[Owasp-board] Fwd: [GPC] Project efforts

Tom Brennan tomb at owasp.org
Tue May 17 13:38:40 UTC 2011


FYI Item for June 6th see thread topic of "marketing Owasp outside of Owasp"


Begin forwarded message:

> From: "Jeff Williams" <jeff.williams at aspectsecurity.com>
> Date: May 17, 2011 9:31:44 AM EDT
> To: "Jim Manico" <jim.manico at owasp.org>, "Paulo Coimbra" <paulo.coimbra at owasp.org>
> Cc: joe.bernik at owasp.org, global-projects-committee at lists.owasp.org
> Subject: Re: [GPC] Project efforts
> 

> As I discussed at the Summit, OWASP is best viewed as a platform for projects like ESAPI.  The Board doesn’t (and shouldn’t) have power to “task” any volunteers, and the same goes for the Global Committees, Kate, and Paolo.  All the Foundation can do is to provide an excellent platform for communities and projects focused on application security to thrive.
> 
>  
> 
> --Jeff
> 
>  
> 
> From: global-projects-committee-bounces at lists.owasp.org [mailto:global-projects-committee-bounces at lists.owasp.org] On Behalf Of Jim Manico
> Sent: Monday, May 16, 2011 8:17 PM
> To: Paulo Coimbra
> Cc: joe.bernik at owasp.org; global-projects-committee at lists.owasp.org
> Subject: Re: [GPC] Project efforts
> 
>  
> 
> Tom,
> 
>  
> 
> I feel this criteria is almost dangerous to hold up as value. These criteria completely miss the true aspects of software project value such as code quality, support provided, documentation, how well the code is being maintained, how well the code addresses certain problems, etc. I built a document to define this in more detail that I'll send to Jason to champion if he and the GPC agree.
> 
>  
> 
> Also, what is the chain of command? Can any board member just task our volunteers directly (does Paolo just vertically report to everyone)? Or is there a professional structure in place?
> 
> 
> 
> 
> Regards,
> 
> 
> Jim Manico
> 
> 
> On May 16, 2011, at 11:54 AM, "Paulo Coimbra" <paulo.coimbra at owasp.org> wrote:
> 
> Hi Tom,
> 
>  
> 
> I understand the goal you ultimately want to reach and its makes all sense to me. Also, I am obviously at your disposal to assist and make this happen but, to be honest, I am thinking since yesterday, when I received your email, about viable ways to collect the needed data and the path doesn’t seem clear to me. I will reflect a bit more about this and, if you could send me off any ideas relatively to a methodology to gather the needed info, I would thank you.
> 
>  
> 
> In addition, I am carbon copying our GPC so that we keep its members in the loop and also to see if they have any sharable insight on this issue. As you might know, GPC has been discussing the need of creating a process to automatically collect projects’ data as a way to feed the second leg of current assessment process (Projects’ Health assessment, under work) and, in this context, I take the opportunity to ask its members whether they think we could add these new projects’ variables into the set of the ones originally thought of.
> 
>  
> 
>  
> 
> Thanks,
> 
> - Paulo
> 
>  
> 
>  
> 
> Paulo Coimbra,
> 
> OWASP Project Manager
> 
>  
> 
> From: Tom Brennan [mailto:tomb at owasp.org] 
> Sent: domingo, 15 de Maio de 2011 14:16
> To: Paulo Coimbra
> Cc: joe.bernik at owasp.org
> Subject: Project efforts
> 
>  
> 
> Paulo,
> 
>  
> 
> I want to collect a estimated value of OWASP Projects (all of them) using a model that is based on variables. 
> 
>  
> 
> Value 1 Effort in hours
> 
> Value 2 Avg US Salary
> 
> Value 3 Lines of Code if known
> 
> (See attached)
> 
>  
> 
> This will allow us to put together a cost/value for OWASP projects and use that as a number when we talk to Industry - can you help here on existing and future projects on collection of this data type.
> 
>  
> 
> _______________________________________________
> Global-projects-committee mailing list
> Global-projects-committee at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/global-projects-committee
> 
> _______________________________________________
> Global-projects-committee mailing list
> Global-projects-committee at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/global-projects-committee
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20110517/cee3daa3/attachment-0002.html>


More information about the Owasp-board mailing list