[Owasp-board] ASVS needs a new leader

Dave Wichers dave.wichers at owasp.org
Tue Jul 27 17:55:24 UTC 2010

I already volunteered and Eoin was agreeable (since he volunteered too) but
if there is enough activity on the project to warrant a team of leaders,
that’s perfectly fine with me.




From: dinis cruz [mailto:dinis.cruz at owasp.org] 
Sent: Tuesday, July 27, 2010 12:49 PM
To: Paulo Coimbra
Cc: Dave Wichers; Eoin; Andrew van der Stock; OWASP Foundation Board List;
Brad Causey; Jason Li; Jeff Williams; Leo Cavallari; Matt Tesauro; Pravir
Subject: Re: [Owasp-board] ASVS needs a new leader


Since Tom sent out his 'we need a new leader for ASVS' in Linked in:

"#3 - HELP WANTED - We are seeking a new project leader for OWASP ASVS, if
you want to help us change the world of application security we could use
your help in this volunteer role." 

...which generated a number of potential applications, we need to take this
oportunity to define some methodology (which Paulo is working on) for
leaders to be appointed to mature OWASP projects.

Given the current state of affairs, and the type of project that ASVS is, we
are probably looking at having a joint leadership of at least 4 leaders (if
not 5 co-leaders to allow for majority voting)


On 27 July 2010 16:27, Paulo Coimbra <paulo.coimbra at owasp.org> wrote:

Dave, Eoin, Andrew, GPC and Board,


I am currently working on a general methodology to deal with this kind of
issues. I will do my best to have it concluded today. If you agree, as soon
as it is ready, I will send it off for your assessment.




Paulo Coimbra,

OWASP Project <https://www.owasp.org/index.php/Main_Page>  Manager


From: Dave Wichers [mailto:dave.wichers at owasp.org] 
Sent: terça-feira, 27 de Julho de 2010 16:27
To: 'Eoin'
Cc: 'Andrew van der Stock'; 'Paulo Coimbra'
Subject: RE: [Owasp-board] ASVS needs a new leader


Thanks Eoin. I appreciate your willingness to step into the breach and
certainly if you have any specific ideas for moving ASVS forward that you
want to participate in, please let me know.


I’ll update the wiki page to indicate who the current leader is. Paulo, if
you want to indicate on the leaders list that we have ‘changed our mind’,
please do, or I can if you like.


Thanks, Dave


From: eoinkeary at gmail.com [mailto:eoinkeary at gmail.com] On Behalf Of Eoin
Sent: Tuesday, July 27, 2010 10:57 AM

To: Dave Wichers
Cc: Andrew van der Stock; Paulo Coimbra

Subject: Re: [Owasp-board] ASVS needs a new leader


There is no transparency issue here that I see (forgive the pun)

Dave seen as you are one of the original leaders I shall give way to your
decision to lead this.


I simply did not want someone with no track record leading such an important







On 27 July 2010 14:25, Dave Wichers <dave.wichers at owasp.org> wrote:

I don’t mind transparency. Most projects are led by their lead contributors
and if the current lead steps aside I would certainly expect the other lead
contributors to be offered the position first. I was on vacation last week
so wasn’t really paying much attention to emails. When I got back yesterday
I talked it over with Jeff and that’s why you first heard about this from


I certainly would love to have others like you and Eoin and Christian
contribute to the project if we want to move it forward somehow, and if the
project gets too big for me to handle, and someone like Eoin or whomever
wants to lead that larger effort because I chose to step aside I’m OK with
that too.




From: Andrew van der Stock [mailto:vanderaj at gmail.com] 

Sent: Monday, July 26, 2010 8:55 PM
To: Dave Wichers
Cc: 'Eoin'; 'Paulo Coimbra' 


Subject: Re: [Owasp-board] ASVS needs a new leader


Hi Dave,


Although in broad strokes I support your decision, I'd really like the
process OWASP uses to change leadership to be a bit more transparent and
consistent than this. 


I know the ASVS grew out of the Aspect checklist, and realistically it would
be nice to have one of the original authors work on the project, I just want
to make sure everyone is aware of how the project is changing hands and that
it is as transparent as possible, and it's the same process for all change





On 27/07/2010, at 6:48 AM, Dave Wichers wrote:




If you don’t mind, I’ll volunteer to lead the ASVS project in Mike’s stead.
This project, like the Top 10 in my opinion, is something that probably
won’t change much except once every 2-3 years.


I’m one of the original authors, along with Jeff, so I figure it would be
best for he or I to lead it.


That OK with you? Regardless, did you have any specific things you wanted
done with the ASVS project that haven’t happened already? I’m encouraging
alignment of the 3 guides with ASVS already and that seems to be moving




From: owasp-board-bounces at lists.owasp.org
[mailto:owasp-board-bounces at lists.owasp.org] On Behalf Of Paulo Coimbra

Sent: Friday, July 23, 2010 1:27 PM
To: 'OWASP Foundation Board List'; 'Global Projects Committee'; 'Eoin'
Cc: 'Andrew van der Stock'

Subject: Re: [Owasp-board] ASVS needs a new leader


In terms of new leadership, is this issue solved and closed?




Paulo Coimbra,

OWASP Project <https://www.owasp.org/index.php/Main_Page>  Manager


From: Eoin [mailto:eoinkeary at gmail.com] 
Sent: sexta-feira, 23 de Julho de 2010 12:29
To: Paulo Coimbra
Cc: Global Projects Committee; Andrew van der Stock; OWASP Foundation Board
Subject: Re: [Owasp-board] ASVS needs a new leader


I am happy to take a part lead role in asvs if required but ctf is going to
take the rest of my time.

On 23 Jul 2010 00:29, "Paulo Coimbra" <paulo.coimbra at owasp.org> wrote:

Hi Andrew,

I will - thank you for the heads-up. I had already put this issue to Board's
and GPC's consideration and it seems that Mike has indeed quit OWASP and
therefore a new ASVS's leadership is needed. Please give me a couple of days
to deal with the matter.


Paulo Coimbra,
OWASP Project Manager

> >-----Original Message-----
> >From: Andrew van der Stock [mailto:vanderaj at gmail.com]
> >Sent: quinta-feira, 22 de Julho de 2010 23:27
> >To: Paulo Coimbra
> >Subject: ASVS needs a new leader
> >
> >Hi Paulo,
> >
> >Can you also take charge of the ASVS project's leadership change. I've
> >only got one potential person to put their hand up, and it's Christian
> >Heinrich. I think for various reasons, we should try to get more folks
> >interested in the position.
> >
> >thanks,
> >Andrew=

Owasp-board mailing list
Owasp-board at lists.owasp.org


Eoin Keary
OWASP Global Board Member
OWASP Code Review Guide Lead Author

Sent from my i-Transmogrifier


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20100727/f7823803/attachment-0002.html>

More information about the Owasp-board mailing list