This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Governance/ProjectProgramModels"
Sarah Baso (talk | contribs) |
|||
Line 13: | Line 13: | ||
| '''Summary Description''' | | '''Summary Description''' | ||
||<!--Option 1--> | ||<!--Option 1--> | ||
− | + | Drop the Lab designation, and only have Incubator and Flagship projects. Flagship project status would be determined by community vote, and our resources would go towards developing Flagship projects, based on community input. Incubators would get less attention and support. | |
− | * | + | *Keeps both Flagships and Incubators under the same program (as official "OWASP Projects"). |
− | * | + | *Would remove resources from Incubators and funnel the majority of resources into the Flagship Projects. |
||<!--Option 2--> | ||<!--Option 2--> | ||
− | + | Separate focus of OWASP projects into two separate programs. One will focus on increasing the quality of a handful of projects selected by the community, and the other program will focus on developing a platform for new leaders that facilitates innovation, research, and testing. | |
− | * | + | *Takes two community requests (increase quality, platform for innovation), and separate each request into to programs. |
− | * | + | *Allows the foundation to have clearly defined goals for each program. |
||<!--Option 3--> | ||<!--Option 3--> | ||
− | This is the approach we are currently using. This approach requires that the community conduct project reviews to graduate projects, and it requires a twice yearly project audit to demote projects that are currently inactive. | + | This is the approach we are currently using. This approach requires that the community conduct project reviews to graduate projects, and it requires a twice yearly project audit to demote projects that are currently inactive. |
*Current approach | *Current approach | ||
− | * | + | *Requires a large task force of community reviewers to make sure our project graduation process is functioning efficiently. |
|- | |- | ||
| '''How are Flagships Selected?''' | | '''How are Flagships Selected?''' | ||
Line 32: | Line 32: | ||
| '''New Project Designations''' | | '''New Project Designations''' | ||
|| | || | ||
− | *Official OWASP Project: | + | *Official OWASP Project: Projects that OWASP actively maintains and promotes. In reality, these are what flagship projects should be under the current system. The majority of our resources and time should be used to improve the quality and sustain these projects. |
− | *OWASP | + | *OWASP Supported Projects: These would be similar to what the incubators are under our current system. Encourages innovation and it allows starting members to become engaged and involved. These can be managed in the same way we manage incubators now. |
− | *OWASP Sunset Projects: | + | *OWASP Sunset Projects: Projects like ESAPI or WebScarab would fit under this title. These are projects that are still being used by consumers, but that we will not directly support as they are not actively maintained or being worked on. |
|| | || | ||
− | *OWASP Flagship Project: | + | *OWASP Flagship Project: Projects that OWASP actively maintains and promotes. The majority of our resources and time would be used to improve the quality and sustain these projects. |
*OWASP Incubator Projects: These would be all of the rest of our projects. These can be managed in the same way we manage incubators and lab projects now. | *OWASP Incubator Projects: These would be all of the rest of our projects. These can be managed in the same way we manage incubators and lab projects now. | ||
− | *OWASP Sunset Projects: This is the same as Proposal 1. Projects like ESAPI or WebScarab would fit under this title. These are projects that are still being used by consumers, but that we | + | *OWASP Sunset Projects: This is the same as Proposal 1. Projects like ESAPI or WebScarab would fit under this title. These are projects that are still being used by consumers, but that we will not directly support as they are not actively maintained or being worked on. |
|| | || | ||
− | *OWASP Flagship Project: | + | *OWASP Flagship Project: Projects that OWASP actively maintains (but does not manage) and promotes. |
*OWASP Lab Projects: Projects with beta or stable release that wish to graduate to Lab. | *OWASP Lab Projects: Projects with beta or stable release that wish to graduate to Lab. | ||
− | *OWASP Incubator Projects: | + | *OWASP Incubator Projects: All new projects, managed the same way we manage incubators projects now. |
− | *OWASP Sunset Projects: Projects like ESAPI or WebScarab would fit under this title. These are projects that are still being used by consumers, but that we | + | *OWASP Sunset Projects: Projects like ESAPI or WebScarab would fit under this title. These are projects that are still being used by consumers, but that we will not directly support as they are not actively maintained or being worked on. |
|- | |- | ||
| '''Project Quality''' | | '''Project Quality''' | ||
||<!--Option 1--> | ||<!--Option 1--> | ||
− | Consolidate | + | Consolidate Foundation resources to help improve quality of Flagship projects only. This will give the majority of our resources to a handful of projects. |
||<!--Option 2--> | ||<!--Option 2--> | ||
− | *Flagship Project Program: As mentioned above, these projects would be the ones OWASP actively maintains and seeks to increase the quality of. We can re-name this program. | + | *Flagship Project Program: As mentioned above, these projects would be the ones OWASP actively maintains and seeks to increase the quality of. We can re-name this program (if necessary). Recommended that we limit the number of projects in this program for any given year (i.e. no more than 6 projects). Additionally, Flagship projects would be voted on by the community (which projects should be flagship). |
*'''Primary Goal of the Program''': To increase the quality of a select few number of OWASP projects selected by our community stakeholders and consumers. | *'''Primary Goal of the Program''': To increase the quality of a select few number of OWASP projects selected by our community stakeholders and consumers. | ||
*OWASP Projects Program: This would be similar to what we have now which is a platform for research and innovation. All projects under this platform would have the same designation unless they are sunset or inactive projects. They would get the same benefits they do now and the same opportunities. | *OWASP Projects Program: This would be similar to what we have now which is a platform for research and innovation. All projects under this platform would have the same designation unless they are sunset or inactive projects. They would get the same benefits they do now and the same opportunities. | ||
Line 58: | Line 58: | ||
| '''Project Reviews''' | | '''Project Reviews''' | ||
||<!--Option 1--> | ||<!--Option 1--> | ||
− | + | The Foundation facilitates a technical review of the community selected "Official" projects once a year, and the Incubator projects only get reviewed if they ask for one. The reviews are conducted by the community for supported projects. | |
||<!--Option 2--> | ||<!--Option 2--> | ||
*For the OWASP Projects Program, we would only conduct reviews for those projects that ask for them. The reviews will be primarily to give feedback to the leader about their research/ideas and on their project health. | *For the OWASP Projects Program, we would only conduct reviews for those projects that ask for them. The reviews will be primarily to give feedback to the leader about their research/ideas and on their project health. | ||
Line 69: | Line 69: | ||
The majority of our resources and funding will go towards the development of higher quality Official OWASP projects. Supported projects will still have access to resources, but they will be minimal. | The majority of our resources and funding will go towards the development of higher quality Official OWASP projects. Supported projects will still have access to resources, but they will be minimal. | ||
||<!--Option 2--> | ||<!--Option 2--> | ||
− | Each program would need to have their own budget. The Flagship program would only spend their funds on items that increase project quality. | + | Each program would need to have their own budget. The Flagship program would only spend their funds on items that increase project quality. It would be required that flagship submit a detailed project plan and budget. The Projects Program would have a budget that would fund items like project dev work, the project summit, OSS, marketing/design costs, etc. |
||<!--Option 3--> | ||<!--Option 3--> | ||
All projects get access to funding; however, Flagships get priority for funding for project development work. Funding items like project dev work, the project summit, OSS, marketing/design costs, etc are still available to all projects. | All projects get access to funding; however, Flagships get priority for funding for project development work. Funding items like project dev work, the project summit, OSS, marketing/design costs, etc are still available to all projects. |
Revision as of 22:02, 2 May 2014
Purpose
OWASP needs help from our community to define an OWASP Projects Program model that will meet the needs of our leaders. To do so we are engaging the community to discuss and flush out different options. We would like to have a vote on this to ensure that the community has a say in how the foundation moves forward.
The Options
Please feel free to add additional bullets to any of the cells. Please do not remove existing items.
Option | 1 - Flagships get majority of resources to increase quality. | 2 - Develop two separate programs: Quality focused and Innovation focused | 3 - Community project review centric model |
Summary Description |
Drop the Lab designation, and only have Incubator and Flagship projects. Flagship project status would be determined by community vote, and our resources would go towards developing Flagship projects, based on community input. Incubators would get less attention and support.
|
Separate focus of OWASP projects into two separate programs. One will focus on increasing the quality of a handful of projects selected by the community, and the other program will focus on developing a platform for new leaders that facilitates innovation, research, and testing.
|
This is the approach we are currently using. This approach requires that the community conduct project reviews to graduate projects, and it requires a twice yearly project audit to demote projects that are currently inactive.
|
How are Flagships Selected? | Community Vote | Community Vote | Community Project Health and Quality Reviews |
New Project Designations |
|
|
|
Project Quality |
Consolidate Foundation resources to help improve quality of Flagship projects only. This will give the majority of our resources to a handful of projects. |
|
The foundation has no direct influence over the quality of the project. The quality of the project is dependent on the project leader’s individual time, resources, and output. |
Project Reviews |
The Foundation facilitates a technical review of the community selected "Official" projects once a year, and the Incubator projects only get reviewed if they ask for one. The reviews are conducted by the community for supported projects. |
|
Project reviews are only done for those projects that want reviews, or that would like to graduate to the next level. |
Resources and Funding |
The majority of our resources and funding will go towards the development of higher quality Official OWASP projects. Supported projects will still have access to resources, but they will be minimal. |
Each program would need to have their own budget. The Flagship program would only spend their funds on items that increase project quality. It would be required that flagship submit a detailed project plan and budget. The Projects Program would have a budget that would fund items like project dev work, the project summit, OSS, marketing/design costs, etc. |
All projects get access to funding; however, Flagships get priority for funding for project development work. Funding items like project dev work, the project summit, OSS, marketing/design costs, etc are still available to all projects. |
Positives of this approach |
|
|
|
Negatives of this approach |
|
|
|
Any other considerations |
|
|
|
Additional Comments
Use this space to provide additional comments on any of the existing text. For example, perhaps you disagree with something that is above. Please note your thoughts in this section.