OWASP Global Chapters Committee Workshop - November 11, 2009

1. OWASP Global ChaptersCommittee (GCC) WorkshopNovember 11, 2009

2. To cover • GCC activities • Chapter Survey Results • Discussions • Mentor program • Owasp on the Move

3. Global Chapter Committee • The primary purpose of the Global Chapter Committee is: To provide the support required at the local level to accomplish the overall mission and goals of OWASP. • Chapter Committee: • Puneet Mehta (India) • Ofer Shezaf (Israel) • Matthew Chalmers (U.S.) • Kate Hartmann (U.S.) – P • Board Member Rep: Seba (Belgium) – P • - P: present 3

4. Activities • The chapters handbook • Chapter survey • Call for both mentors (experienced chapter leaders) and chapter leaders wanting to get in touch with a mentor • Chapter funding

5. Chapter Leader Handbook • Content • Rules and regulations: board, voting, leadership change, finance. • Operations: meetings, conferences, mailing list. • Marketing and promotions guide. • Chapter ethics: presentations, sponsors, list. • A work in flux: • Review • It is a wiki: contribute!

6. Survey • SurveyMonkey • Launched last 2 weeks • Send to chapter leaders (155 chapters) • 49 responses

7. 1. How many chapter meetings do you organize per year?

8. 2. Do you have a chapter board? • (i.e. 2 or more chapter leaders that are actively involved in the chapter organization)

9. 3. How many people on average come to a chapter meeting? 12 30 18 20 20 10 22 20 150 15 70 8 20 0 15 15 70 • 30 • 0 • 0 • 14 • 45 • 40 • 50 • 30 • 20 • 15 • 35 • 10 • 60 • 10 • 15 • 20 • 50 • 15 • 8 • 20 • 10 • 75 • 25 • 10 • 15 • 25 • 35 • 40 • 25 • 50 • 60 • 20 Average 28,4

10. 4. Did you already use the chapter resources available on the OWASP wiki)? • http://www.owasp.org/index.php/Category:Chapter_Resources

11. 5. Did you already organize a local OWASP conference in your region?

12. 6. What is your single biggest challenge as chapter leader? getting location and good speakers. incentive to get attendees to come. Intelligent commentary during meetings In Austin, we have great speakers, but sometimes our draw is limited for attendees. Marketing to IT Professionals in the Area How to spread news about OWASP Getting more people and setting up conference between different cities Get people engaged interested in developing OWASP projects Spreading the word out. Getting people to attend. geographic reach - Germany is too big - we have now started local OWASP "Stammtisches" without the need of a formal chapter TIME and VENUES for meetings (we have a big chapter) Being able to dedicate time to OWASP. Employer responsibilities come first. External / industry activities come second. advertising to get the community active Renew the Chapter after AppSec • 14 x Lining up speakers/topics • 4 x Get funding / Members • Improving attendance Time • Time management • Organize nice and interesting events. Meet the attendees expectations • Working on getting it started. • Getting buy-in from others, I have sent emails, sent surface letters, made calls, sent emails to web developer lists specific to Nigeria and have not gotten a positive esponse • Marketing the meeting • Getting developers to attend • arrangements for the meeting place • None • making people interested in owasp • Venue • Organize a OWASP Conference.

13. 7. What can the Global Chapter Committee do for you or your chapter? • Give recommendations • Link me to chapter leaders who had as much difficulty as I have kickstarting the chapter and how they overcame those challenges • provide KeyNoteSpeakers,Translated Materials • Assist with marketing material • Help organize speakers • That's a good question. I'm not entirely sure what the Global Chapter Committee does now. (That's not a diss.) • You are doing well • Assist smaller chapters. • Nothing at the moment - my next step is to constitute a chapter board for London • content hosting for chapter materials • We are good at the moment. Shall contact the committee whenever required. • unsure • Holding regional events in Asia Pacific • not much • Let us know if any members are visiting Brisbane! • Provide information on hosting the OWASP Annual 2010 conference! We're on board, we just need more info • help with Advisory, help with organization meetings and flexibility to integrate in other event bigger than local owasp chapter • Host presentation material on the web site • Smoother sponsorship process so we don't have to deal with the paperwork and logistics • maybe send some book, t-shirt, pen for the meeting. • we need more info on how to captivate more people to be interested in our chapter • Provide a list of good speakers to help come to the city, allow vendors to do their pitch/sales pitch and also be able to provide goodies • Help line up speakers, provide shared infrastructure for common tasks like invites, RSVP's, etc. • Provide high-quality, engaging speakers • unsure Mon, Nov 2, 2009 10:51 PM Find... • Figure out ways to drive attendance to chapter meetings. • provide opportunities to have grat speakers in canada for a tour (like we did with rafal los, 3 canadian chapters worked together to have him) • They make great job, but OWASP is not so popular in Poland • Help/advice in getting the word out about our Chapter.

14. 7. What can the Global Chapter Committee do for you or your chapter? • Any service for live broadcasting presentations online to allow more ppl to follow chapter activities would be appreciated. • send us shirts. :-) We need to spread the word • Maybe provide some banners and other promotional material... Maybe a catlogue of speakers interested would be good too. • Provide materials for a street team. Branded specific for the chapter. • Help us get quality speakers • ???? • Provide a process to rate chapters from the membership. Email each of the chapter mailing lists and gather FACTS from the street level of what people want. • Time is the biggest constraint. Jeff Williams supported our chapter by speaking back in late 2008. Otherwise, I think the GCC does a good job. • Well, if you can give me tips on when good speakers are in the nearby it would be great! Perhaps a shared schedule where speakers can add "I'm in Berlin giving a talk at conference X 1st of November. Topic is WS-Security. Here's my email." • create a speaker list with available dates, places and topics (contact me at dale@virginia.edu) • more clearity about what the chapter committee is doing? ;-) • Support the action plan that will be provided soon • Encourage the Infosec/AppSec departments at places like Intel, HP, Apple, Insurance companies, etc. to internally advertise/promote/require attendance at OWASP chapter meetings. Perhaps offer some incentive, such as free OWASP corporate membership if 100+ unique employees attend chapter meetings over the course of a year. • Improve the owasp on the move program

15. Mentor program • Status: • No activity or low activity chapters • Lot of questions from new chapter leaders • Possible solution (discussion?): • Mentor program • Experienced chapter leaders • Adopting a nearby new or inactive chapter • Support face to face (costs!) & remotely

16. OWASP on the Move • Status: • Why knows OWASP on the Move? • $5288 in 2009 and $6750 in 2008. The max per year is $10k. • Question: • How to make this more popular? • How to drive participation from speakers?

17. Chapter funding • 60/40 split of Membership!

18. Call for ACTION • Join the Committee! • Review Chapter Handbook • Participate in Mentor program • ‘abuse’ and promote Owasp on the Move • Get involved in your chapter or start one

19. 2010 Goals • Identify & reactivate inactive chapters • Actively support chapters with mentorship and speaker program • Work closely together with Membership Committee to drive common goals