WEEK 30 · GOVERNANCE

Convert your last planning review into one commitment sentence and send it before noon.

Your review produced a list. A list is not a commitment.

Most security programs will end Q3 exactly where they started. Not because the scheduled quarterly review was bad. Because nothing got converted.

The review cycle does its job. Teams walk in with a threat landscape assessment, a gap analysis, a ranked list of what slipped last quarter. The room gets aligned. Nobody leaves arguing. And then, somewhere between the parking lot and the next incident, the list becomes a document. The document becomes a file. The file becomes the thing someone pulls up six weeks later when asked which Q3 commitment is getting the most resources.

That is not a process failure. It is a conversion failure. Programs run reviews to generate agreement. Most stop there and assume the roadmap does the rest. It does not.

A roadmap tells you what the program is building. A commitment tells you what one person is responsible for by a specific date. Those are different artifacts with different owners and completely different staying power under pressure. The roadmap survives the room. The commitment survives the quarter.

The instinct is to fix the review. Make it more thorough. Add a follow-up cadence. Build a better tracking system. None of that is the problem.

The teams that move fastest do not have better retrospectives. They have someone who left the room with a sentence. One sentence. Specific enough to know in 90 days whether they did it. Short enough to say out loud without reading. Narrow enough that writing it forced a real choice between things previously left tied.

So, here's the MondayMove

Convert your last planning review into one commitment sentence and send it before noon.

"Improve our security posture" is not a commitment. "Get every privileged group onto a monthly review cadence before October 1st" is. The second version has a date, an owner, and a definition of done. The first has none of those things.

The review already happened. The conversion is this week's work.

Friday Follow-Up

The Choice Was Still Waiting to Happen

Getting to one sentence turned out to be harder than writing it.

MondayMove gives you one concrete action every Monday. FridayFollowUp closes the loop.

Each Friday, a short dispatch on what practitioners actually found when they ran the week's move: where they got stuck, what surprised them, and what to do next. Not sanitized case studies. Field notes. Practitioner to practitioner.


Monday asked you to convert your last planning review into one commitment sentence and send it before noon. Here is what happened when people tried.

The move that looked simple on Monday had a prerequisite most people did not expect: they had to find the review first. A few practitioners reported that their last planning output lived in a slide deck they had not opened since the meeting ended. A few others could not locate a review at all. The planning had happened in conversations, not documents. That finding alone was worth the morning.

For the people who got past that, the harder work was the sentence itself. "Reduce attack surface" showed up more than once. So did "improve our detection posture." These are goals, not commitments, and the difference mattered when practitioners tried to apply the three tests: specific enough to know at 90 days, short enough to say out loud, narrow enough to force a real choice. Most first drafts failed all three. The practitioners who got to a real sentence described the same moment: the point where they had to choose between two things that had previously looked equally important. That choice was uncomfortable. It was also the actual work the review never finished.

The timing variable was real. The people who sent it Monday morning before noon reported their teams engaged with it differently. By Thursday, the quarter's first fires had already started to set priorities from the outside. Monday morning, the sentence had a chance to land before anything else did.

Based on what the field notes revealed, the next move is accountability structure. Share the sentence with one person outside your direct team — a peer, a cross-functional partner, someone who will ask about it in eight weeks without prompting. The commitment becomes more durable the moment it has an external witness.

If you did not land on one sentence, go back to the ranked list from your last planning cycle and force the question: if this list had one item, which item would it be? The answer tells you what the review actually decided, even if nobody said it out loud.


No correct answers here. This is practitioner-to-practitioner. The more honest the responses, the more useful this gets for everyone reading on Monday morning.

See you then.

Discussion