Board Cyber Oversight

A Chat Suggestion Is Not Yet a Project Decision

An informal conversation can contain an idea, a preference and a decision in the same thread. A clear summary names which is which.

People using phones around a cafe table.

"That could work" appears in a project chat. One colleague reads it as an interesting possibility. Another begins preparing for the change. Nobody necessarily disagrees about the idea; they disagree about what the sentence did.

A discussion summary can make that distinction visible. It need not reproduce the whole chat or regulate which application people use. Its narrow job is to distinguish a suggestion from an agreed next step.

TLDR

  • An idea, a preference and a decision are different kinds of statement.

  • A summary should not strengthen what the conversation actually established.

  • Quote exact words only when they are exact.

  • Use an open question when the state is unclear.

Name the kind of statement

In a fictional workshop thread, one person suggests a shorter agenda. Another replies "I like that." That reply expresses a preference. It does not necessarily establish that the group changed the agenda.

A summary can say "Shorter agenda proposed; no revised version agreed in this example." The sentence preserves the idea without inventing a decision.

Keep the speaker's words separate from the summary

A paraphrase can be helpful, but it should remain a paraphrase. "The group discussed a shorter format" is not the same statement as "Everyone approved a shorter format." A small verb change can turn a discussion into a commitment the note cannot support.

Atlassian's meeting-notes template separates discussion, decisions and action items. That distinction is useful here even though the starting point is an informal message rather than a meeting.

Ask instead of completing the story

If the thread leaves the state unclear, the next note can ask "Are we still considering this, or did we agree to change the sample agenda?" It offers a clarification rather than silently choosing an interpretation.

Google's audience guidance helps explain why the question matters. The person entering the thread later does not share the assumptions of those who were present. A summary should supply that context rather than assume it.

This is a communication habit, not advice about formal records, personal devices or messaging policies. A clearer summary can keep an ordinary project conversation from becoming more definite in the retelling.

Sources for the definitions and writing principles discussed here: Google, Technical Writing One: Audience, last updated March 28, 2025; Atlassian, meeting-notes template, distinctions between discussion, decisions and action items. The examples and suggested discussion formats are illustrative.

Frequently asked questions

Must every chat become a formal note?

No. The point is accuracy when someone does summarize, not a requirement to document every conversation.

Can a short reply be a real decision?

It can, depending on the context. The summary should reflect what was actually agreed rather than infer agreement from a pleasant tone.

What if colleagues remember it differently?

Preserve the uncertainty and ask for clarification. Do not write a more confident record than the evidence supports.

A practical next step

Before forwarding a project summary, check the verbs: proposed, preferred, discussed and agreed should describe different things. Book a Decision-Clarity Call for help making technology work easier to explain.

Next step

Get Board-Ready on AI and Cyber Risk

A 30-minute call. No charge. You'll leave with a clear read on where your oversight stands and what to do about it.

Stop Guessing. Start Scoring
Tyson Martin

Written by Tyson Martin, NACD.DC

Chief Trust, Security & AI Officer. CISO of record at MIO Partners; former CISO & CTO at Lumber Liquidators and Orvis; advisor to 200+ Fortune 500 boards and C-suites at AWS.

See the track record
Keep reading

More on Board Cyber Oversight

All CISO Insights
Board Cyber Oversight

When a Cyber Risk Exception Should Expire

A cyber risk exception without an expiry date is an unrecorded acceptance of risk. Learn when exceptions should expire, renew, or escalate to the board.

Board Cyber Oversight

Year-End Cyber Review: The Six Slides That Matter

A year-end cyber review should set next year's risk decisions, not recap this year's activity. Six slides carry the whole story, end to end.