Governance Review Tool

Prepare submissions for governance board reviews. Complete the questions for the relevant board, then export your responses as a document.

Technical Design Authority (TDA)

The TDA validates technical designs against organisational standards, security requirements and architecture principles before development begins. Answer each question and set a RAG status to indicate confidence or compliance.

0 of 12 answered

Architecture Review Board (ARB)

The ARB reviews architecture decisions, technology choices and strategic alignment. It ensures solutions fit within the enterprise architecture landscape and support long-term organisational goals.

0 of 12 answered

Change Advisory Board (CAB)

The CAB governs changes to live services and infrastructure. It assesses risk, ensures rollback plans are in place, and formally authorises changes before they proceed to production.

0 of 12 answered

Governance Framework

This tool supports formal submission to four governance boards. Each board plays a distinct role in managing risk, ensuring compliance, and maintaining architectural integrity across the delivery lifecycle.

SAB

Solution Architecture Board

Governance: Formally approves solution designs before build begins, ensuring decisions are documented and accountable.

Risk: Identifies solution-level risks early, including dependency, cost and delivery risks, before commitments are made.

Compliance: Verifies alignment with business requirements, regulatory obligations and organisational policy.

TDA

Technical Design Authority

Governance: Validates technical designs against organisational standards, ensuring all design decisions are reviewed and approved.

Risk: Identifies technical and security risks in the design, including threat vectors, integration weaknesses and resilience gaps.

Compliance: Ensures conformance with NCSC Secure by Design, NIST, ISO 27001 and UK GDPR data protection requirements.

ARB

Architecture Review Board

Governance: Ensures architecture decisions are formally recorded, consistent with enterprise strategy and not made in isolation.

Risk: Manages architecture risk including technical debt, vendor lock-in, scalability constraints and cross-cutting concerns.

Compliance: Enforces enterprise architecture standards, cloud strategy alignment and interoperability requirements.

CAB

Change Advisory Board

Governance: Provides formal authorisation for all changes to live services, ensuring accountability and traceability of every change.

Risk: Assesses change risk, rollback plans and implementation schedules to minimise service disruption.

Compliance: Enforces ITIL/ITSM change management processes and ensures audit trails meet regulatory and contractual requirements.

Solution Architecture Board (SAB)

The SAB reviews solution designs against business requirements, delivery approach and operational readiness. It ensures the proposed solution delivers value, is commercially sound and can be sustained after go-live.

0 of 12 answered

Review & Export

Review your responses across all four boards before exporting. Unanswered questions are highlighted — you can return to any tab to complete them.