imagine an "Application Security Verifier Criteria" that lists certain criteria for performing verification services (years of experience, number of apps, OWASP member, OWASP contributor, number of confirmed vulnerabilities found, platforms supported, ASVS levels supported, etc...)
-**GPC's State of Affairs
+*GPC's State of Affairs:
-** Participation at the [[OWASP AppSec Iberia 2009|IBWAS09]]
+**Participation at the [[OWASP AppSec Iberia 2009|IBWAS09]]
-** [http://globalprojectscommittee.wordpress.com/2009/11/27/new-drive-for-project-reviewers/ Reviewers Drive],
+**[http://globalprojectscommittee.wordpress.com/2009/11/27/new-drive-for-project-reviewers/ Reviewers Drive],
-** On its way is the work to finish up the release template associated with the new project details page - after completion all the project details pages should be linked with each and all projects' pages,
+**On its way is the work to finish up the release template associated with the new project details page - after completion all the project details pages should be linked with each and all projects' pages,
-** One project - [[:Category:OWASP JBroFuzz|OWASP JBroFuzz]] - has already been assessed against the new assessment criteria 2.0.
+**One project - [[:Category:OWASP JBroFuzz|OWASP JBroFuzz]] - has already been assessed against the new assessment criteria 2.0.
-** [[OWASP Projects Dashboard|Five projects]] under assessment,
+**[[OWASP Projects Dashboard|Five projects]] under assessment,
-** Two new projects recently set up:
+**Two new projects recently set up:
-*** [[:Category:OWASP Security Assurance Testing of Virtual Worlds Project|OWASP Security Assurance Testing of Virtual Worlds]], led by Rick Zhong,
+***[[:Category:OWASP Security Assurance Testing of Virtual Worlds Project|OWASP Security Assurance Testing of Virtual Worlds]], led by Rick Zhong,
-*** [[:Category:OWASP_CBT_Project|OWASP Computer Based Training Project (OWASP CBT Project)]], led by Nishi Kumar.
+***[[:Category:OWASP_CBT_Project|OWASP Computer Based Training Project (OWASP CBT Project)]], led by Nishi Kumar.
 ==Industry Committee==