How to start an OWASP Committee in 6 easy steps

Sherif Mansour
OWASP London
Published in
2 min readAug 5, 2019

The OWASP Global Committees empower members of the community to help shape OWASP and make the best decisions for the Foundation. The goal of the Global Committees 2.0 plan is to streamline the process for any member of the OWASP community who has an idea to improve the Foundation, to have a vehicle to act upon the idea and successfully implement it.

OWASP Global Committees 2.0 Operational Model

Passed by a vote of the OWASP Board of Directors on December 19, 2018.

Summary

If an OWASP member wants to create a new OWASP committee the process for that is as follows:

1. The member must circulate the proposed committee, firstly through the OWASP mailing list. Optionally the member can use other mediums such as Slack so that more community members can lend support to the proposal. This proposal must state the rationale and the desired scope for the creation of the new committee.

2. The proposal must get majority support from those who responded to any communications about it and no major arguments against it.

3. If the previous requirement is met the OWASP Board of Directors will determine whether the committee and its scope is in line with OWASP’s goals and if any conflicts exist with other committees.

4. If no conflict exists, the proposal will be discussed at the next Board of Directors meeting. This will involve community discussion and a vote on its formation.

5. If a majority vote is established, the Board of Directors will put out a public call for any OWASP members interesting in committee membership, with a 4 week time period.

6. If the committee gets five applications to join the new committee and creates a board to head up the new committee, then its proposal will be deemed successful and the committee is created. The minimum required roles for a committee board are:

  • Secretary
  • PR/Marketing
  • Web
  • Membership
  • Finance & Meetings/Conferences

https://www.owasp.org/index.php/Governance/OWASP_Committees

--

--

Sherif Mansour
OWASP London

Father | Ex-OWASP Chairman | Ex-OpenSSF Governing Board member | Cybersecurity Executive