This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "May 4, 2010"

From OWASP
Jump to: navigation, search
(Committees updates)
 
(10 intermediate revisions by 5 users not shown)
Line 3: Line 3:
 
1-866-534-4754 Code: "OWASP" (69277)
 
1-866-534-4754 Code: "OWASP" (69277)
  
 +
===Follow up from April===
  
'''Vote Required'''
+
* '''Q1 P&L Review'''
  
ESAPI Project Manager vote from April postponed until June
+
Please click [http://www.owasp.org/index.php/File:Financial_Reports_-_2010_Q1.xlsx here] for the revised 2010 Q1 Financial Reports.
 +
 
 +
* '''ESAPI Project Manager''' vote from April postponed until June
  
 
Approval required to hire OWASP intern for summer.  Would be 40 hrs/week at $10/hr.  Intern will provide technical development support to OWASP projects, currently targeting ESAPI, but we are looking for other high priority OWASP projects that we should support if the board has other suggestions.  Will work out of the Columbia office under the guidence of Jeff and Dave.
 
Approval required to hire OWASP intern for summer.  Would be 40 hrs/week at $10/hr.  Intern will provide technical development support to OWASP projects, currently targeting ESAPI, but we are looking for other high priority OWASP projects that we should support if the board has other suggestions.  Will work out of the Columbia office under the guidence of Jeff and Dave.
  
Vote Required on continuation of 60/40 split or donation funding status for projects.  Do we continue to allow companies designate a portion of their membership fees to a specific project?
+
* '''Outsourcing OWASP's IT
 
 
Should OWASP take a stand or publicise an opinion on the F5 suit vs. Imperva?
 
 
 
'''Outsourcing OWASP's IT
 
  
 
Clarification of the scope of the RFQ for Dedicated Hosting
 
Clarification of the scope of the RFQ for Dedicated Hosting
Line 23: Line 22:
 
[https://docs.google.com/Doc?docid=0ATb3QwFMHCXrZGdubjI3ZHNfMjRmNThicnNnag&hl=en Original RFQ]
 
[https://docs.google.com/Doc?docid=0ATb3QwFMHCXrZGdubjI3ZHNfMjRmNThicnNnag&hl=en Original RFQ]
  
*'''Global Projects and Connections Committees/Dinis Cruz '''
 
** '''Meeting with a [http://www.english.umic.pt/index.php?option=com_frontpage&Itemid=307 Portuguese government agency/(UMIC) ]'''
 
*** UMIC will participate in the OWASP's [[IBWAS10]]
 
*** UMIC has challenged OWASP to jointly work on a concept of a [http://www.english.umic.pt/index.php?option=com_content&task=view&id=3080&Itemid=87 ICT/WebAppSec Academy] 
 
** '''OWASP Training'''
 
*** [http://www.owasp.org/index.php/London/Training/OWASP_projects_and_resources_you_can_use_TODAY#tab=Training_-_April.2C_16th.2C_2010_.28Closed.29 First course has been delivered] 
 
*** [http://www.owasp.org/index.php/London/Training/OWASP_projects_and_resources_you_can_use_TODAY#tab=Training_-_May.2C_28th.2C_2010 Second course already scheduled]
 
*** Currently finalizing the arrangements for the next batch of courses: Portugal, Ireland, Italy.
 
**'''Projects Sponsorship Model'''
 
*** We have received a [http://docs.google.com/View?id=dcn8962c_81hmcf4rgm email from Softtek that has triggered this issue]
 
*** Paulo is proposing we use a model similar to [http://wiki.osgeo.org/wiki/Project_Sponsorship this one]
 
*** We need to discuss whether or not the policy, that we have been pushing to set up but haven’t implemented still and under which projects leaders and contributors can’t be paid for their work, is to be enforced.
 
*** We need to discuss and find out one solution to acknowledge the sponsor role in those cases in which a project leader time is being paid by his employer for him to work in a OWASP project.
 
**'''Project Details Tab'''
 
*** http://www.owasp.org/index.php/Projects/Live_CD/GPC
 
*** http://www.owasp.org/index.php/Projects/Top_10/GPC 
 
  
'''Follow up from April'''
+
===Vote Required===
 +
 
 +
* Vote: continuation of 60/40 split or donation funding status for projects (see GPC update below on this topic)
 +
** Do we continue to allow companies designate a portion of their membership fees to a specific project?
 +
** Should be money directly allocated to projects, chapters or committees be a 100/0 split (i.e. 0% to OWASP)
 +
 
 +
* Vote: Should OWASP take a stand or publicise an opinion on the F5 suit vs. Imperva?
 +
 
 +
* Vote:  Approval of OWASP Annual Report.
 +
 
 +
* Vote: [https://spreadsheets.google.com/a/owasp.org/viewform?formkey=dHpid2s2TEcwR2VpMEcxZU40X1p5ZHc6MQ Which training logo do you like best?]
 +
 
 +
=== Committees updates===
 +
 
 +
*'''OWASP Connections Committee'''
 +
** by Eoin Keary
 +
*** OWASP Annual Report
 +
*** OWASP April Newsletter
 +
*** OWASP Top 10 Release (Marketing efforts and Book)
 +
*** Getting Stats for OWASP Website and impact of Media efforts
 +
** by Dinis Cruz
 +
*** '''Meeting with a [http://www.english.umic.pt/index.php?option=com_frontpage&Itemid=307 Portuguese government agency/(UMIC) ]'''
 +
**** UMIC will participate in the OWASP's [[IBWAS10]]
 +
**** UMIC has challenged OWASP to jointly work on a concept of a [http://www.english.umic.pt/index.php?option=com_content&task=view&id=3080&Itemid=87 ICT/WebAppSec Academy] 
 +
*** '''OWASP Training'''
 +
****[http://www.owasp.org/index.php/London/Training/OWASP_projects_and_resources_you_can_use_TODAY#tab=Training_-_April.2C_16th.2C_2010_.28Closed.29 First course has been delivered] 
 +
****[http://www.owasp.org/index.php/London/Training/OWASP_projects_and_resources_you_can_use_TODAY#tab=Training_-_May.2C_28th.2C_2010 Second course already scheduled]
 +
**** Currently finalizing the arrangements for the next batch of courses: Portugal, Ireland, Italy.
 +
 +
*'''Global Projects Committee'''
 +
** by Dinis Cruz
 +
***'''Projects Sponsorship Model'''
 +
**** We have received a [http://docs.google.com/View?id=dcn8962c_81hmcf4rgm email from Softtek that has triggered this issue]
 +
**** Paulo is proposing we use a model similar to [http://wiki.osgeo.org/wiki/Project_Sponsorship this one]
 +
**** We need to discuss whether or not the policy, that we have been pushing to set up but haven’t implemented still and under which projects leaders and contributors can’t be paid for their work, is to be enforced.
 +
**** We need to discuss and find out one solution to acknowledge the sponsor role in those cases in which a project leader time is being paid by his employer for him to work in a OWASP project.
 +
***'''Project Details Tab'''
 +
**** http://www.owasp.org/index.php/Projects/Live_CD/GPC
 +
**** http://www.owasp.org/index.php/Projects/Top_10/GPC 
 +
 
 +
*'''Global Chapters Committee'''
 +
** by Dinis Cruz
 +
*** Still trying to get what is the status of this committee
 +
*** Issue with 'Commercial' bias of OWASP local chapters
 +
 +
*'''Global Education Committee'''
 +
** by Dinis Cruz
 +
*** Working with them to create Training Packs (to be used on the Chapter-lead training events
 +
 
 +
*'''Global Membership Committee'''
 +
** by Seba
 +
*** See April's meeting [http://www.owasp.org/index.php/GlobalMembershipCommittee_Notes_20100419 minutes]
 +
 
  
Q1 P&L Review
+
*'''Global Conferences Committee'''
 +
** by ______________
 +
*** Board Member [http://www.owasp.org/index.php/Category:OWASP_AppSec_Conference]

Latest revision as of 16:10, 11 May 2010

Agenda

1-866-534-4754 Code: "OWASP" (69277)

Follow up from April

  • Q1 P&L Review

Please click here for the revised 2010 Q1 Financial Reports.

  • ESAPI Project Manager vote from April postponed until June

Approval required to hire OWASP intern for summer. Would be 40 hrs/week at $10/hr. Intern will provide technical development support to OWASP projects, currently targeting ESAPI, but we are looking for other high priority OWASP projects that we should support if the board has other suggestions. Will work out of the Columbia office under the guidence of Jeff and Dave.

  • Outsourcing OWASP's IT

Clarification of the scope of the RFQ for Dedicated Hosting

  • Is this just moving the 'iron' to another place or is this application maintenance as well?
  • Do we also need to look for a hosted Wiki service?
  • What does success look like for this project?

Original RFQ


Vote Required

  • Vote: continuation of 60/40 split or donation funding status for projects (see GPC update below on this topic)
    • Do we continue to allow companies designate a portion of their membership fees to a specific project?
    • Should be money directly allocated to projects, chapters or committees be a 100/0 split (i.e. 0% to OWASP)
  • Vote: Should OWASP take a stand or publicise an opinion on the F5 suit vs. Imperva?
  • Vote: Approval of OWASP Annual Report.

Committees updates

  • Global Chapters Committee
    • by Dinis Cruz
      • Still trying to get what is the status of this committee
      • Issue with 'Commercial' bias of OWASP local chapters
  • Global Education Committee
    • by Dinis Cruz
      • Working with them to create Training Packs (to be used on the Chapter-lead training events
  • Global Membership Committee
    • by Seba


  • Global Conferences Committee
    • by ______________
      • Board Member [1]