Difference between revisions of "OWASP Board Votes"

Modification: The original proposal removed the board approval from specific types of reimbursements and payables. However, the intent of the change (streamlining payments) was blocked by the need for board members (Chairman or Treasurer) to "release" the funds from the US bank account. The proposed modification would allow for the release of funds from the US bank for any of the specific reimbursement categories below. As we are currently doing, the details of all payables will be sent to the board during the bi-monthly payment batches so the board is apprised of all payables regardless of the categories below.

--Reimbursement from chapter/project funds which have a sufficient balance capped at $10k -- Routine expenses who already have budget allocated e.x. Mobile phone bill capped at $10k -- Expenses under $10k which O&A Committee have approved and are already budgeted -- Payroll expenses that are the same as the past month’s salary (e.g. same as always) since for salaried staff, payroll expense is fixed and for hourly staff, hours will be approved by Matt Tesauro -- Treasurer will review all salary payments on at least a quarterly basis -- Board must approve any changes to payroll outside the above conditions.

The number of directors of the Foundation shall be no less than five and no more than seven. Each director shall hold office for two years unless duly removed. *An individual is limited to no more than two (2) terms in any ten year period.* Each director must be elected as prescribed in the election policy and procedure. Josh Sokol motions, Tom Brennan seconds

1. Allow the organisers of the Summit to spend up to $50k USD using funds allocated from the original $150k seed allocation to fund OWASP staff attendance and other activities as set set out in emails to the Board and in the Summit Budget

2. Cost to OWASP - up to $50k USD. Organisers will continue to work with OWASP staff to ensure that sponsorships and income is booked through the Foundation, as the event will likely make a loss. The Board requests the Summit organizers to minimise spending on necessary items and aim for break even, to ensure as minimal a loss as possible. However, the Board should be under no illusions that the event will break even, and will likely make a loss of up to $50k.

3. Debrief. Once all bills are paid and certainly before AppSec USA, the Board must have a one hour debrief with OWASP's Event Manager and the Summit organisers to determine if OWASP will ever do such an event again, what changes need to be made (regional / global, location, timing, funding, marketing, media, etc), objectives hit, and lessons learned. Andrew van der Stock motions, Josh Sokol seconds

... Attendance in person or virtually by board members is required at no less than 75% of the total meetings each year and shall be highly encouraged to meet in person at least once annually at a date to be announced and agreed upon. To be considered as "attended", the board member must attend at least 90% of the meeting, starting at the published scheduled time until the published end time or the meeting is adjourned (whichever is earlier). Attendance is tabulated by the Executive Director or delegate within seven days after every scheduled meeting for the purpose of determining if the 75% attendance requirement has been met, and the tabulation is based upon the entire calendar year. … Josh Sokol motioned, Michael Coates seconds

1). Explicit project rule that Lab and Flagship level projects must have more than one leader. 2). Lab and Flagship projects that are rating the effectiveness of tools need to have a perceived independence amongst the project leaders as perceived by the reviewers. Andrew moves, Matt K seconds

Status = Approved via email vote completed on Oct. 19. 2015

SECTION 4.07 Participation. Participation in OWASP activities (conferences, meetings, mailings lists, projects, etc) does not require membership, but is subject to adherence to the OWASP Code of Ethics, and OWASP leaders may revoke the privilege of participation to those who choose not to abide by that code. Notification of such a revocation must be made to the individual in writing, with the OWASP Board of Directors CC’d for inclusion in the Foundation records. If an individual believes that this revocation is unjustified, then they have the option to appeal the decision by notifying the OWASP Board of Directors in writing within 14 days of the original notification.

OWASP Statement on the Security of the Internet 2014 (Yes/Affirm or No/Against)

This may place our training at risk, but if permitted we will still provide the free training at RSA and the OWASP speaking slot. vote on mailing list (Yes/Affirm or No/Against)