Skip to content

Phase 2: Assessment & Scoping

Phase goal: Produce sufficient technical understanding for scope, delivery phases, estimates, and risks—without locking implementation detail that should be proven in sprint.

  • Non-Disclosure Agreement (NDA) signed (if applicable)
  • Read-only access: architecture diagrams, application inventory, Identity and Access Management (IAM)/network policy, Software Development Life Cycle (SDLC) tooling
  • Workshops with platform, application, security, and finance (Financial Operations (FinOps)) teams as topics require

Cloud & platform

Google Cloud Platform (GCP) readiness, landing zone, migration, Google Kubernetes Engine (GKE)/Cloud Run, data platform, Financial Operations (FinOps) baseline.

Application & integration

Domain model, Application Programming Interface (API), ERP/payment/market data, non-functional requirements (NFR).

Development, Security, and Operations (DevSecOps) & security

Existing pipelines, Snyk/GitLab/GitHub, Cloud-Native Application Protection Platform (CNAPP) posture (Wiz), audit controls.

FinTech (if relevant)

Latency, Disaster Recovery (DR), institutional onboarding, control evidence for counterparties.

  1. Architecture workshop — current vs target state, dependencies, migration waves.
  2. Gap analysis — against Google Cloud Platform (GCP) best practice and client internal policy.
  3. Phase backlog — high-level waves/sprints with outcome per phase.
  4. Risk register — technical, operational, regulatory; mitigation and owners.
  5. Draft Statement of Work (SOW) input — deliverables, assumptions, out-of-scope, high-level acceptance criteria.
DeliverableContents
Assessment reportFindings, recommendations, priorities
Initial architecture decision records (Architecture Decision Record (ADR))Major decisions requiring approval
Scope & phase planPhases 0–n with outcomes and dependencies
Effort & timeline estimateRange with explicit assumptions
Responsible, Accountable, Consulted, Informed (RACI) draftSee Roles & responsibilities

Artifact details: Artifacts catalog.

  • Client sponsor approves architecture direction and delivery phases (formal sign-off or email)
  • Critical risks have mitigation or documented acceptance
  • Input for commercial proposal (Phase 3) is complete

2–6 weeks depending on scope (single workload vs multi-team program).

Previous: Phase 1: Discovery · Next: Phase 3: Commercial