[Owasp-board] Conflict of Interest / OWASP

johanna curiel curiel johanna.curiel at owasp.org
Wed Nov 16 06:21:45 UTC 2016


The document covers and is also   applicable to employees and not only
the ED

'It is important for the OWASP  Foundation board of directors and
*employees*  to be aware that both real and apparent conflicts of interest
or dualities of interest sometimes occur in the course of conducting the
affairs of the Foundation and that the appearance of conflict can be
troublesome even if there is in fact no conflict whatsoever.'

On Tuesday, November 15, 2016, Andrew van der Stock <vanderaj at owasp.org>

> Sorry, when I saw "Matt" in Inbox, I assumed it was Matt T. My apologies.
> Carry on.
> Andrew
> On Wed, Nov 16, 2016 at 9:08 AM Andrew van der Stock <vanderaj at owasp.org
> <javascript:_e(%7B%7D,'cvml','vanderaj at owasp.org');>> wrote:
>> Tom,
>> Matt T is not a covered person for that policy.
>>    - He is not a director of OWASP (at this time)
>>    - He is not an officer of OWASP with delegated board duties (i.e.
>>    Executive Director or CFO)
>>    - He does not hold a financial interest in OWASP (in fact, afaik, no
>>    one does at this time until we start using the line of credit and then its
>>    a bank we do business with)
>> Unless Matt T is asking OWASP to make a contract with a firm he owns, or
>> stands to benefit in some way from a contract being let by OWASP, I believe
>> that the policy does not apply to him.
>> thanks,
>> Andrew
>> On Wed, Nov 16, 2016 at 8:15 AM Tom Brennan <tomb at owasp.org
>> <javascript:_e(%7B%7D,'cvml','tomb at owasp.org');>> wrote:
>>> Matt,
>>> Here is a example of a global policy on moonlighting applied to OWASP
>>> Foundation (below) summarized.
>>> There is also a link to the annual document that was approved in 2013
>>> here: https://docs.google.com/document/d/1IlyfFrlQg0dznJD2MnyAd2njUETVU
>>> CiMFuUYxOI8mmQ/edit?usp=sharing
>>> ================
>>> Holding a Secondary Job (Moonlighting)
>>> While employed at OWASP Foundation, you may not conduct outside
>>> business, including self-employment or “moonlighting,” if that business:
>>> Interferes with the proper performance of your job at OWASP Foundation
>>> Occurs during your normal working hours at OWASP Foundation
>>> Uses OWASP Foundation assets
>>> Uses confidential or proprietary information or processes that you
>>> gained as an OWASP Foundation employee.
>>> Otherwise creates a conflict of interest, for example:
>>> If your loyalties or actions may be divided between OWASP Foundation and
>>> a competitor, supplier, customer, or other entity that does business with
>>> OWASP Foundation, or
>>> If your role or position at OWASP Foundation will benefit the outside
>>> business or create the appearance of an advantage.
>>> Programming for a consulting company and using OWASP Foundation work
>>> time for meetings or phone calls
>>> Signing with a publishing company to write a book about a technology you
>>> learned on the job at OWASP Foundation
>>> Serving as a consultant or expert witness in any lawsuit or legal
>>> dispute without prior OWASP Foundation authorization
>>> Taking a full-time political position or using OWASP Foundation work
>>> time to perform the duties of a part-time political position
>>> ====================================
>>> _______________________________________________
>>> Owasp-board mailing list
>>> Owasp-board at lists.owasp.org
>>> <javascript:_e(%7B%7D,'cvml','Owasp-board at lists.owasp.org');>
>>> https://lists.owasp.org/mailman/listinfo/owasp-board

Johanna Curiel
OWASP Volunteer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20161116/d6ca9ec5/attachment.html>

More information about the Owasp-board mailing list