Other Business - Debian audit

Hi all. Debian is waiting on information from SPI to conclude an internal
financial audit. The possibility of having Martin Michlmayr (debian
auditor) work with Michael Schultheiss to complete this has been discussed
in the past.

I'm conscious of the workload expected of a treasurer. While Michael may
need to complete some of the work, I believe quite a lot of it could be
offloaded to someone who has the right access to the records.

As such, I suggest that at this point we appoint Martin Michlmayr as an
assistant treasurer for a fixed period (say, 90 days) if he is still
interested so that he can extract the information from the financial
records that Debian needs.

I'd like to discuss this during other business at the July board meeting.

Cheers,

Rob

--
Director, Software in the Public Interest, Inc.
Email: robert(at)spi-inc(dot)org Linux counter ID #16440
IRC: Solver (OFTC & Freenode)
Web: http://www.spi-inc.org
Free and Open Source: The revolution that quietly changed the world

On Thu, Jul 12, 2012 at 11:40:19PM +1000, Robert Brockway wrote:
> Hi all. Debian is waiting on information from SPI to conclude an
> internal financial audit. The possibility of having Martin
> Michlmayr (debian auditor) work with Michael Schultheiss to complete
> this has been discussed in the past.
>
> I'm conscious of the workload expected of a treasurer. While
> Michael may need to complete some of the work, I believe quite a lot
> of it could be offloaded to someone who has the right access to the
> records.

Given the struggle we've been going through in Debian to get access to
our transaction records (still unsolved), I'd be totally in favor of
this. But of course I've some sort of conflict of interest in this,
given that I'm also Debian liaison at SPI. FWIW, I'd have no objection
if other projects hosted by SPI wish to have access to Debian
transactions, as they're meant (from the Debian POV at least) to be
fully public anyhow.

> As such, I suggest that at this point we appoint Martin Michlmayr as
> an assistant treasurer for a fixed period (say, 90 days) if he is
> still interested so that he can extract the information from the
> financial records that Debian needs.

To be more precise on this, Debian has as an auditor team, formed ATM by
two people: Martin Michlmayr and Martin Wuertele. They can both be
reached via the auditor(at)debian(dot)org (Cc:-ed) role address. We'd like to
get "role" access to Debian transaction, so that members of the team
could both get access to "our" data, without adding new SPOF, this time
on our side.

The Debian auditor team is pretty stable, so it'd be totally fine for us
to give nominal access to both Martin-s for the time being. But I guess
that giving one role access to the individual SPI projects that ask for
one could be a more scalable solution in the long run.

Thanks a lot for caring about this issue, Robert.
Cheers.
--
Stefano Zacchiroli zack(at){upsilon(dot)cc,pps.jussieu.fr,debian.org} . o .
Maître de conférences ...... http://upsilon.cc/zack ...... . . o
Debian Project Leader ....... @zack on identi.ca ....... o o o
« the first rule of tautology club is the first rule of tautology club »

On Thu, Jul 12, 2012 at 11:40:19PM +1000, Robert Brockway wrote:
> Hi all. Debian is waiting on information from SPI to conclude an
> internal financial audit. The possibility of having Martin
> Michlmayr (debian auditor) work with Michael Schultheiss to complete
> this has been discussed in the past.

Hi all. I understand from the last board meeting that most of the data is
with the Debian auditors now but that there was one final batch to send
over. Did we manage to get that sent over?

Cheers,

Rob

--
Director, Software in the Public Interest, Inc.
Email: robert(at)spi-inc(dot)org Linux counter ID #16440
IRC: Solver (OFTC & Freenode)
Web: http://www.spi-inc.org
Free and Open Source: The revolution that quietly changed the world

* Robert Brockway <robert(at)spi-inc(dot)org> [2012-08-23 07:52]:
> Hi all. I understand from the last board meeting that most of the
> data is with the Debian auditors now but that there was one final
> batch to send over. Did we manage to get that sent over?

No. The two major pieces missing are a) expenses paid on behalf of
Debian (by check, wire transfer, etc) and b) income received other
than from checks (e.g. wire transfers).

And there's also the question of how we can get new data on a monthly
(or something) basis.

--
Martin Michlmayr
http://www.cyrius.com/