The conversation — Domain Security Practitioner

The readout decides whether the plan happens. It has one job: get the free work started this week and the funded work scheduled, without overclaiming anything.

Fifteen minutes

2 min   What someone can do today. The three sentences.

3 min   What is already done. The registrar account,
        the outage, the reported campaign, six domains
        locked down. No budget was required.

3 min   The two things that need a decision:
          - the primary domain's path to enforcement,
            gated on one vendor
          - the two country domains, gated on a
            registrar process

2 min   The 30/90/365 shape, not the detail.

2 min   What we are not doing, and why.

3 min   Questions.

Leading with completed work changes the frame from a request to a progress report with two decisions attached — and the two decisions are both about things outside your control, which is where the room can actually help.

The two asks, stated plainly

Name the vendor and the renewal date. The alignment constraint is a commercial decision, and the person who can make it is probably in the room or one step away.
Name who owns the registrar recovery. It is legal or procurement work with security supporting, and it will not move without an owner.
Do not ask for anything else. A readout with two clear asks gets two decisions. One with eleven gets a follow-up meeting.

The questions you will get

"Has this happened to us?"
   For spoofing: unknowable until now, which is itself
   the finding. Reporting has been running for a week;
   there will be a number next month.
   For the lookalike: yes, one is operational today.

"Are we safe now?"
   Safer. Six domains went from open to locked. Two live
   problems are resolved. The primary domain still sits
   at p=none, which is the ninety-day work.

"Does this stop phishing?"
   It stops mail claiming to be from us. It does not stop
   lookalike domains, display-name tricks or a
   compromised mailbox. Those have other owners.

"Why not do everything?"
   Section 6, with the triggers.

Do not let the country domains dominate

“We have lost control of two domains” is the most arresting line in the report and it is two of eleven, on a track with its own owner and a timescale you do not control. If the room spends ten minutes there, the two decisions you actually needed do not get made.

Knowledge check

Why lead a readout with work that is already completed?

It changes the frame from a request to a progress report with two decisions attached — and both decisions are about things outside your control, which is where the room can help.
Because completed work is easier to explain.
To demonstrate competence before asking for budget.
Because the completed items are the most important findings.

Correct — It changes the frame from a request to a progress report with two decisions attached — and both decisions are about things outside your control, which is where the room can help. It also establishes that the programme produces action rather than documents before any ask is made. A readout with two clear asks gets two decisions; one with eleven gets a follow-up meeting.

Not this — Because completed work is easier to explain. Usually true and not the reason. The framing is what changes the outcome.

Not this — To demonstrate competence before asking for budget. A side effect. The substantive reason is that the decisions left are ones the room can make and you cannot.

Not this — Because the completed items are the most important findings. They are the ones that needed nobody’s permission. The primary domain’s path to enforcement matters more and is not done.