OWASP Strategic Goals

• 2014
• 2013
• 2012

2014 OWASP Foundation Strategic Goals

• Define an engagement program that facilitates volunteer involvement by enabling volunteers to self-identify and create a plan to incentivize and measure their volunteerism.
  • Board Sponsor: Tom Brennan
  • Operational Planning, Discussion, and Outcomes: https://www.owasp.org/index.php/OWASP_Strategic_Goals/2014/Volunteer_Engagement_Program

• Mobilize OWASP volunteers to help address security issues in large software systems/applications/frameworks.
  • Metric: Build an OWASP program that incentivizes the security community to find and fix security problems in software.
  • Metric: By the end of the year we have at least two successful completed initiatives reviewing security issues in one or two of the major frameworks
  • Board Sponsor:
  • Operational Planning, Discussion, and Outcomes: https://www.owasp.org/index.php/OWASP_Strategic_Goals/2014/Address_Security_Issues

• Strengthen OWASP chapters and increase Chapter’s abilities to spread message of OWASP through locally organized and run events.
  • Metric: Chapter participation in at least 60 local events (events hosted by chapter or chapter participation in a non-OWASP outreach/appsec event) by the end of the year.
  • Metric: Hold at least 4 (quarterly) virtual chapter leader meetings in addition to in person chapter meetings (at global appsec conferences) to incentivize more collaboration and support between chapter leaders
  • Metric: All chapters with funds in excess of $5000 and 10% of chapters with less than $5000 in funds engaged in annual budgeting.
  • Metric: Annual survey of all chapter leaders asking for their alignment to our mission and strategic goals.
  • Board Sponsor: Josh Sokol
  • Operational Planning, Discussion, and Outcomes: https://www.owasp.org/index.php/OWASP_Strategic_Goals/2014/Strengthen_Chapters

• Build a scalable OWASP training program that spreads security training around the world
  • Metric: At least 6 total training events with at least 3 being free to attend by the end of the year (in addition to global appsec conferences) - live or online.
  • Metric: OWASP delivered training to 800 additional people (i.e. in addition to the number attending our AppSec training programs last year).
  • Board Sponsors: Fabio Cerullo, Tobias Gondrom, Eoin Keary
  • Operational Planning, Discussion, and Outcomes: https://www.owasp.org/index.php/OWASP_Strategic_Goals/2014/Build_Training_Program

2013 OWASP Foundation Strategic Goals

• Volunteer Engagement - Define an engagement program that creates easy channel for volunteer involvement, expectation setting and recognition of individual efforts.
• Expand Communication Channels - Establish effective communication channels into developer groups, universities, and industry groups
• Financial Growth - Build plan for financial growth of foundation and create new sources of income for the organisation to achieve the goals of 2013 and future years.
• Focus on OWASP Project Quality - Define processes, community involvement and structure to raise quality of key projects and easily identify experimental versus flagship projects.

2012 OWASP Foundation Strategic Goals

• Build the OWASP Platform - Define the processes, resources, and tools to enable volunteers to quickly join and contribute to OWASP in the areas of projects, chapters, education, conferences and connections
• Expand Communication Channels - Establish effective communication channels into developer groups, universities, and industry groups
• Grow the OWASP Community - Build and grow the OWASP community throughout the world by focusing on the quality of projects, chapters, conferences, and social technologies
• Financial Stability - Further build out a stable financial foundation and create new sources of income for the organisation to achieve the goals of 2012 and future years.