Scheduling the security review call
Email thread Ardcarne Life Assurance · sales
Theo Gallagher set out four open security findings with owners and asked to schedule a call. Declan Furlong agreed to Tuesday 10:00 but wants the notification commitment and log extract sent before the call.
What was said
What this says
As at Fri 9 Oct 2026Theo Gallagher set out four open security findings with owners and asked to schedule a call. Declan Furlong agreed to Tuesday 10:00 but wants the notification commitment and log extract sent before the call.
Ask: Declan wants the written notification commitment and log extract before the call, and for each control reference a statement whether evidence is attached or still to come, with a date if not.
Customer view: He called the list clear, but will not close a finding on the strength of what is said on a call. He will open by listing the open findings and will keep Aoife informed on the exit plan separately.
Next: Theo to confirm 10:00 internally and send the invitation, plus the evidence beforehand.
The thread
Updated 9 Oct 26Messages
Theo Gallagher 31 Jul 2026 10:05Hello Declan, I would like to arrange the call to go through the security review with you. I have taken over the review from Hannah, so I will be your point of contact on the questionnaire and the evidence going forward. Here are the open findings and who owns each of them on our side: First, incident notification times. I own the written commitment and will provide it in a dated form. Second, the supporting logs for the July outage. These come from the platform team, and I have asked them for the extract. I will not describe them to you until I have them in hand. Third, the exit plan. This sits with Matteo and with Aoife, and I support on the technical schedule. Fourth, the register of information entries. I will give you each control reference alongside the evidence, so that you can see exactly what we are able to evidence. Could you tell me what time suits you early next week? I would suggest about an hour, and I will send the open items in writing beforehand so that we use the time well. Thanks, Theo
Declan Furlong 31 Jul 2026 11:15Theo, Thank you, that is a clear list. Tuesday morning suits me. Please propose 10:00 and send the calendar invitation once you have confirmed it internally. A few points ahead of the call: Please send the written notification commitment and the log extract before we speak, not during it. I will not close a finding on the strength of what is said on a call. For each control reference, please indicate whether the evidence is attached or is still to come. Where it is still to come, I need a date. I will open the call by listing the open findings, so please have your owners to hand. Aoife will want to know the outcome on the exit plan, so I will keep her informed separately. Regards, Declan Furlong, CISO