Implementation of Bylaw or Policy Changes

Updates to bylaws, policies, and procedures

Where an affirmative Board vote has passed to create, modify, or delete by bylaws, policy or procedure, the Foundation has 30 days or until the next Board meeting to merge the approved change into any affected bylaws, policies, and procedures. The Foundation shall note any changed bylaws, policies, and procedures in the Board agenda for review by the Board. The Secretary of the Board shall confirm these changes during the Board meeting.

Policies to undergo Community Review Process

If an approved change to a Foundation policy is substantial and has yet to be voted on by the Board, it shall undergo the Community Review Process. Once completed, it shall be voted on by the Board.

Once a bylaw or policy change has been voted on by the Board, it shall go into immediate effect. Procedures are owned by Foundation staff and document concrete implementations of policy and is not subject to this process.

Minor changes

The OWASP Foundation, in consultation with the OWASP Chair or other Board officers, is permitted to create or accept small inconsequential changes or pull requests to approved bylaws and policies. All such changes shall be reported in the agenda at the following Board meeting to provide Board oversight. The Board may request that the changes be reversed at that meeting.