| 1 | Settlement database runs single-AZ; failover untested | Reliability | High | Multi-AZ with a quarterly failover drill; RTO/RPO agreed with the business owner |
EvidenceRDS configuration; no failover event in 18 months of logs Business consequenceSettlement delayed for the duration of an AZ outage EffortMedium, 2–3 weeks OwnerPlatform lead |
| 2 | Shared admin role used by CI pipeline and engineers | Security | High | Split pipeline and human roles; least privilege and MFA |
EvidenceIAM role trust policy and CloudTrail usage Business consequencePipeline compromise grants full account control EffortSmall, 1 week OwnerSecurity owner |
| 3 | Analytics cluster sized for month-end peak all month | Cost | Medium | Schedule-based scaling; 25–40% saving on this workload, to be validated |
EvidenceUtilization metrics below 20% for 24 of 30 days Business consequenceRecurring spend with no business return EffortSmall, 1–2 weeks OwnerData platform lead |
| 4 | No ownership tags on 38% of resources | Operations | Medium | Tagging policy enforced at account level; cost allocation by product |
EvidenceResource inventory and tag coverage report Business consequenceCosts and incidents cannot be routed to an owner EffortMedium, 3–4 weeks OwnerFinOps owner |
| 5 | Reconciliation job blocks reporting for 4 hours daily | Performance | Low | Incremental processing; candidate for a Modernization Sprint |
EvidenceJob run history and query plans Business consequenceFinance reporting available only after midday EffortMedium, Modernization Sprint scope OwnerData engineering |