Join our Newsletter — 33% off our NHI Course
Home› Glossary› Governance, Ownership & Risk› Scrum of Scrums
Governance, Ownership & Risk

Scrum of Scrums

← Back to Glossary
By NHI Mgmt Group Updated October 31, 2026 Domain: Governance, Ownership & Risk

Scrum of Scrums is a coordination meeting format used to align multiple teams that each run their own daily stand ups. It creates a forum for sharing dependencies, blockers, and progress across groups. In security organizations, it can help leadership spot friction points and improve cross team collaboration.

What Scrum of Scrums Is For

Scrum of Scrums is a scaling coordination pattern, not a new delivery method. Its purpose is to give representatives from multiple teams a regular place to surface inter-team dependencies, blockers, sequencing issues, and delivery risks so work can stay aligned across a larger programme.

It is most useful when teams can execute independently most of the time, but still need a lightweight mechanism to coordinate handoffs, shared components, shared environments, or timing decisions that cut across team boundaries.

How Scrum of Scrums Works in Practice

In practice, Scrum of Scrums usually adds a coordination layer above team stand-ups. Each team keeps its own daily stand-up, while selected representatives meet separately to discuss what their team has completed, what is coming next, and what may affect other teams.

The meeting should stay focused on cross-team issues. If it becomes a status broadcast, it loses its value. The goal is not to review every task, but to expose dependencies early enough that teams can adjust plans before blockers become delivery delays.

What Problems Scrum of Scrums Helps Prevent

The main failure mode in multi-team delivery is not usually lack of effort, but lack of visibility across teams. Without a coordination forum, one team can unknowingly create a dependency bottleneck, duplicate another team’s work, or miss a timing conflict until late in the sprint or release cycle.

Scrum of Scrums reduces that risk by making cross-team friction visible sooner. It also helps prevent “local optimisation,” where each team looks healthy on its own while the wider programme stalls because shared decisions are not being surfaced in time.

When Scrum of Scrums Is the Right Fit

Scrum of Scrums is best suited to environments with multiple autonomous teams working toward a shared outcome, especially where shared architecture, security reviews, release coordination, or integration work can create dependencies. It is less useful when there are only a few teams, or when coordination can be handled through simpler channels.

For security organisations, it can be a practical way to improve cross-functional awareness, because delivery, operations, risk, and security work often intersect at the same dependency points. Used well, it supports faster escalation, clearer ownership, and better programme-level decision-making.

Standards & Framework Alignment

This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.

NIST CSF 2.0 provides the primary governance reference for this term.

FrameworkControl / ReferenceRelevance
NIST CSF 2.0GV.OC-01 — Organizational ContextScrum of Scrums helps coordinate delivery across teams and clarify how work supports shared objectives.
GV.RR-01 — Roles, Responsibilities, and AuthoritiesThe pattern depends on clear ownership and escalation across multiple teams and representatives.
GV.RM-04 — Risk Management StrategyIt surfaces delivery and coordination risks that can affect programme execution and priority decisions.
Recommendation — Use GV.OC-01 to align cross-team coordination meetings with shared mission and stakeholder needs. Define decision rights and escalation paths so each team representative can act on dependencies promptly. Use GV.RM-04 to track inter-team dependencies as operational risks and manage them through governance.

Practitioner Guidance

Why practitioners should care: Scrum of Scrums is only effective if it stays dependency-focused. If the attendees cannot make or escalate decisions, the forum degrades into reporting theatre and adds overhead without improving coordination.

Common misunderstanding: Many teams treat it as a bigger daily stand-up. In reality, it should concentrate on cross-team blockers, interface risks, and upcoming handoffs, while leaving team-internal updates to the individual team ceremonies.

Practitioner takeaway: Keep the meeting small, representative, and decision-oriented, then tie the discussion to a visible dependency or escalation path so unresolved issues do not disappear after the call.

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.

NHIMG Editorial Note
Reviewed and updated by the NHIMG editorial team on October 31, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org