For full functionality of this site it is necessary to enable JavaScript. Here are the  .
This website uses cookies to analyze our traffic and only share that information with our analytics partners.
Accept
x
Rules of Procedure
# Force Majeure and Sanctions Policy
1. 
2. 
Adopted by the Board of Directors on September 25, 2024
## Background
This policy is designed to be apolitical when responding to force majeure and implementing sanctions. The goal of this policy is to offer assistance or return to normal as soon as permitted by law.
OWASP understands that affected OWASP members are not the cause of various crises or sanctions, and thus this policy is designed to assist affected members, by firstly offering relief and practical assistance to OWASP members for the duration of a Force Majeure event (unpredictable, not able to be avoided, and prevents normal life or business), and a measured response for sanctions.
Sanctions in particular can be seen by those affected as highly political. However, as a US based 501 (c)(3) not-for-profit, and with a fully controlled entity in the European Union, we must implement both US and EU sanctions. Not all sanctions are alike.
## Force Majeure Assistance
For the duration of a Force Majeure event, including war, riots, natural disasters, extreme weather events, and so on, the following assistance measures shall come into effect:
* **Personal safety.** Leaders and chapters are exempt from all activity requirements.
* **Membership fee relief.** Force Majeure Waived Fee Memberships are only available to renewing memberships, and if so, membership fees are waived and renewable annually. Voting Individual Membership is granted.
* **Employment assistance.** Members living in or formerly from a country affected by Force Majeure can request OWASP share their online resume or job profile.
* **Connecting Members with Employers.** OWASP shall connect Leaders and Members with employers for remote and refugee hiring. Assistance shall be provided at zero cost to employers and members.
* **Immigration assistance.** In consultation with local leaders, OWASP offers immigration letters of support so that our members can resettle in new countries.
* **Professional references.** OWASP Leaders are permitted to provide professional references on OWASP Letterhead.
* **Restore Standing.** Members affected by a membership lapse due to Force Majeure, can submit a ticket for the Global Board to vote on restoring their standing if they wish to run for the Board in the next election.
OWASP must prioritize OWASP Leaders and Members as we are a small organization with limited funding and resources. On a case-by-case basis, Leaders can introduce us to their chapter, event, committee, or project participants on the same basis as members, and we shall try our best to assist. OWASP may perform a donation drive to affray costs if they exceed our available finances.
Force Majeure waived fee memberships are subject to proof of residency using a government-issued photo ID held in the same name as the membership. Proof of residency must be a residential address, and not a commercial property or postal address. Waived fee memberships will only have access to GSuite after proof of residency checks are completed. Voting Individual Membership is granted. Waived fee memberships are subject to random audits to reduce the abuse of this program. Abuse of the program results in immediate termination of membership and deletion of GSuite contents.
## Sanctioned Countries, Governments, Entities, and Leaders
The OWASP Foundation must comply with US Government or EU sanctions. Breaching sanctions may cause the OWASP Foundation to be subject to fines, civil or criminal liability. Many sanctions are highly specific and change frequently.
The OWASP Foundation shall periodically review the list of sanctioned chapters and leaders to determine if the OWASP Foundation can restore operations for Chapters, leadership, and membership.
The OWASP Foundation shall inform the OWASP Global Board and Chapter Committee of any sanctioned chapters, leadership, or access changes.
### Focused Sanctions
Focused sanctions are used to target governments, entities, and individuals. In these situations, it’s unlikely OWASP must withdraw from a country, city, or terminate OWASP memberships.
For a sanctioned government, entity, or specific individual, the following shall occur:
* Sanctioned chapter leaders shall be removed
* Sanctioned chapter or event locations must move to a non-sanctioned and independent location, or the chapter must be deactivated, or event cancelled.
* New individual memberships shall not be processed. Existing individual memberships shall be terminated.
* New corporate memberships shall not be processed. Existing corporate memberships shall be terminated.
  Chapter and event sponsorships shall be terminated.
* New chapter sponsors, grants, and donations shall not be accepted.
### Economic Sanctions
Economic sanctions vary a great deal, but in general, it’s extremely unlikely that OWASP members or leaders caused the economic sanctions. OWASP does not have to withdraw from countries subject to most economic sanctions, but the inability to transfer funds hampers many basic OWASP functions.
Depending on the nature of the economic sanctions in place, OWASP may be unable to do the following:
* Process new or renewing memberships. Existing one and two-year memberships are valid until expiry. Lifetime memberships are not affected.
* Accept or renew corporate memberships, sponsorships, donations, or grants
* Process expenses, including chapter expenses
* Obtain insurance for meetings or events. No in person or hybrid meetings or events can be approved or held.
Chapters can continue to meet virtually, as long as the meetings or activities are cost free.
### Comprehensive Sanctions
Comprehensive sanctions, which are in place for only a very few countries, requires OWASP to withdraw completely from the sanctioned country, and terminate all events, chapters, memberships, sponsorships, and grants.
Where an entire country is sanctioned:
* New chapters cannot be formed. Existing chapters shall be dissolved or made independent of the OWASP Foundation.
* New corporate memberships or event sponsorships shall not be processed. Existing corporate memberships shall be terminated.
* New sponsors, grants, and donations shall not be accepted.
### Refunds
Economic sanctions make financial transactions range from difficult to impossible and can be illegal. OWASP shall attempt to refund residual fees or membership dues but cannot guarantee the return of any fees or dues if such a transaction is illegal or blocked by our financial institutions or payment processors.
* Individual membership fees are refunded on a prorated basis.
* Lifetime memberships shall be refunded in full.
* Corporate membership fees are refunded on a prorated basis.
* Sponsorships for chapters are refunded on a prorated basis.
* Sponsorships for upcoming events shall be canceled and refunded in full, or on a prorated basis if some sponsorship benefits or services have been delivered.
* Existing restricted grants or donations relating to chapters shall be returned to the chapters expense pool. Unrestricted grants and donations shall return to general revenue.
### Access to OWASP systems and materials by sanctioned countries, entities, or individuals
Access to OWASP materials is free and open-source, and can be obtained through many means, including OWASP shared cloud platforms. OWASP relies solely upon the technical controls in place by our shared cloud platforms to prevent access or prohibit the “export” of such freely available information. The OWASP Foundation has no control over these technical controls.
The OWASP Foundation shall not subvert these technical controls to allow access from sanctioned countries.
---
**The OWASP® Foundation** works to improve the security of software through its community-led open source software projects,
hundreds of chapters worldwide, tens of thousands of members, and by hosting local and global conferences.
### Rules of Procedure
* Force Majeure and Sanctions Policy
### Upcoming OWASP Global Events
## Corporate Supporters
OWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, and LASCON are trademarks of the OWASP Foundation, Inc. Unless otherwise specified, all content on the site is Creative Commons Attribution-ShareAlike v4.0 and provided without warranty of service or accuracy. For more information, please refer to our . OWASP does not endorse or recommend commercial products or services, allowing our community to remain vendor neutral with the collective wisdom of the best minds in software security worldwide. Copyright 2025, OWASP Foundation, Inc.
# Global AppSec Program Teams
Adopted by the Board on 22-Sept-2020
## Overview
Global AppSec events offer practitioners worldwide the opportunity to come together to share their passion and knowledge of OWASP, infosec, and appsec. Each event features presentations from experts in the field, networking events, and opportunities to share experiences amongst the infosec community.
The Conference Program Team exists to create an impactful program that speaks to appsec practitioners through high-quality learning experiences, exclusive opportunities, and innovative event elements. The goal is to establish Global AppSec Events as a must-attend, world-class event.
## Team Membership
Conference Program Teams are constituted for each Global AppSec event and consists of members of OWASP members and staff. The selection of team members is based on subject-matter expertise and balanced representation of the OWASP community. For planning purposes, team members shall reside on the continent of the Global AppSec for which they serve. Teams are constituted no later than six months prior to the Global AppSec event.
Team members contribute via email and video conference and are expected to attend up to two called face-to-face meetings throughout the program development process, as well as the Global AppSec Event. Terms are for one Global AppSec. Meetings are usually held on a fortnight cadence, with meetings potentially increasing in frequency as the Event nears. Team members can expect to spend approximately 2-10 hours per week on this commitment.
Finally, Team members will be asked to sign an agreement at the beginning of their term and are expected to abide by the agreement and OWASP Code of Conduct. Team members are not eligible to speak at the Global AppSec which they plan.
## Responsibilities
The Program Team will meet on a regular cadence, which may become more frequent as circumstances require. Team membership is a substantial commitment beginning prior to the Global AppSec and up to one-month post-event.
Team Members:
* Identify program themes
* Develop detailed timeline for submission and review process
* Promote the open call for submissions (training and papers) amongst subject matter experts and encourage submissions
* Recruit diverse group of session reviewers for approval and manage these reviewers
* Manage paper submission system
* Decide on grading criteria for submission
* Finalize review and session selection
* Create a final program of all accepted sessions including their scheduled day and time
* Onsite responsibilities vary but may include:
* Being present for the entire conference (Wednesday through Friday)
* Providing welcome remarks each morning
* Introducing keynote speakers and facilitators
* Providing closing remarks
Suggested Support:
* Recommend keynote speakers who align with the direction of the event
* Assist in promoting the Global AppSec communities, corporate contacts, and other markets
* Identify and make connections with potential corporate partners
OWASP Staff Support:
* Develop Speaker Acknowledgement Form
* Develop and send accept/reject letters
* Send and track receipt of Speaker Acknowledgement Forms
* Graphical design of conference including signage and print materials
* All event management logistics, budget management, website content, promotional items, site selection, catering, and venue
* Manage facility space allocation and programming layout
* Management of leader meeting and receptions
* Video Recordings management
* All other Conference-related activities not explicitly delegated to the Program Team.
Local Chapters (where applicable):
* Supports logistic tasks on site before and during Event
* Contributes knowledge about local cultural practices and local knowledge.
* Provides timely ideas, suggestions for local services, catering, and complimentary events.
* Helps logistically at arrival of other team members, speakers, and guests.
## Compensation
Team members will receive economy-class airfare, lodging, airport transfers, and meals for the Global AppSec for which they plan the program.
## Application
Program Team members are selected through a competitive application process. OWASP Staff will notify the community of the Program Team formulation, timeline for applications, and select the Program Team. Criterion for selection include:
* Former experience organizing similar conferences
* Historical OWASP Community involvement and reputation
* OWASP Membership status and history
* Completeness of the application
* Global AppSec Program Teams