1. Copyright 2007 © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP Foundation http://www.owasp.org OWASP Global Conference Committee (GCC) Committee Update Slides August 1, 2009

2. OWASP 2 Global Conference Committee The primary purpose of the Global Conference Committee is: to determine location, frequency and to oversee and direct global conferences, speakers, and training. Conference Committee Mark Bristow (U.S.), Wayne Huang (Asia), Dhruv Soi (India), Kate Hartmann (U.S.)

3. OWASP 3 8/26/09 Academia Symposium, California Free of charge 8/24/09 MN half day event Free of charge Bruce Schneier speaker 10/13/09 Germany Charging admission (200 EU non-member/160 EU member) but not running through Foundation. Georg Hess states that German attendees require “official German receipts” 10/27/09 OWASP AppSec Brazil Free of charge Gary McGraw, keynote 10/28/09 Rochester Security Summit Cohosted with ISSCA NY 11/10/09 AppSec DC Global Event Need more sponsorship 11/17/09 AppSec India Co sponsored with Security Byte 12/10/2009 IBWAS – Spain/Portugal Running through the foundation Upcoming Events 2009

4. OWASP 4 Upcoming Conferences 2010 AppSec EU 2010 – Sweden - June AppSec Asia 2010 – Bejing, Taipai - March

5. OWASP Conference Financial Proposal Local, regional, and global, should be executing a profit sharing model with the foundation. 70/30 split (negotiable based on expenditure mapping by the local chapter) should be the norm. Alternative split is negotiable based on a budget submitted by the local chapter to justify future spending. ALL local events that charge admission or collect sponsorship funding be run through the foundation. This includes registrations, accounting, contracts, etc. It seems to follow, then, that the Chapter Committee will need to include these requirements in the chapter handbook. Summary All finances for local, regional, and global events must be handled by the foundation. The foundation will designate 30% of the event funds to the local chapters with 70% going back to the foundation. The local chapter funds will then be managed by the foundation. If they are not handled at a “corporate level” then I would believe we run the risk of misuse of funds. It seems to be a step toward protecting the chapter leaders from accusations, more than protecting the money. Reimbursements will be made or, in cases of event planning, payments will be made in advance based on contractual obligations.