Executive assistant operating workflow

    Executive Assistant Scheduling Software for Confidential Board Committee Meetings

    By Tevye Krynski17 min read

    A compensation committee needs ninety minutes with three outside directors and outside counsel. The subject cannot appear in a broad email thread. The directors sit in three companies, two assistants coordinate their calendars, the pre-read belongs in a restricted board portal, and the final invitation must reveal enough to work without revealing the matter to everyone who can see a calendar. This is not ordinary calendar Tetris.

    Schedule a confidential committee meeting in eight controlled steps

    Use this runbook for one compensation or audit committee session involving a chair, outside directors, outside counsel, the corporate secretary, the executive’s EA, and director EAs across Google Workspace and Microsoft 365. The board, legal, privacy, and security owners must set the organization’s rules. The workflow does not create confidentiality, legal privilege, or compliance by itself.

    1. 1

      Open a restricted control brief before outreach

      Create one meeting ID and one restricted source of truth. Record the neutral purpose class, committee, duration, bounded date range, deadline, required roles, optional roles, organizer calendar, IANA zones, notice and buffer rules, relationship owner, disclosure owner, approval owner, materials owner, outreach channels, invitation policy, and terminal proof. Put the sensitive subject, personnel names, legal analysis, and draft agenda only where their designated owners allow them.
      • The control brief names who may know the committee, the subject, the attendee list, and the materials.
      • The EA keeps relationship judgment, disclosure, approvals, exceptions, agenda, and pre-read work.
      • A hold, poll result, draft, or open calendar cell is not booked.
    2. 2

      Build a disclosure-and-role roster

      Separate meeting participants from scheduling contacts. For each outside director and counsel participant, record the verified identity, role, required or optional status, approved assistant, calendar source, local zone, contact channel, and the minimum wording that contact may receive. Name who may add, remove, or substitute a participant. Never infer committee membership or copy a director’s assistant onto meeting content just because that assistant supplied availability.
      • Scheduling contact does not automatically mean meeting attendee or materials recipient.
      • Counsel or the corporate secretary owns any privilege and governance decisions; the calendar system does not.
      • Distribution lists and autocomplete recipients are expanded and reviewed before sending.
    3. 3

      Set calendar authority and privacy boundaries

      Document who may read free/busy, see private-event details, send as organizer, place a neutral hold, contact each assistant, approve wording, write the invitation, and cancel or repair it. Request only the provider access the workflow needs. Google and Microsoft expose different sharing, private-item, and delegate controls; a calendar permission proves technical access, not business authority.
      • Private-event detail is not collected when busy intervals will do.
      • Every connected account, delegate, and service identity has a named owner and revocation path.
      • A private label is treated as one provider control, not a promise that every privileged viewer is blocked.
    4. 4

      Collect availability on the minimum-disclosure track

      Read approved Google or Microsoft free/busy for connected calendars. Contact unconnected directors, EAs, and counsel through approved channels with a neutral meeting label, duration, bounded window, local times, response deadline, correction path, and reminder cap. Record source, actor, IANA zone, reply time, freshness, expiry, and consent for that coordination use. Do not put the sensitive subject, another director’s response, or board material into a poll or broad thread.
      • External participants can reply without connecting a calendar.
      • Silence, failed access, and an expired window remain unknown rather than free.
      • The disclosure owner approves any wording change that reveals more than the neutral label.
    5. 5

      Compute slots against attendance and handling rules

      Intersect every required participant, then apply the approved committee attendance rule, working hours, notice, buffers, travel constraints, protected preparation time, conferencing policy, and proposal expiry. Rank preferences only after hard rules pass. Treat any quorum, independence, recusal, substitute, or adviser rule as supplied policy from the designated governance owner, never as a scheduling model’s legal conclusion.
      • An optional observer cannot displace a required outside director.
      • Each candidate is rendered in every participant’s named local zone.
      • No-overlap produces one bounded exception instead of a wider disclosure blast.
    6. 6

      Return one decision when policy cannot finish

      Show the EA or named owner only the choice that remains: widen the date range, release protected time, shorten duration, change format, approve an already-authorized substitute, contact another assistant, or stop. Include current candidate times, role coverage, evidence freshness, disclosure effect, deadline, and expiry. Keep unrelated event titles, director responses, compensation detail, audit issues, and legal notes out of the decision card.
      • The person deciding can see the consequence without seeing unrelated calendar content.
      • Only a named owner can change attendance, disclosure, or protected-time policy.
      • The EA can pause, revise, or reclaim the meeting at any point.
    7. 7

      Separate the calendar invitation from board materials

      Re-check required availability and current approval, then write one invitation under the approved organizer. Review every field: neutral title, start and end, zone, attendee list, organizer identity, free/busy status, privacy setting, location, conferencing, description, reminders, attachments, guest permissions, and forwarding behavior. Put agenda and pre-read documents in the organization’s approved restricted repository or board portal and add only the approved access reference to the invitation.
      • The title does not expose a compensation subject, investigation, transaction, person, or legal theory.
      • No board document is attached or linked unless the materials owner approved the audience and access path.
      • Conferencing and room details reach the intended participants without broadening the recipient list.
    8. 8

      Read back, test, and close one meeting state

      Read the provider state after the write. Verify organizer, exact time and zone, required attendees, optional decisions, title, privacy, conferencing, description, attachments, and invitation delivery state. Reconcile an uncertain write before retrying. When a participant, time, or disclosure rule changes, revoke affected proposals and approvals, update material access through its owner, issue one traceable repair, and verify again.
      • A repeated approval or provider retry cannot create a duplicate event.
      • Removing an attendee from the calendar does not pretend to revoke a document already shared elsewhere.
      • Completion means one verified invitation set or one bounded exception with an owner and deadline.

    Need-to-know is a field-level operating rule

    Confidential meeting scheduling fails in ordinary fields: a revealing title on a shared calendar, a full attendee list pasted into email, a board pack attached to a calendar event, a conference link forwarded beyond the group, or a reminder preview on a lock screen. Marking the event private does not repair those choices.

    Use three surfaces on purpose. The coordination surface carries the minimum label, duration, bounded windows, and local times. The invitation surface carries approved logistics for confirmed attendees. The restricted materials surface carries the agenda, pre-read, personnel detail, financial material, and legal content under its owner’s access policy. This is data separation, not a confidentiality guarantee.

    • Coordination contacts receive only what they need to return availability.
    • Confirmed participants receive only approved invitation fields and joining details.
    • Materials access is granted, changed, and revoked in the designated repository, not assumed from calendar attendance.

    Calendar privacy begins with permission design

    Google documents free/busy-only sharing and notes that private-event handling depends on the viewer’s access level. Microsoft says delegates do not see private items by default, but an owner can explicitly grant that access. Both are useful controls. Neither means the word ‘Private’ makes an event invisible to every administrator, delegate, attendee, notification surface, integration, or recipient.

    Apply minimum necessary access and least-privilege thinking to the scheduling path. Collect busy intervals instead of titles when possible. Restrict service and delegate identities. Keep content out of logs and prompts unless it is required and approved. Define retention, correction, deletion, and incident paths with the organization’s owners. NIST and ICO sources below provide security and data-minimization reference points; citing them does not claim certification or determine which law applies.

    Execution finishes work that links, polls, sync, and drafting leave behind

    A booking link publishes configured openings and asks the recipient to choose. A poll gathers votes. A sync utility copies or blocks calendar state to reveal conflicts. A drafting assistant prepares the next message. Each can help, but each addresses a slice of the job.

    Scheduling execution carries an authorized brief through cross-company availability, bounded follow-up, hard-rule evaluation, a scoped exception, current approval, one provider write, and invitation verification. For a committee meeting, that path must also respect disclosure rings and invitation-field hygiene. WonderCal’s direction is to carry the routine coordination path while the EA keeps human judgment and board-content work.

    Run the forwarded-invitation acceptance test

    Create a neutral compensation committee session with three outside directors, two director EAs, and outside counsel. Correct one time zone, expire one availability reply, remove an optional observer, change one required calendar after approval, duplicate the booking command, hide the first provider response, and test the organization’s expected forwarding behavior in Google and Microsoft.

    Pass when contacts see only approved coordination wording, required participants still align, stale approval revokes, restricted material stays outside the event, the title and description reveal no sensitive subject, duplicate writes collapse, uncertain state reconciles, and one invitation is verified. Fail when the calendar looks booked but the disclosure boundary is guesswork.

    Compare confidential board meeting scheduling by completion and exposure

    The best fit is not the tool with the most calendar access. It is the operating path that completes routine coordination with the least necessary disclosure while preserving EA and governance-owner control.

    Coordination completion

    EA inbox and manual calendar process

    The EA collects every reply, converts zones, checks roles, chases changes, writes the event, reviews fields, and verifies delivery.

    Booking link, poll, sync utility, or drafting copilot

    Can reduce one step while attendance rules, disclosure, follow-up, event writing, and final proof remain assistant work.

    WonderCal execution direction

    Target path carries approved rules through routine coordination to one verified invitation or one bounded exception.

    Cross-company reach

    EA inbox and manual calendar process

    Works because the EA translates director, counsel, and assistant replies across companies and calendar providers.

    Booking link, poll, sync utility, or drafting copilot

    Depends on who can access the link, poll, connected calendar, or generated draft and who interprets the result.

    WonderCal execution direction

    Designed to combine approved Google and Microsoft availability with bounded replies from people who connect no calendar.

    Privacy

    EA inbox and manual calendar process

    Depends on careful recipients, wording, calendar permissions, attachments, and repeated copy-and-paste decisions.

    Booking link, poll, sync utility, or drafting copilot

    Depends on what participant identities, responses, synced details, links, and model context expose.

    WonderCal execution direction

    Target model separates coordination, invitation, and materials surfaces and shares the minimum approved fields for each step.

    Exception handling

    EA inbox and manual calendar process

    The EA brings strong judgment, but every stale reply, recusal, attendee change, and disclosure question returns to the inbox.

    Booking link, poll, sync utility, or drafting copilot

    May stop at no winner, a conflict, changed attendance, or a draft that still needs policy context.

    WonderCal execution direction

    Designed to preserve valid work and return one attendance, timing, disclosure, relationship, or recovery decision to its owner.

    Time and cost

    EA inbox and manual calendar process

    No new operating system; routine relay and field inspection consume EA time again for every committee cycle.

    Booking link, poll, sync utility, or drafting copilot

    Can reduce selected tasks; net return depends on the coordination and control work left for the EA.

    WonderCal execution direction

    The five-hour weekly target is credible only if a controlled trial measures returned coordination time without weakening EA control.

    Frequently asked questions

    What should executive assistant scheduling software do for a confidential board committee meeting?

    It should accept a scoped brief, enforce a role-and-disclosure roster, collect minimum necessary availability across companies, apply settled attendance and calendar rules, return only real exceptions, write one approved invitation, and verify provider state. The EA and designated owners should keep relationships, disclosure, participant decisions, approvals, agenda, pre-read, and sensitive exceptions.

    Is marking a Google or Outlook event private enough for board meeting scheduling?

    No single calendar flag should carry the whole privacy design. Viewer permissions, delegates, administrators, attendees, integrations, notifications, forwarding, event fields, and attached material can affect exposure. Use provider controls, minimum-disclosure wording, reviewed recipients, restricted materials access, and a tested organizational policy together.

    Should an EA attach board materials to the calendar invitation?

    Use the repository and access method approved by the board, legal, security, and materials owners. A practical default is to keep agenda and pre-read documents in the designated restricted portal and place only an approved access reference in the event. Calendar privacy does not manage access to a copy already downloaded or forwarded.

    Do outside directors, counsel, or their assistants need to connect a calendar?

    No. A connected free/busy source can reduce coordination, but an approved scheduling contact can return bounded windows without connecting a calendar. Record identity, role, local zone, source, freshness, expiry, correction, and the wording that contact was allowed to receive.

    Where can executive assistants evaluate WonderCal for this workflow?

    Visit WonderCal for executive assistants. Start with a controlled test using non-sensitive content. Confirm current permissions, external outreach, approval, private-field handling, event writes, forwarding behavior, duplicate prevention, recovery, audit, retention, and deletion before considering a live committee meeting.

    Primary sources

    Related WonderCal reading

    Test the disclosure boundary before the real committee meeting

    Use neutral content. Add outside directors and counsel, expire one reply, change one required calendar, remove one attendee, test forwarding, duplicate the booking command, and require a clean read-back before calling the workflow complete.

    See WonderCal for executive assistants