Vandana Verma - Revision history

Vandave at 10:34, 17 September 2019

2019-09-17T10:34:57Z

Vandave at 08:34, 17 September 2019

2019-09-17T08:34:41Z

Vandave at 07:10, 16 September 2019

2019-09-16T07:10:13Z

Vandave: /* Speaker */

2019-08-31T19:24:36Z

‎Speaker

Vandave at 19:22, 31 August 2019

2019-08-31T19:22:48Z

Vandave at 18:54, 31 August 2019

2019-08-31T18:54:21Z

Vandave at 18:53, 31 August 2019

2019-08-31T18:53:11Z

Vandave at 18:52, 31 August 2019

2019-08-31T18:52:48Z

Vandave: /* OWASP Board Elections 2019_Interview Questions:- */

2019-08-31T15:14:50Z

‎OWASP Board Elections 2019_Interview Questions:-

Vandave: /* References:- */

2019-08-30T18:55:24Z

‎References:-

@@ Line 33: / Line 33: @@
 === '''<u>Paper Review Committee</u>''' ===
 ●     Global AppSec Tel Aviv 2019
 ●     Grace Hopper USA 2019 (Security/Privacy Review Track)
 ●     Grace Hopper India 2019 (Security/Privacy Review Track)
 ●     BSides Ahmedabad
 ●     Owasp AppSec Europe 2018

@@ Line 17: / Line 17: @@
 * RootConf, Bangalore 2019 (Developers Conference)
 * Security Guild 2019 - [https://guildconferences.com/conferences/secureguild-2019/ Link]
-* Owasp ApSec EU (July 2018)
+* Owasp AppSec EU (July 2018)
 * Kids Glove at c0c0n (Kerala Police Conference), 2017
@@ Line 33: / Line 33: @@
 === '''<u>Paper Review Committee</u>''' ===
 ●     Global AppSec Tel Aviv 2019
 ●     Grace Hopper USA 2019 (Security/Privacy Review Track)
 ●     Grace Hopper India 2019 (Security/Privacy Review Track)
 ●     BSides Ahmedabad
 === '''<u>International Award and Honours</u>''' ===

@@ Line 3: / Line 3: @@
 Vandana is a global speaker and Women in Cyber Security Advocate. She received Global cybersecurity influencer Award among IFSEC Global's '''"Top Influencers in Security and Fire"''' Category for 2019. She recently received '''Cybersecurity Women of the year award by Women Cyberjutsu Society in the Category “Secure Coder”.''' She has also been listed as one of the top women leaders in this field of technology and cybersecurity in India by Instasafe.
-She works with various communities (InfoseGirls, OWASP, WoSec and null) and is passionate about increasing female participation in Infosec space. She has trained over 400 Diversity Participants around the globe on Web Application Security.
+She works with various communities (InfoseGirls, OWASP, WoSec and null) and is passionate about increasing female participation in Infosec space. She has trained over 600 people around the globe on Web Application Security for free.
 === <u>Community Associations</u> ===

@@ Line 13: / Line 13: @@
 === '''<u>Speaker</u>''' ===
-●   Defcon - [https://www.appsecvillage.com/agenda#h.p_HQ3fM1QEzdVW AppSec Village] (August, 2019)
+* Defcon - [https://www.appsecvillage.com/agenda#h.p_HQ3fM1QEzdVW AppSec Village] (August, 2019)
+* Diana Initiative (August, 2019)
-●   Diana Initiative (August, 2019)
+* RootConf, Bangalore 2019 (Developers Conference)
+* Security Guild 2019 - [https://guildconferences.com/conferences/secureguild-2019/ Link]
-●   RootConf, Bangalore 2019 (Developers Conference)
+* Owasp ApSec EU (July 2018)
+* Kids Glove at c0c0n (Kerala Police Conference), 2017
 === '''<u>Trainer</u>''' ===
-●   Nullcon, Goa 2017
+* Nullcon, Goa 2017
+* BSides Delhi, 2018
-●   BSides Delhi, 2018
+* [https://appsecus2018.sched.com/speaker/vandanaverma AppSec USA (October 2018)]
+* [https://2019.appseccalifornia.org/index.php/speakers/ AppSec California (January 2019)]
-●   [https://appsecus2018.sched.com/speaker/vandanaverma AppSec USA (October 2018)]
+* Training for St. Cloud University, Minnesota (January 2019)
+* Training for Cairo University, Egypt (February 2019)
-●   [https://2019.appseccalifornia.org/index.php/speakers/ AppSec California (January 2019)]
+* Owasp Seasides (March 2019)
+* Global AppSec Tel Aviv (May 2019)
-●   Training for St. Cloud University, Minnesota (January 2019)
+* Assistant Trainer at Blackhat USA (August, 2019)
 === '''<u>Paper Review Committee</u>''' ===

@@ Line 6: / Line 6: @@
 === <u>Community Associations</u> ===
-●   Chapter at OWASP Bangalore
+* Chapter Leader at [https://www.owasp.org/index.php/Bangalore OWASP Bangalore]
+* Asia Lead and Secretary OWASP Women in AppSec(WiA)
-●   Asia Lead and Secretary OWASP Women in AppSec(WiA)
+* Heading [https://infosecgirls.in Infosecgirls]
+* India Lead WoSec (Women of Security)
-●   Heading [https://infosecgirls.in Infosecgirls]
+* Volunteer at Null Community
 === '''<u>Speaker</u>''' ===

@@ Line 5: / Line 5: @@
 She works with various communities (InfoseGirls, OWASP, WoSec and null) and is passionate about increasing female participation in Infosec space. She has trained over 400 Diversity Participants around the globe on Web Application Security.
-=== Community Associations:- ===
+=== <u>Community Associations</u> ===
 ●   Chapter at OWASP Bangalore
@@ Line 66: / Line 66: @@
 ●     Appreciation Letter from Head of the Cyber Security Department, St. Cloud University, Minnesota
-=== '''<u>Upcoming Speaking Engagements:-</u>''' ===
+=== '''<u>Upcoming Speaking Engagements</u>''' ===
 ●     11th September - Keynote Speaker at Global AppSec DC - <nowiki>https://dc.globalappsec.org/</nowiki>
 ●     06th November - All Day DevOps (Online Conference)- (https://www.alldaydevops.com/addo-speakers)
-=== '''<u>Mentions:-</u>''' ===
+=== '''<u>Mentions</u>''' ===
 Hacker Stories with Kim Crawley on Peerlyst (https://www.peerlyst.com/posts/hacker-heroes-vandana-verma-kimberly-crawley)
@@ Line 81: / Line 81: @@
 * WINJA at Nullcon, Goa 2015
-=== '''<u>Social Media:-</u>''' ===
+=== '''<u>Social Media</u>''' ===
 Twitter:- [https://twitter.com/InfosecVandana InfosecVandana]
@@ Line 88: / Line 88: @@
 Email : Vandana.verma@owasp.org
-== OWASP Board Elections 2019_Interview Questions:- ==
+== OWASP Board Elections 2019_Interview Questions ==
 {{#ev:youtube|Vlq4L0z3WaY}}

@@ Line 89: / Line 89: @@
 == OWASP Board Elections 2019_Interview Questions:- ==
-{{#ev:youtube|Vlq4L0z3WaY}}'''1. What are the 3 biggest challenges you think OWASP is facing and how do you think we can solve them?'''
+{{#ev:youtube|Vlq4L0z3WaY}}
 - Bring a Sense of Purpose and Mission back by bringing cultural change. Over the years, many community members and leaders have either quit OWASP or have stopped participating because they did not feel the purpose and mission being served, we need to bring fundamental cultural change which will not only encourage old members to join us again but also bring new participation

@@ Line 89: / Line 89: @@
 == OWASP Board Elections 2019_Interview Questions:- ==
-{{#ev:youtube|Vlq4L0z3WaY}}
+{{#ev:youtube|Vlq4L0z3WaY}}'''1. What are the 3 biggest challenges you think OWASP is facing and how do you think we can solve them?'''
 - Bring a Sense of Purpose and Mission back by bringing cultural change. Over the years, many community members and leaders have either quit OWASP or have stopped participating because they did not feel the purpose and mission being served, we need to bring fundamental cultural change which will not only encourage old members to join us again but also bring new participation
 - New Research (OWASP is widely used and known for its flagship projects such as ASVS, ZAP, Top 10, Testing Guide, etc. The teams producing these projects are awesome. We need to work to see how can we enable more such individuals and teams to work on areas in Web Application Security where we may not have done much work for example - client side security )
-- Decentralization - OWASP is a huge community and it is simply not possible to entirely run it from a single place by a handful of staff and board members. We need to empower the community at large and help them make decisions at a regional level keeping larger OWASP principles in mind. Controlling and Governing a community which has around 20 flagship projects and 200+ chapters with thousands of people from various regions of the world is not a good idea in my opinion
+- Decentralisation - OWASP is a huge community and it is simply not possible to entirely run it from a single place by a handful of staff and board members. We need to empower the community at large and help them make decisions at a regional level keeping larger OWASP principles in mind. Controlling and Governing a community which has around 20 flagship projects and 200+ chapters with thousands of people from various regions of the world is not a good idea in my opinion
-==== 2. Many say the "O" in OWASP stands for "Open", and that we must remain "open" at all costs. In the past this has resulted in allowing known-bullies to persist within our community. Do you feel that remaining "open" is more/less/equally important to ensuring a safe, respectful and harassment free community? And why. ====
+'''2. Many say the "O" in OWASP stands for "Open", and that we must remain "open" at all costs. In the past this has resulted in allowing known-bullies to persist within our community. Do you feel that remaining "open" is more/less/equally important to ensuring a safe, respectful and harassment free community? And why.'''
-- Yes. Remaining Open as well as ensuring a safe, respectful and harassment free community are equally important in my opinion. By being open we enable the purpose and mission of OWASP which will lead to the best minds in the Web Application Security space to come and contribute as well participate with OWASP in making the web a safer place. However, it is equally important to ensure that the community is free from bullies, there should be no tolerance for inappropriate behaviour. It should be of the utmost priority that every opinion must be heard and taken into consideration while making any decisions. One such inappropriate behaviour causes many individuals the discomfort to not being able to participate in the community which I think is totally unacceptable. There should be an open environment where people should be comfortable asking questions as well as answering those. Most often bullies are stopping people from participating, and that's twice as bad. I will try to ensure an environment free from bullying and other negative behavior.
 Healthy financial situation of the foundation is key towards its success. I personally believe if the community functions at its best working towards its mission and purpose, producing awesome projects, evangelizing appsec through our chapters and events, we would be in a situation where in we can garner more financial support from the industry. Our ED is already doing some great work in creating custom packages for events and corporate sponsorships and I would like to help build on that work. We will also reach out to the places in industry where we might not have in the past and seeks funds and grants. I will work closely with staff on finances and ensure we will do what is best in the interest of community and the effective functioning of OWASP
-==== 4. How do you hope/plan to better support and encourage the OWASP projects, chapters, and staff? ====
+'''4. How do you hope/plan to better support and encourage the OWASP projects, chapters, and staff?'''
 - Staff: We need to consider a handful of staff as one of the most important part and key enablers of the OWASP community. We will review and ensure staff does the most important enabling works for the community such as handling the foundation tasks, finance, event management, facilitating and supporting projects and chapters with resources required, etc. Anything and everything which the community can step up and help we will ensure, that is done. Be it by forming committees or workgroups or anything necessary
@@ Line 111: / Line 113: @@
 - Projects: Projects are one of the most important areas we need to work in. I want to create an environment where the project leaders/teams should only have to worry about developing the project (be it by coding or writing, etc.). OWASP should be able to provide the necessary tools, and resources for the project and also should provide platforms for advocacy. We have some awesome projects and we need to invest more in advocating them, which in turn can bring more contribution towards them
-==== 5.  How do you hope/plan to improve OWASP's community? We have had some angry chapters, projects and community members, how do you hope/plan to improve community relations and relationships? ====
+'''5.  How do you hope/plan to improve OWASP's community? We have had some angry chapters, projects and community members, how do you hope/plan to improve community relations and relationships?'''
 -The first and foremost step in this process is to reach out and listen. In my experience, we have had situations in the past, when leaders and community members wanted to express their concerns and never had the opportunity to be listened well, which in turn turned them into angry members. It is important to listen to their concerns and their perspective, and then trying to fix one thing at a time. Identifying the things which affect the highest number of leaders and community members, working together to reach a solution and then moving to the next thing. It is a big community and board members should be more empathetic to the community which as a result brings the community closer to each other and speak out their concerns and address them in a healthy manner.
-==== 6. How do you hope/plan to draw a more diverse group of newcomers to OWASP? Women, people of colour, non-binary, students, second-career, LGBT, people with disabilities, and other groups that are under represented both in our industry and in our community. How do you hope/plan to attract them to our community, events, foundation, projects and chapters? ====
+'''6. How do you hope/plan to draw a more diverse group of newcomers to OWASP? Women, people of colour, non-binary, students, second-career, LGBT, people with disabilities, and other groups that are under represented both in our industry and in our community. How do you hope/plan to attract them to our community, events, foundation, projects and chapters?'''
 - Diversity has been one of my major focus areas throughout my work in the community over the last few years. I am deeply committed to working towards ensuring we have a truly diverse community in all aspects. We have been already working through a lot of initiatives for increasing women participation and I want to focus on attracting all other groups to participate in OWASP by creating an environment where all opinions are mattered and everyone feels comfortable, which is free of abuse and rolling out initiatives to attract participation from all groups and then ensuring they are a part of the larger community
-==== 7. How do you hope/plan to improve the AppSec Global events? Do you feel they need improving? ====
+'''7. How do you hope/plan to improve the AppSec Global events? Do you feel they need improving?'''
 The current board and the ED have already worked in the last few years in improving the overall AppSec Global events format and the sponsorship models which I think is a great work by them. Having said that we always have areas of improvement. I want to bring more focus to our projects in these global appsec events, with project specific events and engage with the larger community by ensuring the content in these conferences are top class. We also need to provide great value to our sponsors at these events without compromising on the overall vendor neutral content and quality which is important for our financial growth too. I want to encourage regional events and provide the ecosystem to make those happen
-==== 8.  How do you plan to handle the  massive stress, time and responsibility of being an OWASP Board member on top of your other professional duties? How many hours a week do you plan to dedicate specifically to the role of OWASP board member? ====
+'''8.  How do you plan to handle the  massive stress, time and responsibility of being an OWASP Board member on top of your other professional duties? How many hours a week do you plan to dedicate specifically to the role of OWASP board member?'''
 - One of the things, I have as a principle in my life is to never shy away from responsibilities. I decide carefully which responsibility I want to take and then fulfil it with complete dedication. My professional work has been kind enough to offer me a flexible work environment. Due to the time zone differences, it is easy for me to spare a couple of hours every day for being on OWASP related meetings and calls along with any other task which needs my attention. Also, I can provide a few hours on weekends. I have managed my time over the last few years by being a part of a lot of other volunteering efforts and I am confident I will be able to do justice to the role of board member in OWASP as well if elected.
 == References:- ==
 Are you a registered member of @owasp? I am.And I am planning to vote for @InfosecVandana in the upcoming Board of Directors Election. So many reasons...She is a long time supporter of all InfoSec communities and people, including women and children. - [https://twitter.com/shehackspurple/status/1166591447396737024 "Tanya Janca"]

@@ Line 93: / Line 93: @@
 == References:- ==
 Are you a registered member of @owasp? I am.And I am planning to vote for @InfosecVandana in the upcoming Board of Directors Election. So many reasons...She is a long time supporter of all InfoSec communities and people, including women and children. - [https://twitter.com/shehackspurple/status/1166591447396737024 "Tanya Janca"]
 I would like to full heartedly endorse the very amazing @InfosecVandana for the @OWASP board. She’s a wise and intelligent leader. The foundation would be fortunate to have her board level service. - [https://twitter.com/manicode/status/1167304263522897920 "Jim Manico"]
 One more vote goes to @InfosecVandana . I fully endorse her, please support her in the coming @owasp board election.  - [https://twitter.com/markfelegyhazi/status/1167451401196199939 Mark Felegyhazi]