[Owasp-board] REMINDER _ Re: URGENT CONTRACT FOR OWASP SUMMIT 2017 - Re: Proposal of Costs: Woburn Forest - Owasp - 12.06.2017

Seba seba at owasp.org
Mon Jan 23 06:19:08 UTC 2017

hi Andrew,

We did not ask for the board intervention.

The event is being worked on since October 2016.
The rebranded event (together with the updated budget) was submitted and
approved by Laura.
The venue contract is reviewed and approved by Laura.

We now just need it signed?

I am copying my email of 5-Januari below (where all this was explained to
Laura, Matt and Andrew).

Thank you

Best wishes for 2017!

We made some changes/decisions in the last couple of weeks.

We rebranded our summit to be a "pure" OWASP projects summit - OWASP Summit
It will take place at 12-19 June in Woburn Forest Centre Parcs (UK).

We already have seed funds from chapters/projects (17.500 USD) and reserved
10 villas for the summit.
We will start registrations & attract extra funding/sponsoring soon to get
the rest of the funds to organize the summit.

(more details will be provided to the board / leaders in the coming weeks).

Can you for now:
1) remove the OWASP-DevSecCon-Summit as event
2) recognize the OWASP-Summit-2017 as submitted today in OCSM as summit
(please confirm - I never got confirmation)

We will forward the venue contract to you for review/signature in the
coming days.

On Mon, Jan 23, 2017 at 2:08 AM Andrew van der Stock <vanderaj at owasp.org>

Please continue to work with Laura, our events manager. Asking for Board
intervention will just slow you down. We need all events to be properly
planned and not trying to side-step processes so they can be sustainable
and successful. One off events do not help long term.

I think the Board is broadly supportive of new well planned events, so if
the nature of the event has changed, let's make sure we are briefed on the
new direction.

This event's indicative costs are right up there with AppSec EU, the
proposed AppSec Middle East (which is paused due to law / regulation
changes), and AppSec Cali, and we have lead times of over 12 months for
each of those events. We make allowances for them because of that. Please
work with Laura. I cannot re-iterate this strongly enough.

As this is a big expense, it needs to be budgetted for and OCMS + Laura is
the right way to go here, so we can make sure everything is done and
checked off and nothing is forgotten. Matt Konda and I will need to
countersign once an approved budget is brought to us.


On Mon, Jan 23, 2017 at 12:03 AM, johanna curiel curiel <
johanna.curiel at owasp.org> wrote:

That sounds great.

Indeed  if the ticket includes hotel and catering is a very good price with
an option to be shorter than the full 5 days

On Sunday, January 22, 2017, Seba <seba at owasp.org> wrote:

hi Johanna,

the tickets are not too expensive, as they include catering & lodging for 5
24h tickets are 1400 EUR covering the venue, accommodation (shared lodge),
catering for 5 days 12-16 June 2017.
there is also the option to participate based on day-tickets, 465 EUR
covering the venue, catering during the day for 5 days, 12-16 June 2017.

the venue was selected, based on location: near London and an international
airport hub, Heathrow. for maximum reachability.
at the same time the lay-out supports the "summit-style" villas where
workshops can be done for several days.
if you cannot free up 5 days in your agenda, we will offer the option to
come for a smaller number of days.

kind regards


On Sat, Jan 21, 2017 at 11:44 PM johanna curiel curiel <
johanna.curiel at owasp.org> wrote:

Hi Seba

I think indeed that Josh has not evaluated the latest information regarding
the change. Right now, as I understand it is an OWASP Summit and not
DevSecOps as it was originally

However a ticket of https://www.regonline
.com/registration/Checkin.aspx?EventId=1942827 (24h tickets are 1400 EUR)
is a quite expensive one.

I understand that this is for a 5 day summit but what exactly do a ticket
of EUR1400 cover? Is this including Hotel + Food?

I personally cannot afford the ticket price nor be 5 days away for a summit.
Most OWASP conferences cost 1/2 or a little over the half of the price and
are 2 days.

What about make it in another city in UK(London is expensive for a stay)
and consider a shorter summit (2 up to 3 days instead of 5)?



On Sat, Jan 21, 2017 at 5:49 PM, Seba <seba at owasp.org> wrote:

Hi Josh,

Please read the emails / links below.
We decided in December to make this a "pure" owasp summit. There is no
for-profit company involved.

Kind regards,


On Sat, 21 Jan 2017 at 21:19, Josh Sokol <josh.sokol at owasp.org> wrote:

This is not all about the money.  The ramifications of OWASP signing the
contract is that we would be liable for the event of a for-profit company.
This event was reviewed by the Board, using the information available to
us, and we unanimously voted that the OWASP Foundation should not be
supporting this event.  This should include chapter donations, signing
contracts, and event registration.  The company that stands to profit from
this event should be the one to sign the contracts and obtain funding for

On Sat, Jan 21, 2017 at 4:45 AM, Seba <seba at owasp.org> wrote:

Hi Matt,

I think there is a misunderstanding: we do not ask seeding funds from the

See down in the email thread:
Information on the event is here:
and here:

all information (including the budget) was provided as part of the OCMS
budget link:
which was approved.
Our event is listed here:

Regarding your funding question:
We currently have 17,000 USD available in donations from the SAMM project
and the London chapter (which easily covers the 30% downpayment)
We are starting registrations this week (Kate has created the RegOnline

The registratration link is here
https://www.regonline.com/registration/Checkin.aspx?EventId=1942827 (24h
tickets are 1400 EUR)

Thanks for your swift review & signature of the venue contract (which was
due yesterday)

Kind regards,


On Fri, Jan 20, 2017 at 6:23 PM Matt Konda <matt.konda at owasp.org> wrote:

(+Board List)


I'm confused.  If I sign this, isn't OWASP essentially agreeing to pay for
the contract in the event all of your assumptions don't work out?

I'm sorry, but I don't think that was the board's intent.  I've copied the
board list so that people can weigh in.


On Fri, Jan 20, 2017 at 5:07 AM, Seba <seba at owasp.org> wrote:

hi Laura, Matt,

The deadline is today: can you please make sure to get the contract signed
& delivered?



Owasp-board mailing list
Owasp-board at lists.owasp.org

Owasp-board mailing list
Owasp-board at lists.owasp.org

Johanna Curiel
OWASP Volunteer

Johanna Curiel
OWASP Volunteer

Owasp-board mailing list
Owasp-board at lists.owasp.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-board/attachments/20170123/ce3dbc1f/attachment-0001.html>

More information about the Owasp-board mailing list