[GPC] OWASP Greece - OWASP Training Session

Paulo Coimbra paulo.coimbra at owasp.org
Mon Mar 28 14:39:53 EDT 2011



For your information I have set this
you_can_use_TODAY page up. Please note that all the information can be
changed and it is only there to exemplify.


As for the methodology to push this issue forward I would say that, since we
have an approved budget, respect the Training Concept and OWASP Values, we
can freely decide on operational matters. Nevertheless, I also suggest we
carbon copy Projects, Education and Board on the relevant issues. 


I propose we firstly select contents/projects we will use and thereafter we
choose trainers. I propose we use a travel agency to deal directly with the
selected people to deliver training and also propose we use the same company
we used in past to support similar operations. i.e Diplomata Tours. I am
proposing so because it can avoid us loads of admin work. As we did in the
past, we could instruct this travel agency to always look for the best deal
in terms of prices, previously set up a maximum cost per individual, share
with them a Google doc to oversee the costs and push to them the work of
dealing with all the operations regarded hotels, flights and transfers.  At
the end we would only pay a bill previously known. 


As for the total cost, a precise estimate is difficult to produce as the
main cost we usually have is the one with flights and therefore the final
bill will depend of the origin of the invited trainers. That being said, I
would say that between 2000/2500 Euros would make possible a training
session restricted to European trainers and roundly 4000/5000 Euros would
allow the inclusion of trainers with other departures. On top of that, if
the OWASP Greek community could provide a few private accommodations and we
could find people available to engage in this arrangement, it would
certainly lower the costs. 


Please glance at here http://www.owasp.org/index.php/OWASP_Training for a
broaden knowledge in terms of training practices and resources. 


Please drop me a line and let me know how you would like to proceed. 



- Paulo



Paulo Coimbra,

 <http://www.owasp.org/index.php/User:Paulo_Coimbra> OWASP Project Manager


From: Paulo Coimbra [mailto:paulo.coimbra at owasp.org] 
Sent: quinta-feira, 24 de Março de 2011 19:52
To: 'Konstantinos Papapanagiotou'
Subject: RE: [Global_conference_committee] [Owasp-board] FW: [GPC] protocol
with Portuguese government


Dear Kostas,


That’s very good news. I apologise for my delayed engagement with this
process. No later than tomorrow I will get back to you again with more info
and details. Thank you for bearing with me.



- Paulo



Paulo Coimbra,

 <http://www.owasp.org/index.php/User:Paulo_Coimbra> OWASP Project Manager


From: conpap at gmail.com [mailto:conpap at gmail.com] On Behalf Of Konstantinos
Sent: segunda-feira, 21 de Março de 2011 19:20
To: Paulo Coimbra
Subject: Re: [Global_conference_committee] [Owasp-board] FW: [GPC] protocol
with Portuguese government


Hi Paulo,


I'm glad to announce that the company that I work for (Syntax IT Inc) has
agreed to sponsor the training day. They are now asking me for an estimated

Actually we need to start planning for various reasons (our government is
not the most stable in the world. we talk to some people today and they
might not be there tomorrow, if you know what I mean). 

How do we proceed? Do I contact the training volunteers myself in order to
agree on a date or does this go through the conference commitee?


I know you're really busy and I don't want to put more weight to your back.
Just get me started and I'll take off ;)




On Mon, Mar 14, 2011 at 8:54 PM, Paulo Coimbra <paulo.coimbra at owasp.org>

I thank you both, Jeff and Dave.


I will contact you privately, Kostas, for us to arrange and push this issue



- Paulo



Paulo Coimbra,

OWASP Project Manager <http://www.owasp.org/index.php/User:Paulo_Coimbra> 


From: owasp-board-bounces at lists.owasp.org
[mailto:owasp-board-bounces at lists.owasp.org] On Behalf Of Dave Wichers
Sent: sexta-feira, 11 de Março de 2011 21:59
To: 'Jeff Williams'; 'OWASP Foundation Board List'
Subject: Re: [Owasp-board] FW: [GPC] protocol with Portuguese government


I support this as well.


From: global-projects-committee-bounces at lists.owasp.org
[mailto:global-projects-committee-bounces at lists.owasp.org] On Behalf Of Jeff
Sent: Friday, March 11, 2011 4:35 PM
To: Paulo Coimbra; Konstantinos Papapanagiotou 

Cc: OWASP Foundation Board List; Global Projects Committee
Subject: Re: [GPC] protocol with Portuguese government


I support spending some of Paulo’s time on this effort.  I suggest that the
conferences committee should lead the effort to set up the event, as it is
more like a conference than the other things we do.  Agree?





From: global-projects-committee-bounces at lists.owasp.org
[mailto:global-projects-committee-bounces at lists.owasp.org] On Behalf Of
Paulo Coimbra
Sent: Thursday, March 10, 2011 5:46 PM
To: 'Konstantinos Papapanagiotou'
Cc: 'OWASP Foundation Board List'; 'Global Projects Committee'
Subject: Re: [GPC] protocol with Portuguese government


Hello Kostas,


I thank your efforts to spread OWASP’s word and congratulate you on the
progresses made towards fortifying the links with the Greek government. It
feels good to see that the perspectives we exchanged during the summit are
already being translated into very concrete actions. 


As for the support you are looking for to organize the referred training
session, I am gladly available to step in but, prior to assume the task, I
need to consult with the Board and the Global Projects Committee. In this
context, I am already carbon copying them to ask whether or not I can commit
time to push this initiative forward. 



- Paulo


Paulo Coimbra,

 <http://www.owasp.org/index.php/User:Paulo_Coimbra> OWASP Project Manager


From: Konstantinos Papapanagiotou [mailto:conpap at gmail.com] 
Sent: quinta-feira, 10 de Março de 2011 16:10
To: Paulo Coimbra
Cc: Jeff Williams; dinis cruz; Carlos Serrão; jason.li <http://jason.li/>
@owasp.org <http://owasp.org/> ; Kate Hartmann
Subject: Re: protocol with Portuguese government


Paulo and all,


I met today with the General Secretary of Information Systems (this is an
"agency" that belongs to the Greek Ministry of Finance) and he agreed to the
following that I proposed to him:


We will have an OWASP Training Day in Greece according to the OWASP Training
Model (http://www.owasp.org/index.php/OWASP_Training) which I briefly
described to him.


This will take place in the audiotium of the General Secretariat building
(it can hold approx. 200 people, maybe more) which they will provide for
free. In "exchange" the General Secretary himself will select certain,
limited number of General Secratariat staff (e.g. 10 people) that are
members of the development team which will attend the Training Day for free.


The Training Day will be open for anyone else to attend according to the $50
membership model.


Sponsorship for travel costs will be covered by a local company (I have
alredy done some talks and we're at the final stage to reach an agreement)


I think that such an event will be of a great value towards OWASP
collaborating with governments. Of course I mentioned to him the protocol
with the Portuguese government that we are currently working on. In addition
I think that this model perfectly fits Paulo's vision as we have the
government interacting with OWASP and  through OWASP with private companies
towards the same goal: AppSec! This will also give us an opportunity to
follow up with the GSIS, expand the same model to other agencies and also
create demand and enthusiasm for OWASP and AppSec from within the GSIS.


The event can happen either in mid-April (until the 15th) or early May. 

Ideally the course agenda will ideally include: Top10, ASVS, Testing Guide,
AppSensor, OpenSAMM, ESAPI and WebGoat/WebScarab. I mentioned these projects
to him, especially ASVS and ESAPI and they are very interested to integrate
ASVS in their procurement procedures. 


Of course I can cover some of these courses myself but we will definitely
need some of those training volunteers to come in. The exact date of the
Training Day actually depends on the availability of volunteers to come to

The training page says that I should contact Sandra but I now that she's no
longer involved so... what's the next step to organize the training?



On Wed, Mar 9, 2011 at 5:36 PM, Paulo Coimbra <paulo.coimbra at owasp.org>

Hello Konstantinos,


Hope you are ok. As for the Portuguese protocol I have only translated the
very initial draft that had been sent off by Luís Magalhães, the Portuguese
government representative that you met in the Summit. Currently, it is only
kind of a skeleton produced solely by UMIC from its own experience in
building other protocols with organizations like CISCO and Microsoft. Being
so, the entire and actual protocol between OWASP and UMIC is still to be
written down. I’ve tried and work on it by exchanging point of views with
Dinis and Carlos Serrão but the overall concept is still to be designed.
Also, Jeff has already read the draft that I am now sending attached and
suggested ‘we focus on the obligations there first’. I have been a bit
swamped with projects’ stuff but I am doing my best to return to this issue
as soon as possible. Meanwhile, it goes without saying, any contribution you
may give to push this issue forward is as always very welcomed.


Please keep in touch and update us on the progresses made with the Greek’s
government officials. If needed, my Skype contact is  ‘paulocoimbra7’.


- Paulo



Paulo Coimbra,

 <http://www.owasp.org/index.php/User:Paulo_Coimbra> OWASP Project Manager


From: Konstantinos Papapanagiotou [mailto:conpap at gmail.com] 
Sent: terça-feira, 8 de Março de 2011 23:12
To: Paulo Coimbra
Subject: protocol with Portuguese government


Hi Paulo,

Hope you're doing well.
Dinis was telling me the other day that you got the OWASP protocol with the
Portuguese government translated in English. Can you please send it to me?
Or even the Portuguese version (I'll google translate it just to get the
gist of it).
I'm meeting today with quite a few government officials at an event
organized by the British embassy so I'm sure it will come in handy. I want
to have a solid proposal to present them!



Global_conference_committee mailing list
Global_conference_committee at lists.owasp.org


-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/global-projects-committee/attachments/20110328/d527929d/attachment-0001.html 

More information about the Global-projects-committee mailing list