April 30, 2014

Dial In Info

Notice of Recording

• Notice to all attendees - board meetings are recorded and publicly available as of March, 2013
• Joining the call acknowledges your awareness of recording and consent to be recorded and public dissemination of the recording.

• [Meeting Recording]

Time

9:00am - 11:00am PST

Location

Change of Location

As an experiment we'll replace Google Hangout will replace gotomeeting for this meeting. Google hangout has been trialled by all members of the board and appears to be a better solution. In addition, the meeting is streamed and archived over youtube for easy viewing by anyone.

Attending the meeting?
Invitations have been sent out to the board members and executive director with the link

Public Stream & Meeting Archive on Youtube
Streaming & archived board meeting for anyone to view:
http://www.youtube.com/watch?v=5dLSjz0EJb0

Attendance Tracker
Board Meeting Attendance Tracker

Meeting Minutes
Meeting Minutes

Reading Material

It is a requirement as a board member to fully read all material prior to the start of the meeting

Meeting Agenda

Call to Order /OWASP Mission

• Administrative (List of attendees and Agenda bashing (only if last-minute changes to the agenda are needed) (5 min)

Reports

Chairmain's Report - Michael Coates

• OWASP Community Updates
  • Next update - May 6, 2014
  • Last Update - April 22
• Executive Director & Board Sync

Updated from Members at Large - Fabio Cerullo, Eoin Keary, & Jim Manico

• Jim's Update
  • Working with web-editors group. Will publish new "editor" template and plan for wiki update-a-thon later today (wednesday)
  • Initial thoughts on OWASP certification sent to board, needs further discussion
  • Continued concerns on project management at OWASP
  • Actively working on multiple projects (ASVS, Proactive Controls, Various Java Projects, etc)

Executive Director Report - Sarah Baso

• Operations Update - Rollup Report Sarah Baso
  • Financial Update - Q1 2014 Financials, Staff and Board Expenditures for Q1 2014, Vendors Paid Out Q1
  • Samantha Groves Project Manager Report
  • March Membership Report
  • Conference Manager Report
  • Community Manager Update

Old/Unfinished Business

All active board proposals are listed here

• Whistleblower policy - What at is the initiation process? what is the reporting process? What are the deliverables at the end of the process? [Action - josh to review policy and draft propose revisions]
• OWASP Certification Program [Action: Jim and Tobias will take point on putting together pros/cons and proposed item for community vote]
  • Initial comments to the board from Jim: http://lists.owasp.org/pipermail/owasp-board/2014-April/013438.html
  • Comments/Concerns from Kevin Wall: http://lists.owasp.org/pipermail/owasp-board/2014-April/013439.html

New Business

All active board proposals are listed here

• [Sarah] Financial - transition to KPMG for European accounting needs
• [Sarah] Financial - thoughts on tax deductibility of individual memberships
• [Sarah] Business plan and Recommendations for project related consulting work
• [Michael] Board Member Focus Areas
  • Board member commitment to 1 core area - not the decision maker of the area, but an invested leader
  • Goal - (1) increase involvement and awareness (2) OWASP.next shift to group of doers
  • Areas for consideration: Community, Chapters, Projects-Code, Projects-Documentation, Conferences, Wiki, Membership
• [Michael] Community Leadership Model
  • Goal - (1) Empower OWASP leaders (2) learn positives/negatives from committee
  • Proposal
• [Sarah] Community functionality on new MemberNation portal - continue with beta testing?
• [Sarah] Chapters - how to move forward with Bolivia brand abuse situation
• [Sarah] Project review framework - moving forward as is or expecting changes
• [Samantha]Require a strategic direction for our OWASP Projects Program.
• [Tom / Fabio] Proposal

Adjournment

• Next meeting date/time: In person @ AppSec Europe in Cambridge - June 27