Enterprise Architecture Review & Risk Assessment Framework
Audit enterprise architecture and quantify technical risk systematically
What You Can Do
You conduct systematic architecture reviews that identify technical risks, quantify their business impact, and prioritize technical debt for remediation. The framework generates risk matrices, compliance gap analyses, and actionable roadmaps with effort estimates—ideal for due diligence, modernization planning, or governance decision-making. You produce executive summaries that translate technical findings into business language for stakeholder alignment.
Features
Maps current state, key dependencies, integration points, and critical paths. Identifies single points of failure and architectural anti-patterns.
Quantifies risks by impact and likelihood, producing a heat map that shows which risks deserve immediate attention and which can be deferred.
Catalogs debt by category (legacy frameworks, deprecated languages, outdated dependencies), estimates remediation effort, and calculates business cost of inaction.
Checks architecture against SOC 2, ISO 27001, HIPAA, PCI-DSS, and other standards. Flags violations and recommends controls.
Generates acquisition/partnership assessment reports with technical health score, red flags, integration complexity, and post-close work estimates.
Creates prioritized action plan with effort estimates (T-shirt sizing), dependencies, recommended sequencing, and resource allocation guidance.
Evaluates growth capacity, identifies bottlenecks, and recommends architectural changes to support projected scale (throughput, latency, cost).
Identifies outdated libraries, unpatched dependencies, security vulnerabilities, and third-party risk exposure with remediation urgency.
Example Output
Risk Summary:
- Critical (Immediate): Monolithic app at 90% capacity, no horizontal scaling → 3-month rewrite → $500K spend
- High (Next quarter): PostgreSQL 11 EOL → 4-week migration → low risk
- Medium (Backlog): OAuth integration missing MFA → 2-week hardening → compliance requirement
Compliance Status:
| Control | Status | Gap | Recommendation |
|---|---|---|---|
| Access logs (SOC 2) | Partial | Missing retention > 90d | Implement centralized logging, 1yr retention |
| Encryption (ISO 27001) | Compliant | None | Continue quarterly reviews |
Executive Summary: Architecture is operationally sound but reaching capacity limits. 18-month modernization roadmap recommended: Q1 containerization (8 wks), Q2 database migration (6 wks), Q3 microservices pilot (12 wks). Est. $1.2M, unblocks 3x growth.
What's Included
- Assessment Methodology: Structured checklist covering architecture patterns, data flows, deployment model, observability, and disaster recovery readiness.
- Risk Scoring Matrix: Impact × Likelihood framework with standard severity definitions. Calibrates risks relative to business context and industry benchmarks.
- Technical Debt Inventory Template: Catalog template with fields for component, debt type, remediation effort, business cost, and dependencies. Export-ready for tracking and budgeting.
- Executive Summary Template: One-page overview translating technical findings into business language: health score, top 3 risks, recommended actions, and resource plan.
- Compliance Mapping Reference: SOC 2, ISO 27001, HIPAA, PCI-DSS control cross-walk. Shows which architectural elements address which compliance requirements.
- Remediation Roadmap Template: Phased action plan with effort estimates (S/M/L/XL), dependencies, sequencing rationale, and success metrics for each initiative.
Who It's For
- CTO / VP Engineering
- Enterprise Architect
- Technical Due Diligence Manager (M&A)
- Technical Program Manager
- Solutions Architect
Best For
- Acquisition or merger due diligence
- Architecture modernization planning
- Technical debt prioritization and roadmapping
- Compliance audit and remediation
- Vendor or partner technology assessment
You might also like
You'll structure high-stakes architectural decisions using a proven enterprise framework that systematically evaluates options, assesses risks, aligns stakeholders, and documents trade-offs. This skill guides you through decision matrices, financial impact analysis, implementation planning, and post-decision reviews—ensuring your organization makes defensible architectural choices that scale.
by nakano1122
Claude systematically analyzes production incidents to identify root causes, contributing factors, and systemic vulnerabilities in your infrastructure. You'll receive structured postmortems that guide your team through incident timelines, pinpoint what actually failed, and prioritize infrastructure improvements that prevent recurrence. The skill also detects patterns across your incident history—revealing repeated failures that point to deeper architectural weaknesses.
by nakano1122
You can rapidly map your security controls to major regulatory frameworks (SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS), automatically identify compliance gaps, and generate audit-ready evidence packages. The skill analyzes your control inventory against framework requirements, flags missing or inadequate controls, and produces structured documentation that accelerates compliance reviews and audit preparation.
by nakano1122
This skill generates comprehensive, personalized buyer education and real-time guidance tailored to each client's experience level and concerns. You'll handle objections with empathy and data-backed responses, guide clients through every transaction stage with clear next steps, and build buyer confidence that turns hesitation into action. It creates customized scripts, educational resources, and FAQ compilations that work across real estate, automotive, insurance, and B2B sales.
by nakano1122
Create comprehensive digital transformation roadmaps that span 3-5 years with phased initiatives, business cases, and risk mitigation strategies. This skill helps you align technology investments with business objectives, prioritize competing initiatives by impact and effort, and communicate transformation plans clearly to executive stakeholders. You'll generate ROI projections, resource requirements, and success metrics for each phase.
by nakano1122
Perform comprehensive financial analysis on multifamily acquisitions, from pro forma development to underwriting memoranda. Generate sensitivity analyses, cash flow projections, and investment metrics (IRR, CoC, NOI) that help you evaluate deal quality and portfolio performance. Create institutional-grade reports with rent rolls, expense breakdowns, and risk assessments for due diligence, lender presentations, or investor pitch decks.
by nakano1122
You get immediate structured incident assessment and response coordination. Claude analyzes incident severity, impact scope, and escalation requirements—then generates decision trees, stakeholder communication templates, and post-incident review guides. This skill accelerates your response from triage through resolution to after-action review.
by nakano1122
You can systematically identify performance bottlenecks in your frontend application across React, Vue, and Angular frameworks. This skill analyzes your codebase for common anti-patterns, runtime behavior, and bundle metrics to pinpoint the slowest components and queries. You'll receive a data-driven optimization roadmap prioritized by impact and implementation effort, complete with specific code examples and effort estimates your team can execute immediately.
by nakano1122