[Global_conference_committee] FW: IBWAS 09 - OWASP Sponsorship

Wed May 26 20:47:00 EDT 2010

Hi Wayne!  Long time no hear!  We had not heard anything about an OWASP
event in China since last summer, although we had though there would have
been one in April of 2010.  The following URL was brought to my attention,
and I would like to discuss this event with you.
http://translate.google.com/translate?js=y&prev=_t&hl=en&ie=UTF-8&layout=1&e
otf=1&u=http%3A%2F%2Fwww.owasp.org.cn&sl=zh-CN&tl=en 

If you are not the coordinator of this event, could you please connect me
with the appropriate person?  I do not have an email for Rip Torn, although
I know we had also talked with him last summer.

Since this is being advertised as an OWASP 2010 Summit, we (OWASP) need to
be aware and involved in the agenda.

I look forward to hearing back from you soon and on working on this event!

Kate Hartmann
OWASP Operations Director
9175 Guilford Road
Suite 300
Columbia, MD  21046

301-275-9403 
kate.hartmann at owasp.org
Skype:  kate.hartmann1 

-----Original Message-----
From: Wayne Huang [mailto:wayne.armorize at gmail.com] 
Sent: Monday, July 20, 2009 9:29 PM
To: Mark Bristow
Cc: Kate Hartmann; Soi, Dhruv; global_conference_committee at lists.owasp.org;
global_chapter_committee at lists.owasp.org
Subject: Re: FW: IBWAS 09 - OWASP Sponsorship

Agree

Wayne

2009/7/21 Mark Bristow <mark.bristow at owasp.org>:
>
>
> On Mon, Jul 20, 2009 at 2:22 PM, Kate Hartmann <kate.hartmann at owasp.org>
> wrote:
>>
>> So we all agree that events:  local, regional, and global, should be
>> executing a profit sharing model with the foundation.  Based on the
>> discussion below, it seems as if a 70/30 split (negotiable based on
>> expenditure mapping by the local chapter) should be the norm.  This will
>> force local chapters to prepare budgets to the Foundation to justify
future
>> spending.  Am I correct in my summary?
>
> Yes, for any events that plan to use Foundation Money.
>>
>> For these models then, we will need to require that ALL local events be
>> run through the foundation.  This would include registrations,
accounting,
>> contracts, etc.  Again, am I correct in my summary?
>
>
>
> Yes, for any events that plan to use Foundation Money.
>
>
>>
>> It seems to follow, then, that the Chapter Committee will need to include
>> these requirements in the chapter handbook.
>>
>>
>>
>> All finances for local, regional, and global events must be handled by
the
>> foundation.  The foundation will designate 30% of the event funds to the
>> local chapters with 70% going back to the foundation.  The local chapter
>> funds will then be managed by the foundation.  If they are not handled at
a
>> “corporate level” then I would believe we run the risk of misuse of
funds.
>> It seems to be a step toward protecting the chapter leaders from
>> accusations, more than protecting the money.  Reimbursements will be made
>> or, in cases of event planning, payments will be made in advance based on
>> contractual obligations.
>
> I would say local, regional events that use Foundation money for support,
> and all AppSec Conferences
>>
>> If I am accurate in pulling together the gist of the committee’s
>> recommendation, I would like to put this forward for board approval at
the
>> next meeting.
>>
>>
>>
>> Kate Hartmann
>>
>> OWASP Operations Director
>>
>> 9175 Guilford Road
>>
>> Suite 300
>>
>> Columbia, MD  21046
>>
>>
>>
>> 301-275-9403
>>
>> kate.hartmann at owasp.org
>>
>> Skype:  kate.hartmann1
>>
>>
>>
>> From: Soi, Dhruv [mailto:dhruv.soi at owasp.org]
>> Sent: Monday, July 20, 2009 4:21 AM
>> To: Kate Hartmann
>> Cc: Mark Bristow; Wayne Huang
>> Subject: Re: FW: IBWAS 09 - OWASP Sponsorship
>>
>>
>>
>> For the profitable events, there could be a global norm of sharing 20% of
>> total event profit with the foundation. For rest of the cases, I would
vote
>> for equal %age of risk and revenue sharing between foundation and local
>> chapter. This %age can be declared by the chapter leader while putting
the
>> request for conference in front of GCC.
>>
>> If the leader agrees to share >50% profit by putting >50% risk on
>> foundation then it becomes responsibility of GCC to go granular and
review
>> the event plans in details. And if, Chapter Leader wants to keep 80%
profit
>> (giving 20% as per global norm) for future promotion, then I think
>> foundation should discount him to go ahead with his own plans via routine
>> event's budget plan review. Same way, there would be many events that
would
>> request for 50-50 split or 70-30 that should be acceptable with a
>> pre-declaration.
>>
>> I don't really agree with the suggestion that local chapter don't need
>> that much of money. Amount to be used by the local chapter completely
>> depends upon the initiatives to be taken in the region. But yes, Chapter
>> Leader must declare the usage of the profits mapping with the budgeted
>> initiatives to the foundation in advance.
>>
>> Suggestions always welcome!
>>
>> Many Thanks,
>> Dhruv
>>
>> Wayne Huang wrote:
>>
>> I agree with everything Mark said. For AppSec Conferences, 100% of the
>>
>> profit goes back to the foundation. But, if an AppSec Conference lost
>>
>> money, should the foundation reimburse it? My vote is no. The
>>
>> conference organizer should be responsible in having a profitable
>>
>> conference, and if not, then in covering the losses. And so she should
>>
>> have a well-developed plan before volunteering to host an AppSec
>>
>> conference. Any thoughts on this?
>>
>>
>>
>> For more regional events, before we discuss the split percentages
>>
>> between the foundation and the local chapter, I agree with Mark and
>>
>> think what he mentioned is very important -- chapters don't need that
>>
>> much money to operate.
>>
>>
>>
>> This morning I talked to Rip Torn (China leader) about the revenue
>>
>> split for OWASP Asia next year and he has agreed that 100% of the
>>
>> revenue should go back to the foundation. So I think we can adopt this
>>
>> model first, and then adjust as we move forward and regions have
>>
>> problems with this, and state their reasons.
>>
>>
>>
>> Wayne
>>
>>
>>
>> On Sun, Jul 19, 2009 at 10:48 AM, Mark Bristow<mark.bristow at owasp.org>
>> wrote:
>>
>>
>>
>> Well,
>>
>>
>>
>> As I have previously advocated, if Foundation dollars are going to be
>> placed
>>
>> at risk, we should expect some sort of return for that risk.  In the case
>> of
>>
>> AppSec Conferences, 100% of the profit should come back to the
foundation.
>>
>> For more regional events (like this one) I think a reasonable split, say
>>
>> 70-30, with the foundation getting it's money back first, since if money
>> is
>>
>> lost it will be realized by the foundation not the chapter.
>>
>>
>>
>> In reality, I don't think chapters need that much money to operate.  Even
>>
>> the larger chapters don't need more than pizza for 50-100people every
>> month
>>
>> or so, so only a few hundred dollars.  I can see some additional 1 time
>>
>> purchases (such as a video camera for recording meetings). But I (as a
>>
>> chapter leader) don't see why chapters are clamoring for money so much.
>>
>> That said, a reasonable split is something I think we can entertain, but
>> it
>>
>> should always favor the foundation.
>>
>>
>>
>> Thoughts?
>>
>>
>>
>> -Mark
>>
>>
>>
>> On Fri, Jul 17, 2009 at 12:10 PM, Kate Hartmann <kate.hartmann at owasp.org>
>>
>> wrote:
>>
>>
>>
>> Guys, here is another topic we need to clarify
..Spain and Portugal are
>>
>> putting together an event and are charging admission.  They want the
>> support
>>
>> of OWASP to do this (I think it’s appropriate we support them).  My
>> question
>>
>> is regarding the funds collected.  According to Fabio, they will be kept
>> and
>>
>> used by the local chapters.
>>
>>
>>
>>
>>
>>
>>
>> We need to define/clarify funds administration regarding conference
>>
>> proceedings.  I suppose that the Foundation can “bill” the chapter for
>>
>> supplies, registration, time, etc. and I will forward to the chapter
>>
>> committee regarding the finances, but at what level does the foundation
>> step
>>
>> in as the intermediary for these events?  The Foundation depends heavily
>> on
>>
>> the proceeds from conferences to cover operating expenses.  What is our
>>
>> determination on who keeps the money?  How is it managed?
>>
>>
>>
>>
>>
>>
>>
>> Kate Hartmann
>>
>>
>>
>> OWASP Operations Director
>>
>>
>>
>> 9175 Guilford Road
>>
>>
>>
>> Suite 300
>>
>>
>>
>> Columbia, MD  21046
>>
>>
>>
>>
>>
>>
>>
>> 301-275-9403
>>
>>
>>
>> kate.hartmann at owasp.org
>>
>>
>>
>> Skype:  kate.hartmann1
>>
>>
>>
>>
>>
>>
>>
>> From: Fabio Cerullo [mailto:fcerullo at gmail.com]
>>
>> Sent: Thursday, July 16, 2009 6:37 PM
>>
>> To: Kate Hartmann
>>
>> Cc: dinis cruz; paulo.coimbra at owasp.org; Vicente Aguilera; Carlos Serrao
>>
>> Subject: Re: IBWAS 09 - OWASP Sponsorship
>>
>>
>>
>>
>>
>>
>>
>> hi Kate,
>>
>>
>>
>> We don't have an assigned budget before hand. Hopefully the costs are
>>
>> going to be covered by sponsors and admission fees.
>>
>>
>>
>> Carlos and Vicente have contacts in different companies around Spain &
>>
>> Portugal which are already offering their sponsorship and the venue
>> location
>>
>> has been offered free of charge. So mostly, the costs are going to be
>> around
>>
>> the refreshments, stationary, keynote speakers, etc.
>>
>>
>>
>> The process for collecting funds has not been defined yet, however the
>>
>> profits (if any) are going to be divided between OWASP Spain & Portugal
>> and
>>
>> will be used to promote OWASP across the Iberic region (eg. university
>>
>> students grants).
>>
>>
>>
>> Any help that you could provide us is really appreciated.
>>
>>
>>
>> Thank you very much.
>>
>>
>>
>> Fabio
>>
>>
>>
>>
>>
>> On Tue, Jul 14, 2009 at 12:56 PM, Kate Hartmann <kate.hartmann at owasp.org>
>>
>> wrote:
>>
>>
>>
>> Fabio, do you have a budget for the event?  Who will be collecting funds?
>>
>>
>>
>>
>>
>>
>>
>> I am the person to communicate with.  Once I have a better idea of how
the
>>
>> event is going to be run, I can follow up with the board regarding the
>>
>> sponsorship.
>>
>>
>>
>>
>>
>>
>>
>> Usually, OWASP does not provide funds for events, but we do cover up
front
>>
>> costs to be reimbursed by admission fees, training, or sponsorship.
>>
>>
>>
>>
>>
>>
>>
>> Kate Hartmann
>>
>>
>>
>> OWASP Operations Director
>>
>>
>>
>> 9175 Guilford Road
>>
>>
>>
>> Suite 300
>>
>>
>>
>> Columbia, MD  21046
>>
>>
>>
>>
>>
>>
>>
>> 301-275-9403
>>
>>
>>
>> kate.hartmann at owasp.org
>>
>>
>>
>> Skype:  kate.hartmann1
>>
>>
>>
>>
>>
>>
>>
>> From: Fabio Cerullo [mailto:fcerullo at gmail.com]
>>
>> Sent: Monday, July 13, 2009 6:40 PM
>>
>>
>>
>> To: paulo.coimbra at owasp.org
>>
>>
>>
>> Cc: Kate Hartmann; Dinis Cruz
>>
>> Subject: Re: IBWAS 09 - OWASP Sponsorship
>>
>>
>>
>>
>>
>>
>>
>> hi Kate & Paulo,
>>
>>
>>
>> this is the event I've mailed you about in April... however they are
going
>>
>> to charge the admission fees now.
>>
>>
>>
>> They were looking for some funding from OWASP to support the event and
>>
>> cover some of the associated costs.
>>
>>
>>
>> could you please pont me in the right direction as to whom should I
>>
>> address this request?
>>
>>
>>
>> thanks,
>>
>>
>>
>> Fabio
>>
>>
>>
>> On Mon, Jul 13, 2009 at 6:20 PM, Paulo Coimbra <paulo.coimbra at owasp.org>
>>
>> wrote:
>>
>>
>>
>> Hello Fabio,
>>
>>
>>
>>
>>
>>
>>
>> I am ok and hope you are also fine.
>>
>>
>>
>>
>>
>>
>>
>> Yes, I am very aware of the IBWAS 09 as I am continuously glancing at the
>>
>> event’s home page and talking with Carlos Serrão about it.
>>
>>
>>
>>
>>
>>
>>
>> Regarding your question, it seems to me we should rather address it
either
>>
>> to the Conferences Committee or to the Board.
>>
>>
>>
>>
>>
>>
>>
>> What do you reckon, Kate?
>>
>>
>>
>>
>>
>>
>>
>> Thanks,
>>
>>
>>
>>
>>
>>
>>
>> Paulo Coimbra,
>>
>>
>>
>> OWASP Project Manager
>>
>>
>>
>>
>>
>>
>>
>> From: fcerullo at gmail.com [mailto:fcerullo at gmail.com] On Behalf Of Fabio
>>
>> Cerullo
>>
>> Sent: domingo, 12 de Julho de 2009 11:32
>>
>>
>>
>> To: paulo.coimbra at owasp.org
>>
>> Cc: Kate Hartmann
>>
>> Subject: IBWAS 09 - OWASP Sponsorship
>>
>>
>>
>>
>>
>>
>>
>> Hi Paulo,
>>
>>
>>
>> How are you? As you might know OWASP Spain & Portugal are organizing
IBWAS
>>
>> 09 by the end of the year (http://www.ibwas.com).
>>
>>
>>
>> I'm working with them as part of the OWASP Education Committee helping
>>
>> them to organize materials, call for papers, etc.
>>
>>
>>
>> I'm contacting you because they asked me about the possibility of OWASP
>>
>> being a sponsor of the event.
>>
>>
>>
>> I wonder if you see this as a possibility and what process they would
need
>>
>> to follow in order to apply for this.
>>
>>
>>
>> Any help is really appreciated.
>>
>>
>>
>> Thank you,
>>
>>
>>
>> Fabio
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>> --
>>
>> Mark Bristow
>>
>>
>>
>> OWASP Global Conferences Committee member -
>>
>> https://www.owasp.org/index.php/Global_Conferences_Committee
>>
>> AppSec DC 09 Organizer -
>>
>> https://www.owasp.org/index.php/OWASP_AppSec_DC_2009
>>
>> OWASP DC Chapter Co-Chair - http://www.owasp.org/index.php/Washington_DC
>>
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>
> --
> Mark Bristow
>
> OWASP Global Conferences Committee member -
> https://www.owasp.org/index.php/Global_Conferences_Committee
> AppSec DC 09 Organizer -
> https://www.owasp.org/index.php/OWASP_AppSec_DC_2009
> OWASP DC Chapter Co-Chair - http://www.owasp.org/index.php/Washington_DC
>

-- 
Wayne
Office: 408-216-7893 ext 100
Cell: 408-431-5600 / 408-431-7134
Taiwan cell: +886-922-780-838
MSN: wayne at armorize.com
Skype: wayne_armorize
http://www.armorize.com