In TOGAF, initial risks are identified during Phase A (Architecture Vision) as part of the Business Transformation Readiness Assessment, which evaluates readiness factors (vision, desire, need, capacity, capability, funding, sponsorship, etc.) and derives the associated risks for each. These risks are then classified and carried forward to be mitigated in the Implementation and Migration Plan (Phases E and F). Business Scenarios are a technique for eliciting and articulating requirements, not for formally identifying transformation risks, so option D is wrong. Gap analysis (option A) identifies architecture gaps rather than being the risk-identification vehicle.
Community Discussion