A portfolio review is a structured discussion of an organization’s projects, their status, risks, dependencies, and alignment with priorities. It helps leaders compare work across teams and decide whether to continue, change, delay, or stop initiatives.
In cybersecurity, portfolio reviews can reveal security gaps across projects, highlight shared risks, and help prioritize limited resources. Teams may use them to report issues such as delayed vulnerability remediation, security work competing with delivery deadlines, or risks that need executive decisions. Reliable reviews depend on candid reporting: hiding problems can leave leadership with an inaccurate view of exposure and progress.