<div dir="ltr">Yes, got it.</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, May 9, 2014 at 8:52 AM, Josh Sokol <span dir="ltr"><<a href="mailto:josh.sokol@owasp.org" target="_blank">josh.sokol@owasp.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">OK, it sounds like everyone who has commented on this (the majority of the Board) is in agreement on this.  Sarah, if you'd like a formal vote, we can do that, but I don't think that's really necessary.  Can you please take this on as an action item for your team?  Specifically:<br>

<ol><li>Updates from ED during quarterly meetings should focus on staff activities as they relate to our strategic goals.  Updates on success metrics for each goal and the progress made toward each.<br></li><li>The Board sponsor for each strategic goal should be actively involved in the process to execute on these goals to ensure that execution is in line with strategic goals.</li>

<li>Communication plans should be created for our strategic initiatives with a monthly (minimal) update to the Board on progress.</li></ol><p>Thanks!</p><span class="HOEnZb"><font color="#888888"><p>~josh<br></p></font></span></div>
<div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">
On Fri, May 9, 2014 at 10:37 AM, Michael Coates <span dir="ltr"><<a href="mailto:michael.coates@owasp.org" target="_blank">michael.coates@owasp.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div dir="ltr"><div>I'm in agreement here too.<br></div></div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><br>--<br>Michael Coates<br>@_mwc<br><br></div></div><div><div>
<br><br><div class="gmail_quote">On Fri, May 9, 2014 at 8:25 AM, Tobias <span dir="ltr"><<a href="mailto:tobias.gondrom@owasp.org" target="_blank">tobias.gondrom@owasp.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <div>+1. Agreed. <br><span><font color="#888888">
      - Tobias</font></span><div><div><br>
      <br>
      On 07/05/14 18:14, Tom Brennan - proactiveRISK wrote:<br>
    </div></div></div><div><div>
    <blockquote type="cite">
      
      <div>Agreed<br>
        <br>
        <span style="background-color:rgba(255,255,255,0)">---</span>
        <div><span style="background-color:rgba(255,255,255,0)">Tom
            Brennan | <a href="tel:973-298-1160%20x799" value="+19732981160" target="_blank">973-298-1160 x799</a> | </span><span style="font-size:13pt"><a href="mailto:tomb@proactiverisk.com" target="_blank">tomb@proactiverisk.com</a></span>
          <div><br>
          </div>
        </div>
      </div>
      <div><br>
        On May 7, 2014, at 12:58 PM, Josh Sokol <<a href="mailto:josh.sokol@owasp.org" target="_blank">josh.sokol@owasp.org</a>>
        wrote:<br>
        <br>
      </div>
      <blockquote type="cite">
        <div>
          <div dir="ltr">
            <div>
              <div>
                <div>I think that the schedule (doing it in correlation
                  with the quarterly meetings) is a good thing.  I guess
                  what I'm really asking is more for a focus on how our
                  activities relate to our strategic goals, rather than
                  just a list of things that staff has done.  The
                  problem that I'm seeing is that the Board set a
                  direction, but we left it up to the operations team to
                  determine how to execute on that vision.  We have
                  Board members sponsoring these goals that have not
                  been engaged on the ongoing activities and when we
                  review, we review as tasks rather than milestones. 
                  I'd like to see the overall plan.  Here's an example:<br>
                  <br>
                  <blockquote>For goal X we took the Board's direction
                    and broke it down into the following deliverable
                    milestones.  Employee Y completed this milestone on
                    this date.  We expect to have the following
                    milestones complete by this other date.  We are on
                    target to meet this goal by the specified completion
                    date.<br>
                  </blockquote>
                  <br>
                </div>
                To summarize, think of the goals as projects with the
                metrics of success as the milestones.  Think of the
                Board sponsor as a part of the core project team with
                the other Board members as key stakeholders.  Develop a
                communication plan and keep us in the loop.<br>
                <br>
              </div>
              Michael, I think a simple "yes, I think I would like
              quarterly updates on strategic goals" or "no, I think it
              would be a waste of our time" would be fine here.  No need
              to formalize anything.  I'd like more visibility into our
              operations (my fiduciary responsibility) and I feel like
              this gets us there without being overly intrusive.  I'm
              not asking for a formal Board vote.  I'm asking if others
              feel the same way.<br>
              <br>
            </div>
            ~josh<br>
          </div>
          <div class="gmail_extra"><br>
            <br>
            <div class="gmail_quote">On Wed, May 7, 2014 at 11:28 AM,
              Sarah Baso <span dir="ltr"><<a href="mailto:sarah.baso@owasp.org" target="_blank">sarah.baso@owasp.org</a>></span>
              wrote:<br>
              <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                <div dir="ltr">Josh -
                  <div><br>
                  </div>
                  <div>I am not sure if this is for me or the rest of
                    the board or both - but i would be happy to put
                    together a status update for you and ensure it is
                    included in future updates.</div>
                  <div>
                    <br>
                  </div>
                  <div>One piece of clarification regarding reporting
                    that would be helpful - I currently have been
                    preparing reports (and collecting roll up reports
                    from the staff) based on when the board meetings are
                    scheduled.  Is this what you (and everyone else is
                    expecting) or would you like them on a more
                    frequent/different schedule.</div>
                  <div><br>
                  </div>
                  <div>Thanks,</div>
                  <div>Sarah</div>
                </div>
                <div class="gmail_extra"><br>
                  <br>
                  <div class="gmail_quote">
                    <div>On Wed, May 7, 2014 at 8:54 AM, Josh
                      Sokol <span dir="ltr"><<a href="mailto:josh.sokol@owasp.org" target="_blank">josh.sokol@owasp.org</a>></span>
                      wrote:<br>
                    </div>
                    <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
                      <div>
                        <div dir="ltr">
                          <div>Back in January, we went through and
                            defined the Board Strategic Goals for 2014
                            including metrics of success and Board
                            member sponsors.  Here we are now, in May (4
                            months later), and I haven't been engaged by
                            our operations team on my sponsored goal
                            (Strengthening OWASP Chapters), nor have I
                            heard an update from our Executive Director
                            on progress that our staff is making towards
                            these goals.  Rather than finding out what
                            we did after the year is up, I would
                            personally like to see a progress report for
                            each of the strategic goals as part of our
                            quarterly Board meetings.  I believe that
                            updating the Board should be the
                            responsibility of our Executive Director,
                            but it is the Board's responsibility to
                            ensure that our staff is in alignment (and
                            progressing towards) these goals and a
                            quarterly touch point would likely help in
                            doing so.  I'd be interested in your
                            thoughts on this.<span><font color="#888888"><br>
                                <br>
                              </font></span></div>
                          <span><font color="#888888">~josh<br>
                            </font></span></div>
                        <br>
                      </div>
                      <div>_______________________________________________<br>
                        Owasp-board mailing list<br>
                        <a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
                        <a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
                        <br>
                      </div>
                    </blockquote>
                  </div>
                  <span><font color="#888888"><br>
                      <br clear="all">
                      <div><br>
                      </div>
                      -- <br>
                      <div dir="ltr">
                        <div>Executive Director</div>
                        <div>OWASP Foundation</div>
                        <div><br>
                        </div>
                        <div><a href="mailto:sarah.baso@owasp.org" target="_blank">sarah.baso@owasp.org</a><br>
                          <a href="tel:%2B1.312.869.2779" value="+13128692779" target="_blank">+1.312.869.2779</a><br>
                          <br>
                          <br>
                          <br>
                          <br>
                        </div>
                      </div>
                    </font></span></div>
              </blockquote>
            </div>
            <br>
          </div>
        </div>
      </blockquote>
      <blockquote type="cite">
        <div><span>_______________________________________________</span><br>
          <span>Owasp-board mailing list</span><br>
          <span><a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a></span><br>
          <span><a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a></span><br>
        </div>
      </blockquote>
      <br>
      <font size="1"><span>WARNING:
          E-mail transmission cannot be guaranteed to be secure or
          error-free as information could be intercepted, corrupted,
          lost, destroyed, arrive late or incomplete, or contain
          viruses. The sender therefore does not accept liability for
          any errors or omissions in the contents of this message, which
          arise as a result of e-mail transmission. </span><span>No employee or agent is authorized to
          conclude any binding agreement on behalf of proactiveRISK with
          another party by email.</span></font>
      <div style="font-size:1.3em"><span><br>
        </span></div>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
Owasp-board mailing list
<a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a>
<a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a>
</pre>
    </blockquote>
    <br>
  </div></div></div>

<br>_______________________________________________<br>
Owasp-board mailing list<br>
<a href="mailto:Owasp-board@lists.owasp.org" target="_blank">Owasp-board@lists.owasp.org</a><br>
<a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
<br></blockquote></div><br></div></div></div>
</blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
Owasp-board mailing list<br>
<a href="mailto:Owasp-board@lists.owasp.org">Owasp-board@lists.owasp.org</a><br>
<a href="https://lists.owasp.org/mailman/listinfo/owasp-board" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-board</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div dir="ltr"><div>Executive Director</div><div>OWASP Foundation</div><div><br></div><div><a href="mailto:sarah.baso@owasp.org" target="_blank">sarah.baso@owasp.org</a><br>
+1.312.869.2779<br><br><br><br><br></div></div>
</div>