Executive assistant operating workflow
Executive Assistant Scheduling Software for Confidential Board Committee Meetings
A compensation committee needs ninety minutes with three outside directors and outside counsel. The subject cannot appear in a broad email thread. The directors sit in three companies, two assistants coordinate their calendars, the pre-read belongs in a restricted board portal, and the final invitation must reveal enough to work without revealing the matter to everyone who can see a calendar. This is not ordinary calendar Tetris.
Schedule a confidential committee meeting in eight controlled steps
Use this runbook for one compensation or audit committee session involving a chair, outside directors, outside counsel, the corporate secretary, the executive’s EA, and director EAs across Google Workspace and Microsoft 365. The board, legal, privacy, and security owners must set the organization’s rules. The workflow does not create confidentiality, legal privilege, or compliance by itself.
- 1
Open a restricted control brief before outreach
Create one meeting ID and one restricted source of truth. Record the neutral purpose class, committee, duration, bounded date range, deadline, required roles, optional roles, organizer calendar, IANA zones, notice and buffer rules, relationship owner, disclosure owner, approval owner, materials owner, outreach channels, invitation policy, and terminal proof. Put the sensitive subject, personnel names, legal analysis, and draft agenda only where their designated owners allow them.- The control brief names who may know the committee, the subject, the attendee list, and the materials.
- The EA keeps relationship judgment, disclosure, approvals, exceptions, agenda, and pre-read work.
- A hold, poll result, draft, or open calendar cell is not booked.
- 2
Build a disclosure-and-role roster
Separate meeting participants from scheduling contacts. For each outside director and counsel participant, record the verified identity, role, required or optional status, approved assistant, calendar source, local zone, contact channel, and the minimum wording that contact may receive. Name who may add, remove, or substitute a participant. Never infer committee membership or copy a director’s assistant onto meeting content just because that assistant supplied availability.- Scheduling contact does not automatically mean meeting attendee or materials recipient.
- Counsel or the corporate secretary owns any privilege and governance decisions; the calendar system does not.
- Distribution lists and autocomplete recipients are expanded and reviewed before sending.
- 3
Set calendar authority and privacy boundaries
Document who may read free/busy, see private-event details, send as organizer, place a neutral hold, contact each assistant, approve wording, write the invitation, and cancel or repair it. Request only the provider access the workflow needs. Google and Microsoft expose different sharing, private-item, and delegate controls; a calendar permission proves technical access, not business authority.- Private-event detail is not collected when busy intervals will do.
- Every connected account, delegate, and service identity has a named owner and revocation path.
- A private label is treated as one provider control, not a promise that every privileged viewer is blocked.
- 4
Collect availability on the minimum-disclosure track
Read approved Google or Microsoft free/busy for connected calendars. Contact unconnected directors, EAs, and counsel through approved channels with a neutral meeting label, duration, bounded window, local times, response deadline, correction path, and reminder cap. Record source, actor, IANA zone, reply time, freshness, expiry, and consent for that coordination use. Do not put the sensitive subject, another director’s response, or board material into a poll or broad thread.- External participants can reply without connecting a calendar.
- Silence, failed access, and an expired window remain unknown rather than free.
- The disclosure owner approves any wording change that reveals more than the neutral label.
- 5
Compute slots against attendance and handling rules
Intersect every required participant, then apply the approved committee attendance rule, working hours, notice, buffers, travel constraints, protected preparation time, conferencing policy, and proposal expiry. Rank preferences only after hard rules pass. Treat any quorum, independence, recusal, substitute, or adviser rule as supplied policy from the designated governance owner, never as a scheduling model’s legal conclusion.- An optional observer cannot displace a required outside director.
- Each candidate is rendered in every participant’s named local zone.
- No-overlap produces one bounded exception instead of a wider disclosure blast.
- 6
Return one decision when policy cannot finish
Show the EA or named owner only the choice that remains: widen the date range, release protected time, shorten duration, change format, approve an already-authorized substitute, contact another assistant, or stop. Include current candidate times, role coverage, evidence freshness, disclosure effect, deadline, and expiry. Keep unrelated event titles, director responses, compensation detail, audit issues, and legal notes out of the decision card.- The person deciding can see the consequence without seeing unrelated calendar content.
- Only a named owner can change attendance, disclosure, or protected-time policy.
- The EA can pause, revise, or reclaim the meeting at any point.
- 7
Separate the calendar invitation from board materials
Re-check required availability and current approval, then write one invitation under the approved organizer. Review every field: neutral title, start and end, zone, attendee list, organizer identity, free/busy status, privacy setting, location, conferencing, description, reminders, attachments, guest permissions, and forwarding behavior. Put agenda and pre-read documents in the organization’s approved restricted repository or board portal and add only the approved access reference to the invitation.- The title does not expose a compensation subject, investigation, transaction, person, or legal theory.
- No board document is attached or linked unless the materials owner approved the audience and access path.
- Conferencing and room details reach the intended participants without broadening the recipient list.
- 8
Read back, test, and close one meeting state
Read the provider state after the write. Verify organizer, exact time and zone, required attendees, optional decisions, title, privacy, conferencing, description, attachments, and invitation delivery state. Reconcile an uncertain write before retrying. When a participant, time, or disclosure rule changes, revoke affected proposals and approvals, update material access through its owner, issue one traceable repair, and verify again.- A repeated approval or provider retry cannot create a duplicate event.
- Removing an attendee from the calendar does not pretend to revoke a document already shared elsewhere.
- Completion means one verified invitation set or one bounded exception with an owner and deadline.
Need-to-know is a field-level operating rule
Confidential meeting scheduling fails in ordinary fields: a revealing title on a shared calendar, a full attendee list pasted into email, a board pack attached to a calendar event, a conference link forwarded beyond the group, or a reminder preview on a lock screen. Marking the event private does not repair those choices.
Use three surfaces on purpose. The coordination surface carries the minimum label, duration, bounded windows, and local times. The invitation surface carries approved logistics for confirmed attendees. The restricted materials surface carries the agenda, pre-read, personnel detail, financial material, and legal content under its owner’s access policy. This is data separation, not a confidentiality guarantee.
- Coordination contacts receive only what they need to return availability.
- Confirmed participants receive only approved invitation fields and joining details.
- Materials access is granted, changed, and revoked in the designated repository, not assumed from calendar attendance.
Calendar privacy begins with permission design
Google documents free/busy-only sharing and notes that private-event handling depends on the viewer’s access level. Microsoft says delegates do not see private items by default, but an owner can explicitly grant that access. Both are useful controls. Neither means the word ‘Private’ makes an event invisible to every administrator, delegate, attendee, notification surface, integration, or recipient.
Apply minimum necessary access and least-privilege thinking to the scheduling path. Collect busy intervals instead of titles when possible. Restrict service and delegate identities. Keep content out of logs and prompts unless it is required and approved. Define retention, correction, deletion, and incident paths with the organization’s owners. NIST and ICO sources below provide security and data-minimization reference points; citing them does not claim certification or determine which law applies.
Execution finishes work that links, polls, sync, and drafting leave behind
A booking link publishes configured openings and asks the recipient to choose. A poll gathers votes. A sync utility copies or blocks calendar state to reveal conflicts. A drafting assistant prepares the next message. Each can help, but each addresses a slice of the job.
Scheduling execution carries an authorized brief through cross-company availability, bounded follow-up, hard-rule evaluation, a scoped exception, current approval, one provider write, and invitation verification. For a committee meeting, that path must also respect disclosure rings and invitation-field hygiene. WonderCal’s direction is to carry the routine coordination path while the EA keeps human judgment and board-content work.
Run the forwarded-invitation acceptance test
Create a neutral compensation committee session with three outside directors, two director EAs, and outside counsel. Correct one time zone, expire one availability reply, remove an optional observer, change one required calendar after approval, duplicate the booking command, hide the first provider response, and test the organization’s expected forwarding behavior in Google and Microsoft.
Pass when contacts see only approved coordination wording, required participants still align, stale approval revokes, restricted material stays outside the event, the title and description reveal no sensitive subject, duplicate writes collapse, uncertain state reconciles, and one invitation is verified. Fail when the calendar looks booked but the disclosure boundary is guesswork.
Compare confidential board meeting scheduling by completion and exposure
The best fit is not the tool with the most calendar access. It is the operating path that completes routine coordination with the least necessary disclosure while preserving EA and governance-owner control.
| Decision vector | EA inbox and manual calendar process | Booking link, poll, sync utility, or drafting copilot | WonderCal execution direction |
|---|---|---|---|
| Coordination completion | The EA collects every reply, converts zones, checks roles, chases changes, writes the event, reviews fields, and verifies delivery. | Can reduce one step while attendance rules, disclosure, follow-up, event writing, and final proof remain assistant work. | Target path carries approved rules through routine coordination to one verified invitation or one bounded exception. |
| Cross-company reach | Works because the EA translates director, counsel, and assistant replies across companies and calendar providers. | Depends on who can access the link, poll, connected calendar, or generated draft and who interprets the result. | Designed to combine approved Google and Microsoft availability with bounded replies from people who connect no calendar. |
| Privacy | Depends on careful recipients, wording, calendar permissions, attachments, and repeated copy-and-paste decisions. | Depends on what participant identities, responses, synced details, links, and model context expose. | Target model separates coordination, invitation, and materials surfaces and shares the minimum approved fields for each step. |
| Exception handling | The EA brings strong judgment, but every stale reply, recusal, attendee change, and disclosure question returns to the inbox. | May stop at no winner, a conflict, changed attendance, or a draft that still needs policy context. | Designed to preserve valid work and return one attendance, timing, disclosure, relationship, or recovery decision to its owner. |
| Time and cost | No new operating system; routine relay and field inspection consume EA time again for every committee cycle. | Can reduce selected tasks; net return depends on the coordination and control work left for the EA. | The five-hour weekly target is credible only if a controlled trial measures returned coordination time without weakening EA control. |
Coordination completion
EA inbox and manual calendar process
The EA collects every reply, converts zones, checks roles, chases changes, writes the event, reviews fields, and verifies delivery.
Booking link, poll, sync utility, or drafting copilot
Can reduce one step while attendance rules, disclosure, follow-up, event writing, and final proof remain assistant work.
WonderCal execution direction
Target path carries approved rules through routine coordination to one verified invitation or one bounded exception.
Cross-company reach
EA inbox and manual calendar process
Works because the EA translates director, counsel, and assistant replies across companies and calendar providers.
Booking link, poll, sync utility, or drafting copilot
Depends on who can access the link, poll, connected calendar, or generated draft and who interprets the result.
WonderCal execution direction
Designed to combine approved Google and Microsoft availability with bounded replies from people who connect no calendar.
Privacy
EA inbox and manual calendar process
Depends on careful recipients, wording, calendar permissions, attachments, and repeated copy-and-paste decisions.
Booking link, poll, sync utility, or drafting copilot
Depends on what participant identities, responses, synced details, links, and model context expose.
WonderCal execution direction
Target model separates coordination, invitation, and materials surfaces and shares the minimum approved fields for each step.
Exception handling
EA inbox and manual calendar process
The EA brings strong judgment, but every stale reply, recusal, attendee change, and disclosure question returns to the inbox.
Booking link, poll, sync utility, or drafting copilot
May stop at no winner, a conflict, changed attendance, or a draft that still needs policy context.
WonderCal execution direction
Designed to preserve valid work and return one attendance, timing, disclosure, relationship, or recovery decision to its owner.
Time and cost
EA inbox and manual calendar process
No new operating system; routine relay and field inspection consume EA time again for every committee cycle.
Booking link, poll, sync utility, or drafting copilot
Can reduce selected tasks; net return depends on the coordination and control work left for the EA.
WonderCal execution direction
The five-hour weekly target is credible only if a controlled trial measures returned coordination time without weakening EA control.
Frequently asked questions
What should executive assistant scheduling software do for a confidential board committee meeting?
Is marking a Google or Outlook event private enough for board meeting scheduling?
Should an EA attach board materials to the calendar invitation?
Do outside directors, counsel, or their assistants need to connect a calendar?
Where can executive assistants evaluate WonderCal for this workflow?
Primary sources
- Google Calendar Help: Share your calendar — official sharing levels, including free/busy-only access and private-event behavior for editing permissions
- Google Calendar Help: Change event and task visibility — official default, public, and private event-visibility behavior
- Google Calendar API: Freebusy query — official bounded availability request, authorization scope, time-zone, busy-period, and error fields
- Microsoft Support: About delegates in Outlook — official distinction between sharing, folder permissions, and delegate calendar management
- Microsoft Support: Make an appointment or meeting private — official private-item behavior, including explicit delegate access to private details
- Microsoft Graph: calendar getSchedule — official availability operation, least-privileged permission guidance, schedule windows, and time-zone behavior
- NIST SP 800-53 Rev. 5: Security and Privacy Controls — authoritative control catalog, including access enforcement, least privilege, audit, and privacy-control reference points
- UK ICO: A guide to the data protection principles — authoritative explanation of purpose limitation, data minimisation, accuracy, storage limitation, and security principles
Test the disclosure boundary before the real committee meeting
Use neutral content. Add outside directors and counsel, expire one reply, change one required calendar, remove one attendee, test forwarding, duplicate the booking command, and require a clean read-back before calling the workflow complete.
See WonderCal for executive assistants