Need signing contact

[Rob van der Veer]

Dear Board,

Apologies for reaching out directly, but we urgently need support.

Would someone from the Board be available to act as signatory for a venue contract for an OWASP AI Exchange event? The event is funded through our own sponsor contributions and falls under OWASP governance.

We are organizing the AI Security Policy Forum in Washington, DC, bringing together organizations such as OWASP, NIST, MITRE, CSA, COSAI, CIS, SANS, and policymakers. At this moment, we risk losing the venue reservation due to the absence of a timely signature. Andrew has not been reachable, and while Starr is doing her best to assist, we have not yet been able to resolve this.

More broadly, this situation reflects a pattern of slow turnaround that is beginning to affect our ability to execute. For example, we currently have a sponsor-related ticket that has been open for 45 days.

I may be missing context, but from our perspective, this is becoming difficult to manage. The project team is investing significant time and effort to secure sponsors, develop content, and organize high-impact initiatives. Timely operational support is essential to make this successful.

Could you please advise on how we can resolve the immediate issue, and how to prevent similar delays going forward?

Kind regards,
Rob van der Veer

AI Exchange, OpenCRE

[Steve Springett]

Hi Rob,

Thanks for escalating and making us aware of the situation. As you may know, OWASP staff recently lost two employees, so the Foundation is currently understaffed. Ricardo and I have escalated the issue to Andrew directly.

When does the contract need to be signed by?

The Board does not have signing authority for contracts. So we'll need to work with Andrew on this. 

—

Steve Springett Leader, OWASP CycloneDX and Dependency-Track Leader and Co-author, OWASP SCVS Chair, OWASP CycloneDX and Ecma TC54 Chair, OWASP Global Board of Directors

--
You received this message because you are subscribed to the Google Groups "Global-board" group.
To unsubscribe from this group and stop receiving emails from it, send an email to global-board...@owasp.org.
To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/global-board/CAJH_1%3DrcLrTA-y-zcqshiHZCp9zDiBUVDJgzKsNtsY5tvor8GA%40mail.gmail.com.

[Rob van der Veer]

Thank you Steve, for looking into this and escalating.

I am sorry to hear about the employees lost. It is news to me. I hope for everyone that you soon get reinforcements. It must be stressful.

To answer your question: The contract text was created March 13, 16 days ago and once we let them know the OWASP contact details, the contract was sent for signing 10 days ago. By now, the venue is in their right to commit to another client in case there is interest in the meeting room. The longer we wait, the bigger this risk. 

Hope to see some of you in Vienna!

Best,

Rob

[Andrew van der Stock]

Hi Rob and Aruneesh

First off, my heartfelt apologies for not getting this sorted before now. I'm going to send you both a separate message on how to get my attention when something needs to be done urgently. 

I've searched my Inbox for Docusign and similar signing requests, but do not see one. Can you please re-send any contracts that need to be signed to my email address? If it's Docusign, it will have expired, so I need a new one. 

Lastly, we've had a fair few things fall through the cracks in the last month, but having things in Jira has really helped us with our workflows and making sure things aren't lost in mailboxes here or there. If you can log tickets with contracts to be signed, this is visible to all of our folks at the Foundation, and I look every day at them. This can help immensely with ensuring that you get timely attention to contracts that need to be signed, rather than stuck in one person's inbox. 

thanks,

Andrew

To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/global-board/CAJH_1%3Drg5_YtfYeyJ4z7RediWzC6jmfBb2nLSJQk37qRdb_Fmg%40mail.gmail.com.

[Rob van der Veer]

Thanks Andrew,

We felt a little bit left alone, but very much appreciate the apology and the situation. 

I just asked the venue to resend the docusign and made a ticket (I thought that was only for invoices, sorry): https://owasporg.atlassian.net/servicedesk/customer/portal/4/OSD-7184

Thanks in advance.

Best,

Rob

[Andrew van der Stock]

Hi Aruneesh and Rob,

The form was delivered to them last week, and since I now have the DocuSign in my inbox, it is now signed. 

Please let me know if you need anything else to get this finished.

thanks,

Andrew van der Stock
Distinguished Lifetime Member

Executive Director, OWASP

+1 510 697 9315

On Tue, Mar 31, 2026 at 2:39 AM aruneesh...@owasp.org wrote:

Andrew,

First, thank you for the traction on this and for your help in de-risking the AI Security Policy Forum. It’s a high-impact initiative for us, and I appreciate you stepping in to resolve the signing issues.

Regarding project operations, there are two specific OWASP AIBOM sponsors we need to move forward with urgency:

• Codacy (Portugal): This has been open since February, and the vendor has been actively chasing us for an update. - OSD-7010
• Prediction Guard: This is a new vendor that also needs attention. - OSD-7135

I am concerned that we are constantly running the risk of losing these sponsors for the project due to the current turnaround times. Could you let me know what the best next steps are to get these finalized?

Regards,

Aruneesh

[ashwini siddhi]

Hi Andrew,

I hope we were able to move forward with the two sponsors Aruneesh called out.

Regards

Ashwini

To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/global-board/CADtrMx6mJqNB3b7qCC5SYBK%3DyyCoTz7my5b3KywexZw%2BEnSqGA%40mail.gmail.com.

[Andrew van der Stock]

I believe we've provided both of them with the information and signatures they needed. 

thanks

Andrew

To unsubscribe from this group and stop receiving emails from it, send an email to global-board+unsubscribe@owasp.org.

To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/global-board/CAJH_1%3DrcLrTA-y-zcqshiHZCp9zDiBUVDJgzKsNtsY5tvor8GA%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Global-board" group.

To unsubscribe from this group and stop receiving emails from it, send an email to global-board+unsubscribe@owasp.org.

To view this discussion visit https://groups.google.com/a/owasp.org/d/msgid/global-board/CAJH_1%3Drg5_YtfYeyJ4z7RediWzC6jmfBb2nLSJQk37qRdb_Fmg%40mail.gmail.com.

--
You received this message because you are subscribed to the Google Groups "Global-board" group.

To unsubscribe from this group and stop receiving emails from it, send an email to global-board+unsubscribe@owasp.org.