Architecture Risk Assessor

When to Use

You need to systematically identify and quantify risks in a software architecture. Typical triggers:

• The user describes a system and asks "what are the risks?"
• The user is adopting unproven or unfamiliar technologies
• The user needs to present risk findings to stakeholders or leadership
• The user is planning a migration, new service, or significant architecture change
• The user wants to compare risk profiles across services or domains
• The user is doing sprint/iteration planning and wants to identify high-risk stories

Before starting, verify:

• Is there an architecture to assess? (At minimum, a description of services/components and their responsibilities)
• Is there a specific risk dimension to focus on, or should you cover all standard criteria?

Context