[Global_chapter_committee] FW: IBWAS 09 - OWASP Sponsorship

Kate Hartmann kate.hartmann at owasp.org
Mon Jul 20 14:22:57 EDT 2009

So we all agree that events:  local, regional, and global, should be
executing a profit sharing model with the foundation.  Based on the
discussion below, it seems as if a 70/30 split (negotiable based on
expenditure mapping by the local chapter) should be the norm.  This will
force local chapters to prepare budgets to the Foundation to justify future
spending.  Am I correct in my summary?


For these models then, we will need to require that ALL local events be run
through the foundation.  This would include registrations, accounting,
contracts, etc.  Again, am I correct in my summary?


It seems to follow, then, that the Chapter Committee will need to include
these requirements in the chapter handbook.  


All finances for local, regional, and global events must be handled by the
foundation.  The foundation will designate 30% of the event funds to the
local chapters with 70% going back to the foundation.  The local chapter
funds will then be managed by the foundation.  If they are not handled at a
“corporate level” then I would believe we run the risk of misuse of funds.
It seems to be a step toward protecting the chapter leaders from
accusations, more than protecting the money.  Reimbursements will be made
or, in cases of event planning, payments will be made in advance based on
contractual obligations.


If I am accurate in pulling together the gist of the committee’s
recommendation, I would like to put this forward for board approval at the
next meeting. 


Kate Hartmann

OWASP Operations Director

9175 Guilford Road

Suite 300

Columbia, MD  21046



kate.hartmann at owasp.org

Skype:  kate.hartmann1 


From: Soi, Dhruv [mailto:dhruv.soi at owasp.org] 
Sent: Monday, July 20, 2009 4:21 AM
To: Kate Hartmann
Cc: Mark Bristow; Wayne Huang
Subject: Re: FW: IBWAS 09 - OWASP Sponsorship


For the profitable events, there could be a global norm of sharing 20% of
total event profit with the foundation. For rest of the cases, I would vote
for equal %age of risk and revenue sharing between foundation and local
chapter. This %age can be declared by the chapter leader while putting the
request for conference in front of GCC. 

If the leader agrees to share >50% profit by putting >50% risk on foundation
then it becomes responsibility of GCC to go granular and review the event
plans in details. And if, Chapter Leader wants to keep 80% profit (giving
20% as per global norm) for future promotion, then I think foundation should
discount him to go ahead with his own plans via routine event's budget plan
review. Same way, there would be many events that would request for 50-50
split or 70-30 that should be acceptable with a pre-declaration.

I don't really agree with the suggestion that local chapter don't need that
much of money. Amount to be used by the local chapter completely depends
upon the initiatives to be taken in the region. But yes, Chapter Leader must
declare the usage of the profits mapping with the budgeted initiatives to
the foundation in advance.

Suggestions always welcome!

Many Thanks,

Wayne Huang wrote: 

I agree with everything Mark said. For AppSec Conferences, 100% of the
profit goes back to the foundation. But, if an AppSec Conference lost
money, should the foundation reimburse it? My vote is no. The
conference organizer should be responsible in having a profitable
conference, and if not, then in covering the losses. And so she should
have a well-developed plan before volunteering to host an AppSec
conference. Any thoughts on this?
For more regional events, before we discuss the split percentages
between the foundation and the local chapter, I agree with Mark and
think what he mentioned is very important -- chapters don't need that
much money to operate.
This morning I talked to Rip Torn (China leader) about the revenue
split for OWASP Asia next year and he has agreed that 100% of the
revenue should go back to the foundation. So I think we can adopt this
model first, and then adjust as we move forward and regions have
problems with this, and state their reasons.
On Sun, Jul 19, 2009 at 10:48 AM, Mark Bristow
<mailto:mark.bristow at owasp.org> <mark.bristow at owasp.org> wrote:

As I have previously advocated, if Foundation dollars are going to be placed
at risk, we should expect some sort of return for that risk.  In the case of
AppSec Conferences, 100% of the profit should come back to the foundation.
For more regional events (like this one) I think a reasonable split, say
70-30, with the foundation getting it's money back first, since if money is
lost it will be realized by the foundation not the chapter.
In reality, I don't think chapters need that much money to operate.  Even
the larger chapters don't need more than pizza for 50-100people every month
or so, so only a few hundred dollars.  I can see some additional 1 time
purchases (such as a video camera for recording meetings). But I (as a
chapter leader) don't see why chapters are clamoring for money so much.
That said, a reasonable split is something I think we can entertain, but it
should always favor the foundation.
On Fri, Jul 17, 2009 at 12:10 PM, Kate Hartmann
<mailto:kate.hartmann at owasp.org> <kate.hartmann at owasp.org>

Guys, here is another topic we need to clarify
..Spain and Portugal are
putting together an event and are charging admission.  They want the support
of OWASP to do this (I think it’s appropriate we support them).  My question
is regarding the funds collected.  According to Fabio, they will be kept and
used by the local chapters.
We need to define/clarify funds administration regarding conference
proceedings.  I suppose that the Foundation can “bill” the chapter for
supplies, registration, time, etc. and I will forward to the chapter
committee regarding the finances, but at what level does the foundation step
in as the intermediary for these events?  The Foundation depends heavily on
the proceeds from conferences to cover operating expenses.  What is our
determination on who keeps the money?  How is it managed?
Kate Hartmann
OWASP Operations Director
9175 Guilford Road
Suite 300
Columbia, MD  21046
kate.hartmann at owasp.org
Skype:  kate.hartmann1
From: Fabio Cerullo [mailto:fcerullo at gmail.com]
Sent: Thursday, July 16, 2009 6:37 PM
To: Kate Hartmann
Cc: dinis cruz; paulo.coimbra at owasp.org; Vicente Aguilera; Carlos Serrao
Subject: Re: IBWAS 09 - OWASP Sponsorship
hi Kate,
We don't have an assigned budget before hand. Hopefully the costs are
going to be covered by sponsors and admission fees.
Carlos and Vicente have contacts in different companies around Spain &
Portugal which are already offering their sponsorship and the venue location
has been offered free of charge. So mostly, the costs are going to be around
the refreshments, stationary, keynote speakers, etc.
The process for collecting funds has not been defined yet, however the
profits (if any) are going to be divided between OWASP Spain & Portugal and
will be used to promote OWASP across the Iberic region (eg. university
students grants).
Any help that you could provide us is really appreciated.
Thank you very much.
On Tue, Jul 14, 2009 at 12:56 PM, Kate Hartmann
<mailto:kate.hartmann at owasp.org> <kate.hartmann at owasp.org>
Fabio, do you have a budget for the event?  Who will be collecting funds?
I am the person to communicate with.  Once I have a better idea of how the
event is going to be run, I can follow up with the board regarding the
Usually, OWASP does not provide funds for events, but we do cover up front
costs to be reimbursed by admission fees, training, or sponsorship.
Kate Hartmann
OWASP Operations Director
9175 Guilford Road
Suite 300
Columbia, MD  21046
kate.hartmann at owasp.org
Skype:  kate.hartmann1
From: Fabio Cerullo [mailto:fcerullo at gmail.com]
Sent: Monday, July 13, 2009 6:40 PM
To: paulo.coimbra at owasp.org
Cc: Kate Hartmann; Dinis Cruz
Subject: Re: IBWAS 09 - OWASP Sponsorship
hi Kate & Paulo,
this is the event I've mailed you about in April... however they are going
to charge the admission fees now.
They were looking for some funding from OWASP to support the event and
cover some of the associated costs.
could you please pont me in the right direction as to whom should I
address this request?
On Mon, Jul 13, 2009 at 6:20 PM, Paulo Coimbra
<mailto:paulo.coimbra at owasp.org> <paulo.coimbra at owasp.org>
Hello Fabio,
I am ok and hope you are also fine.
Yes, I am very aware of the IBWAS 09 as I am continuously glancing at the
event’s home page and talking with Carlos Serrão about it.
Regarding your question, it seems to me we should rather address it either
to the Conferences Committee or to the Board.
What do you reckon, Kate?
Paulo Coimbra,
OWASP Project Manager
From: fcerullo at gmail.com [mailto:fcerullo at gmail.com] On Behalf Of Fabio
Sent: domingo, 12 de Julho de 2009 11:32
To: paulo.coimbra at owasp.org
Cc: Kate Hartmann
Subject: IBWAS 09 - OWASP Sponsorship
Hi Paulo,
How are you? As you might know OWASP Spain & Portugal are organizing IBWAS
09 by the end of the year (http://www.ibwas.com).
I'm working with them as part of the OWASP Education Committee helping
them to organize materials, call for papers, etc.
I'm contacting you because they asked me about the possibility of OWASP
being a sponsor of the event.
I wonder if you see this as a possibility and what process they would need
to follow in order to apply for this.
Any help is really appreciated.
Thank you,

Mark Bristow
OWASP Global Conferences Committee member -
AppSec DC 09 Organizer -
OWASP DC Chapter Co-Chair - http://www.owasp.org/index.php/Washington_DC



-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/global_chapter_committee/attachments/20090720/f7d26093/attachment-0001.html 

More information about the Global_chapter_committee mailing list