Why confidentiality is the first requirement of an independent assessment

The value of an independent assessment depends entirely on the independence of the assessor. Independence has two components: structural independence — the assessor does not report to the project team, does not have a commercial relationship with the vendor, does not have a prior relationship with the organization — and informational independence — the assessor sees the documentation as it exists, not as it has been prepared for review.

Informational independence requires confidentiality. If the project team knows that an assessment is taking place, they will prepare for it. The risk register will be updated. The recovery plan will be revised. The status reports will be reviewed and amended. The picture will improve — not because the project has improved, but because the documentation has been prepared.

This is not a criticism of project teams. It is a description of human behavior. When people know they are being assessed, they prepare. The preparation changes the evidence. The changed evidence changes the assessment. The assessment is no longer independent — it is a review of the prepared version of the project, not the actual version.

The solution is to conduct the assessment before the project team knows it is happening. This requires the executive to commission the assessment directly — not through the program office, not through the project manager, not through the steering committee. Directly, with a mutual NDA in place before any documentation is shared.

The mutual NDA is not a formality. It is the mechanism that makes the assessment possible. It protects the organization's confidential information. It protects the assessor's independence. And it creates the conditions under which the executive can receive an honest picture of what is actually happening — rather than a prepared version of it.