Appendix B | Executive First Look checklist

Use this checklist when sponsoring Day One, reviewing interim findings, or considering a closeout recommendation. Recorded answers and supporting references are required where applicable; this checklist itself is not a conformance determination.

Which decision matters? State the business purpose, consequence, decision owner, intended use, and exclusions.

Who is responsible? Identify the business owner, technical owner, and relevant authority for the specific use.

What do we actually know? Inspect the available information, documented conditions, and unresolved issues.

What passed or failed? Require supported Pass, Fail, or Not Applicable findings; any conformance determination must follow the applicable controls.

What use is allowed now? Require the actual recorded accountability control (Gate) readiness where assessed including its enforceable conditions, blockers, and review triggers.

Could we explain it later? Preserve evidence references, relevant versions, time, responsibility, and review conditions.

Should we continue? Record whether to stop, correct independently, or authorize the next bounded day based on evidence.