Glossary term
Stakeholder brief
Also: Persona brief, Role-specific memo view
A role-tailored summary of a decision memo written for a specific persona (CISO, CFO, CEO, COO, IT-Leitung). Each brief surfaces the criteria, risks and trade-offs that this role cares about most, without rewriting the underlying memo.
Enterprise buying committees are heterogeneous: a CFO reads a decision memo through the lens of TCO, contract commitment and exit cost. A CISO reads the same memo for control coverage, incident response and vendor security posture. The CEO wants the strategic fit in three sentences.
A stakeholder brief is the persona-specific cut of the memo that each of these readers actually needs. It is not a separate decision; it is the same decision, read from a specific angle. Structured alignment depends on every stakeholder having seen their brief.
In practice
In DecisionOS, persona overlays (CEO, CFO, CISO, COO, IT-Leitung) produce these briefs automatically from the underlying memo, avoiding the rewriting cost that is why most teams skip the step.
Related terms
Stakeholder alignment
The state in which every material stakeholder on a decision has a visible position (support, neutral, block), a named top concern and a documented next step. Without stakeholder alignment, decisions stall or reverse post-signature.
Decision memo
A short structured document that captures why a decision was made, the options considered, the criteria and trade-offs, the stakeholders involved and the accepted risks. A good decision memo is auditable months later.
Readiness Score
A 0-100 score that quantifies how decision-ready a memo actually is. It breaks down into criteria coverage, evidence quality, risk analysis, stakeholder alignment and formal governance. A score above 70 signals audit readiness.
SASE
Gartner architecture category combining network (SD-WAN) and security functions (SWG, CASB, ZTNA, FWaaS, RBI) on a single cloud platform. SSE is the variant without SD-WAN.
SBOM
Machine-readable inventory of all components in a software incl. versions, licences and dependencies. Formats: SPDX, CycloneDX, SWID. Mandatory in regulated areas; in the US driven by Executive Order 14028.
Schrems II
CJEU ruling of 16 July 2020 that invalidated the EU-US Privacy Shield and only allowed Standard Contractual Clauses (SCC) under additional safeguards. Consequence: third-country data transfers need a Transfer Impact Assessment (TIA) plus additional protective measures.
SIEM (Security Information and Event Management)
A platform that centralises security logs, enables long-term retention, runs correlation rules and supports investigation. SIEM is the evidence layer under EDR, XDR and SOC operations and the single largest line item in most security budgets.
SOC 2 Type 2
Audit report by a US public accountant under AICPA SSAE 18 standard, confirming the operating effectiveness of a service organisation's controls over a period (typically 6-12 months). Refers to Trust Service Criteria.