The OVAL Board consists of both "Active" and "Emeritus" members, from a variety of organizations across the community, who are responsible for providing input to the OVAL Moderator regarding the strategic direction of OVAL.
Active members are directly engaged with the community and are expected to participate in a variety of technical, liaison, and advocate tasks that provide direction to the effort and increase awareness and adoption throughout the community. Active members are also expected to vote on various issues that influence the strategic direction of OVAL.
Active OVAL Board members must meet the minimum levels of effort consistent with the tasks that they undertake.
All active members are expected to commit a minimum of 2 hours per month to maintain high-level awareness of ongoing OVAL and OVAL Board activities. There may be additional requirements depending on additional tasks that the OVAL Board member takes on.
Participation should be consistent with respect to the specific task. Allowances can be made for extenuating circumstances that temporarily prevent a member from meeting the minimum level of participation. Furthermore, if an OVAL Board member cannot make a meeting, they can designate a proxy to sit in for them if they wish.
All members are expected to perform the following tasks:
In addition to the general tasks above, OVAL Board members are expected to participate in one or more of the following tasks.
The amount of effort for these tasks may vary widely. Each task may require 1 to 10 hours, or more. Such tasks may occur approximately once every 2 months.
Members should have strong knowledge about computer security issues in most of the following areas:
The member's knowledge may be broad (e.g., general knowledge of configuring various types of OSes) or deep (e.g., domain expert for a single OS).
Emeritus members were formerly active and influential in OVAL. As a result of significant contributions, they maintain an honorary position on the OVAL Board. Emeritus members are free to participate in the same technical, liaison, and advocate tasks as active members as they see fit. However, emeritus members are not permitted to participate in tasks that exercise the decisional authority granted to the OVAL Board, but, are free to share their thoughts and opinions when the OVAL Board is deciding on some matter.
Emeritus members may participate at their discretion in technical, liaison, or advisory tasks. This role recognizes the significant past contributions of a member to OVAL and allows them to provide valuable feedback in an ad-hoc manner although they may no longer serve in a position that warrants a direct role on the board. Since emeritus members are not required to participate in OVAL Board activities, they are not permitted to participate in tasks that exercise the decisional authority granted to the OVAL Board. However, they are encouraged to share their thoughts and opinions on matters that are being decided.
Emeritus members are not expected to participate regularly in OVAL, but they can participate as they see fit.
Emeritus members must have made significant contributions to OVAL as determined by the OVAL Moderator.
A person who has left the OVAL Board is recognized in one of the following ways:
The following roles are delegated to the OVAL Board as the advisory body responsible for the strategic direction of OVAL.
The following roles are unique to MITRE as the OVAL Moderator.
The MITRE Corporation is a not-for-profit organization chartered to work in the public interest. In its role as the OVAL Moderator, the Office of Cybersecurity and Communications at the U.S. Department of Homeland Security has entrusted MITRE to act as an independent third-party balancing government and industry needs to develop OVAL.