{
  "id": "workflow:technology-risk-assessment",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-cross-domain-risk.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Technology Risk Assessment",
    "workflowKind": "governance",
    "triggerType": "scheduled",
    "typicalCadence": "quarterly",
    "complexity": "cross-team",
    "description": "Assesses technology and IT risk across the organization --\nmaintaining the technology risk register with categorization across\nobsolescence, vendor lock-in, architectural debt, and scalability\nconstraints, evaluating end-of-life and end-of-support timelines for\ncritical infrastructure components, assessing single-vendor\ndependency concentration and contractual exit barriers, reviewing\ndisaster recovery and business continuity readiness for key\ntechnology stacks, scoring technology risks on likelihood, impact,\nand velocity dimensions, and recommending risk treatment actions\nincluding modernization, diversification, and contingency planning.\nProduces technology risk register, vendor concentration analysis, and\nrisk treatment roadmap. Excludes technology selection and migration\nplanning.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:technology-risk-assessment",
      "to": "role:security-risk-analyst",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "role:staff-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "role:platform-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "skill-area:observability-pipeline",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "skill-area:monolith-vs-microservices",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "domain:platform-engineering",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "domain:infrastructure",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "responsibility:review-architecture-changes",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "responsibility:vendor-evaluation",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "org-unit:platform-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:technology-risk-assessment",
      "to": "org-unit:architecture-guild",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": []
}