Dear board,
As you know we've been successful in contributing the OWASP AI Exchange security framework to ISO/IEC 27090 and for the EU AI Act security standard. The latter was approved by the working group and has gone in consultation phase by the European Commission and the EU countries on Feb 7! When the results come in on March 7th it would be a great moment for OWASP to shine and make some noise about it. I'll submit an OWASP blog post, I'll post on LinkedIN, OWASP can magnifiy, and OWASP can send out a press release. For the narrative we can tap into the current geopolitical discussion of AI regulation being important but also problematic because it stifles innovation. The narrative I envision is:
'OWASP leads the way in pragmatic AI standards and guidelines', where we explain that by involving OWASP practitioners, you can make sure that standards are practical and fair, and not made in an ivory tower. OWASP brings that to the table. And saves the world. The end.
Do you agree this is a timely and favourable narrative? Are you in on the plan for the press release etc. second week of March?
Best,
Rob van der Veer
OWASP AI Exchange
OpenCRE
SAMM
SIG
ISO/IEC 27090
CEN/CENELEC JTC21/WG5