OWASP Global Chapters Committee GCC Workshop November 11

OWASP Global Chapters Committee (GCC) Workshop November 11, 2009 Copyright 2007 © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP Foundation http: //www. owasp. org

To cover • GCC activities • Chapter Survey Results • Discussions • Mentor program • Owasp on the Move OWASP

Global Chapter Committee The primary purpose of the Global Chapter Committee is: To provide the support required at the local level to accomplish the overall mission and goals of OWASP. Chapter Committee: • • • - Puneet Mehta (India) Ofer Shezaf (Israel) Matthew Chalmers (U. S. ) Kate Hartmann (U. S. ) – P Board Member Rep: Seba (Belgium) – P P: present OWASP 3

Activities • The chapters handbook • Chapter survey • Call for both mentors (experienced chapter leaders) and chapter leaders wanting to get in touch with a mentor • Chapter funding OWASP

Chapter Leader Handbook • Content • Rules and regulations: board, voting, leadership change, finance. • Operations: meetings, conferences, mailing list. • Marketing and promotions guide. • Chapter ethics: presentations, sponsors, list. • A work in flux: • Review • It is a wiki: contribute! OWASP

Survey • • Survey. Monkey Launched last 2 weeks Send to chapter leaders (155 chapters) 49 responses OWASP

1. How many chapter meetings do you organize per year? OWASP

2. Do you have a chapter board? (i. e. 2 or more chapter leaders that are actively involved in the chapter organization) OWASP

3. How many people on average come to a chapter meeting? 30 50 12 0 15 30 0 8 18 14 20 20 45 10 20 40 75 10 50 25 22 30 10 20 20 15 150 15 25 15 35 35 70 10 40 8 60 25 20 10 50 0 15 60 15 20 20 15 Average 28, 4 70 OWASP

4. Did you already use the chapter resources available on the OWASP wiki)? http: //www. owasp. org/index. php/Category: Chapt er_Resources OWASP

5. Did you already organize a local OWASP conference in your region? OWASP

6. What is your single biggest challenge as chapter leader? 14 x Lining up speakers/topics 4 x Get funding / Members Improving attendance Time getting location and good speakers. incentive to get attendees to come. Intelligent commentary during meetings Time management In Austin, we have great speakers, but sometimes our draw is limited for attendees. Organize nice and interesting events. Meet the attendees expectations Marketing to IT Professionals in the Area Working on getting it started. Getting buy-in from others, I have sent emails, sent surface letters, made calls, sent emails to web developer lists specific to Nigeria and have not gotten a positive esponse How to spread news about OWASP Getting more people and setting up conference between different cities Get people engaged interested in developing OWASP projects Marketing the meeting Spreading the word out. Getting people to attend. Getting developers to attend arrangements for the meeting place geographic reach - Germany is too big - we have now started local OWASP "Stammtisches" without the need of a formal chapter None TIME and VENUES for meetings (we have a big chapter) making people interested in owasp Venue Being able to dedicate time to OWASP. Employer responsibilities come first. External / industry activities come second. Organize a OWASP Conference. advertising to get the community active Renew the Chapter after App. Sec OWASP

7. What can the Global Chapter Committee do for your chapter? Give recommendations Link me to chapter leaders who had as much difficulty as I have kickstarting the chapter and how they overcame those challenges provide Key. Note Speakers, Translated Materials help with Advisory, help with organization meetings and flexibility to integrate in other event bigger than local owasp chapter Host presentation material on the web site Assist with marketing material Smoother sponsorship process so we don't have to deal with the paperwork and logistics Help organize speakers maybe send some book, t-shirt, pen for the meeting. That's a good question. I'm not entirely sure what the Global Chapter Committee does now. (That's not a diss. ) we need more info on how to captivate more people to be interested in our chapter You are doing well Provide a list of good speakers to help come to the city, allow vendors to do their pitch/sales pitch and also be able to provide goodies Assist smaller chapters. Nothing at the moment - my next step is to constitute a chapter board for London content hosting for chapter materials We are good at the moment. Shall contact the committee whenever required. unsure Holding regional events in Asia Pacific not much Let us know if any members are visiting Brisbane! Provide information on hosting the OWASP Annual 2010 conference! We're on board, we just need more info Help line up speakers, provide shared infrastructure for common tasks like invites, RSVP's, etc. Provide high-quality, engaging speakers unsure Mon, Nov 2, 2009 10: 51 PM Find. . . Figure out ways to drive attendance to chapter meetings. provide opportunities to have grat speakers in canada for a tour (like we did with rafal los, 3 canadian chapters worked together to have him) They make great job, but OWASP is not so popular in Poland Help/advice in getting the word out about our Chapter. OWASP

7. What can the Global Chapter Committee do for your chapter? Any service for live broadcasting presentations online to allow more ppl to follow chapter activities would be appreciated. more clearity about what the chapter committee is doing? ; -) send us shirts. : -) We need to spread the word Support the action plan that will be provided soon Maybe provide some banners and other promotional material. . . Maybe a catlogue of speakers interested would be good too. Encourage the Infosec/App. Sec departments at places like Intel, HP, Apple, Insurance companies, etc. to internally advertise/promote/require attendance at OWASP chapter meetings. Perhaps offer some incentive, such as free OWASP corporate membership if 100+ unique employees attend chapter meetings over the course of a year. Provide materials for a street team. Branded specific for the chapter. Help us get quality speakers ? ? Provide a process to rate chapters from the membership. Email each of the chapter mailing lists and gather FACTS from the street level of what people want. Improve the owasp on the move program Time is the biggest constraint. Jeff Williams supported our chapter by speaking back in late 2008. Otherwise, I think the GCC does a good job. Well, if you can give me tips on when good speakers are in the nearby it would be great! Perhaps a shared schedule where speakers can add "I'm in Berlin giving a talk at conference X 1 st of November. Topic is WS-Security. Here's my email. " create a speaker list with available dates, places and topics (contact me at dale@virginia. edu) OWASP

Mentor program Status: • No activity or low activity chapters • Lot of questions from new chapter leaders Possible solution (discussion? ): • • Mentor program Experienced chapter leaders Adopting a nearby new or inactive chapter Support face to face (costs!) & remotely OWASP

OWASP on the Move • Status: • Why knows OWASP on the Move? • $5288 in 2009 and $6750 in 2008. The max per year is $10 k. • Question: • How to make this more popular? • How to drive participation from speakers? OWASP

Chapter funding 60/40 split of Membership! OWASP

Call for ACTION • • • Join the Committee! Review Chapter Handbook Participate in Mentor program ‘abuse’ and promote Owasp on the Move Get involved in your chapter or start one OWASP

2010 Goals • Identify & reactivate inactive chapters • Actively support chapters with mentorship and speaker program • Work closely together with Membership Committee to drive common goals OWASP