Enterprise architecture and technology debt
What is our accumulated technology debt costing us?
Deferred modernization compounds quietly: each postponement is individually rational and collectively a balance-sheet exposure no one owns. Leadership finds out what the debt cost when a change that should take weeks takes quarters, or when the unsupported component fails.
Note
Adopting a page here decides nothing for you. The leadership pages linked here are explanatory and advisory; they establish no requirement and prove nothing about your organization. Every claim in them resolves to the governing reference documents in the corpus, and it is those documents that govern.
Leadership
The leadership pages
Pages from the executive layer mapped to this concern, generated from the narrative registry. They explain and advise; the documents below govern.
Documents
The governing documents
The evidence shelf: the corpus documents the pages above resolve to, joined to the library's registries at build time. These are the documents that govern, and the evidence to ask for starts here.
- Exception and Risk Acceptance Management Policypolicy, Governance
- Enterprise Architecture Frameworkframework, Architecture
- Architecture Decision Records Standardstandard, Architecture
- Enterprise Risk Management Standardstandard, Risk
- Software Evaluation, Acceptance and Lifecycle Management Standardstandard, Dev security
- Technology Radar Standardstandard, Architecture
- Architecture Review Procedureprocedure, Architecture
- Patch Management Procedureprocedure, Operations
- Vulnerability Management Procedureprocedure, Security
- Board Risk Report Templatetemplate, Risk
Frameworks
Frameworks touched
The external frameworks the shelf above maps, from the corpus registry. The documents' framework spellings are normalized against the crosswalk's committed alias maps: every spelling that names a crosswalk instrument, whole or by a clause, appears once as the instrument's short label and links its instrument page; a cited text that names no instrument is shown as plain text.
- Accelerate (DORA research)
- APEC CBPR
- Basel Committee Corporate Governance Principles
- C4 model
- CIS Controls v8.1
- Cloud Security Alliance (CSA)
- COBIT
- COSO ERM 2017
- CSA AICM
- CSA CCM
- Domain-driven design
- FRC UK Corporate Governance Code
- GDPR
- ISO 31000
- ISO/IEC 23894:2023
- ISO/IEC 25010
- ISO/IEC 27001
- ISO/IEC 27002
- ISO/IEC 42001
- ISO/IEC/IEEE 12207:2026
- ISO/IEC/IEEE 42010:2022
- IT4IT Reference Architecture
- LGPD
- Michael Nygard ADR practice
- NIST
- NIST AI RMF
- NIST CSF
- NIST IR 8286 (Rev. 1; and 8286A/B/C/D)
- NIST IR 8286C Rev. 1
- NIST SP 800-160 Vol. 1 Rev. 1
- NIST SP 800-218 Version 1.1
- NIST SP 800-221 / 800-221A
- NIST SP 800-37 Rev. 2
- NIST SP 800-39
- NIST SP 800-40r4
- NIST SP 800-53
- NIST SSDF
- OECD AI Principles
- OECD G20 Principles of Corporate Governance
- Open Agile Architecture (O-AA)
- Open Group TOGAF Standard
- OWASP SAMM
- PIPEDA
- PIPL
- Team Topologies
- The Open Group TOGAF Standard
- ThoughtWorks Technology Radar
- Wardley mapping
Go deeper