Enterprise Architecture Review & Risk Assessment Framework
Audit enterprise architecture and quantify technical risk systematically
What You Can Do
You conduct systematic architecture reviews that identify technical risks, quantify their business impact, and prioritize technical debt for remediation. The framework generates risk matrices, compliance gap analyses, and actionable roadmaps with effort estimates—ideal for due diligence, modernization planning, or governance decision-making. You produce executive summaries that translate technical findings into business language for stakeholder alignment.
Features
Maps current state, key dependencies, integration points, and critical paths. Identifies single points of failure and architectural anti-patterns.
Quantifies risks by impact and likelihood, producing a heat map that shows which risks deserve immediate attention and which can be deferred.
Catalogs debt by category (legacy frameworks, deprecated languages, outdated dependencies), estimates remediation effort, and calculates business cost of inaction.
Checks architecture against SOC 2, ISO 27001, HIPAA, PCI-DSS, and other standards. Flags violations and recommends controls.
Generates acquisition/partnership assessment reports with technical health score, red flags, integration complexity, and post-close work estimates.
Creates prioritized action plan with effort estimates (T-shirt sizing), dependencies, recommended sequencing, and resource allocation guidance.
Evaluates growth capacity, identifies bottlenecks, and recommends architectural changes to support projected scale (throughput, latency, cost).
Identifies outdated libraries, unpatched dependencies, security vulnerabilities, and third-party risk exposure with remediation urgency.
Example Output
Risk Summary:
- Critical (Immediate): Monolithic app at 90% capacity, no horizontal scaling → 3-month rewrite → $500K spend
- High (Next quarter): PostgreSQL 11 EOL → 4-week migration → low risk
- Medium (Backlog): OAuth integration missing MFA → 2-week hardening → compliance requirement
Compliance Status:
| Control | Status | Gap | Recommendation |
|---|---|---|---|
| Access logs (SOC 2) | Partial | Missing retention > 90d | Implement centralized logging, 1yr retention |
| Encryption (ISO 27001) | Compliant | None | Continue quarterly reviews |
Executive Summary: Architecture is operationally sound but reaching capacity limits. 18-month modernization roadmap recommended: Q1 containerization (8 wks), Q2 database migration (6 wks), Q3 microservices pilot (12 wks). Est. $1.2M, unblocks 3x growth.
What's Included
- Assessment Methodology: Structured checklist covering architecture patterns, data flows, deployment model, observability, and disaster recovery readiness.
- Risk Scoring Matrix: Impact × Likelihood framework with standard severity definitions. Calibrates risks relative to business context and industry benchmarks.
- Technical Debt Inventory Template: Catalog template with fields for component, debt type, remediation effort, business cost, and dependencies. Export-ready for tracking and budgeting.
- Executive Summary Template: One-page overview translating technical findings into business language: health score, top 3 risks, recommended actions, and resource plan.
- Compliance Mapping Reference: SOC 2, ISO 27001, HIPAA, PCI-DSS control cross-walk. Shows which architectural elements address which compliance requirements.
- Remediation Roadmap Template: Phased action plan with effort estimates (S/M/L/XL), dependencies, sequencing rationale, and success metrics for each initiative.
Who It's For
- CTO / VP Engineering
- Enterprise Architect
- Technical Due Diligence Manager (M&A)
- Technical Program Manager
- Solutions Architect
Best For
- Acquisition or merger due diligence
- Architecture modernization planning
- Technical debt prioritization and roadmapping
- Compliance audit and remediation
- Vendor or partner technology assessment
You might also like
Extract critical lease terms and financial obligations in minutes, identify risks and red flags that could impact deal profitability, and generate professional broker memos with negotiation strategy recommendations. You'll transform lease documents into actionable intelligence for faster, more confident decision-making.
by nakano1122
You systematically analyze multi-layered enterprise architectures, identify critical trade-offs across scalability, cost, and risk, and generate documented decisions that align technical choices with business strategy. This skill produces comprehensive architecture reviews that expose hidden dependencies, quantify implementation trade-offs, and deliver prioritized, actionable recommendations backed by formal Architecture Decision Records.
by nakano1122
You can leverage Claude to conduct thorough code reviews, evaluate code quality, identify architectural issues, and provide actionable feedback to your frontend engineers. This skill helps you standardize code review practices across your team, catch bugs before production, and maintain consistent quality standards while scaling your engineering capacity.
by nakano1122
You get a structured decision-making framework tailored to scale-ups navigating rapid growth. Claude helps you evaluate technical architecture choices, plan team scaling with hiring rubrics, prioritize technical debt against velocity demands, and craft engineering strategy communications for leadership. The framework balances short-term velocity with long-term maintainability.
by nakano1122
This skill transforms complex lease agreements into clear, actionable analysis. It evaluates terms against market benchmarks, identifies negotiation leverage points, and generates professional recommendation letters that strengthen your position in lease discussions.
by nakano1122
You get immediate structured incident assessment and response coordination. Claude analyzes incident severity, impact scope, and escalation requirements—then generates decision trees, stakeholder communication templates, and post-incident review guides. This skill accelerates your response from triage through resolution to after-action review.
by nakano1122
Create comprehensive auction briefs for commercial properties that include compelling investment thesis, detailed comparable property analysis, targeted buyer personas, and compliance documentation. Claude analyzes property details, local market conditions, and asset specifications to produce professional briefs that maximize buyer interest and streamline the auction process. The skill generates investment highlights, financial projections, and buyer targeting strategies tailored to specific property types and market conditions.
by nakano1122
This skill evaluates industrial real estate deals by analyzing property fundamentals, comparable market data, risk factors, and investment metrics. You get detailed assessments of deal viability, market positioning, and potential returns—all structured to support your investment thesis with hard data. Whether you're analyzing a single property or comparing multiple deals, you'll receive an executive summary with a clear buy/hold/pass recommendation.
by nakano1122