Layer8 practical agenda
Quarterly security review agenda
Give leaders a clear update on progress, remaining concerns and decisions that need their attention.
Make the first discussion useful.
Use a 45-minute leadership review to connect security work to mission and operations. Keep the meeting focused on evidence, important unknowns, decisions and follow-through rather than a list of tool dashboards.
Prepare before the discussion
- The current service scope, business priorities and a concise evidence summary.
- The action and exception registers, with owners and dates.
- Decisions needed from leadership, provider changes and the next review date.
Work through the prompts.
Confirm what changed - 5 minutes
Review staffing, volunteer rotations, programs, locations, suppliers and critical systems. Decide whether any changes require a new assessment boundary.
Review useful evidence - 10 minutes
Summarize representative access removals, recovery exercises, maintenance and alert-routing checks. Separate observed results from plans and unknowns.
Check coverage and responsibilities
Confirm who operates each important service, who receives alerts and what the response agreement actually covers. Identify contact or responsibility gaps.
Review sensitive-record decisions
Check progress on access, unnecessary exports, retention and supplier questions. Use category-level summaries without donor, workforce or children's records.
Review open actions - 10 minutes
Identify overdue actions, dependencies and exceptions. Ask for completion evidence before closing an item, and document accepted interim arrangements.
Consider mission and budget
Describe the operational consequence of each proposed improvement. Confirm resources, timing and the owner who can authorize the work.
Make the decisions - 10 minutes
Record which actions are approved, deferred or returned for more evidence. Assign a decision owner and a date to revisit deferred work.
Agree the next verification
Choose representative checks for the approved changes. Confirm the acceptance criteria and who reviews the result.
Confirm the next review - 5 minutes
Set the meeting date, responsible participants and evidence due beforehand. Escalate time-sensitive issues through the incident route rather than waiting for the meeting.
Share a protected decision record - 5 minutes
Distribute a concise record to authorized participants. Keep detailed evidence and sensitive information in the organization's approved restricted location.
Agree the result and the next action.
Use these outputs to judge whether the preparation is useful:
- A dated leadership decision record with observed evidence and important unknowns.
- An updated action register with approvals, owners, dates and acceptance checks.
- The next meeting date and the evidence each owner will bring.
Review prompt: Start quarterly and adjust the cadence to the organization's operating and risk needs.
Record the next decision
Use your secure workspace to record the issue, what you know, who is responsible and what happens next. Add a due date and a way to check completion. The PDF includes a printable worksheet.
Use the guide within an agreed scope.
Edition 1.0 · Updated October 4, 2026
A meeting or a completed worksheet does not establish that a safeguard works. Retain the underlying evidence and keep urgent incidents on the appropriate escalation route.
Primary references for further reading
These are original Layer8 preparation prompts. The linked organizations do not endorse this guide.
Bring the question. Agree the work.
Phantom Assurance can help scope this work. Check agreed evidence and representative outcomes against the scope and acceptance criteria.