An architecture diagram usually shows the system somebody set out to build. Before you
change any of it, you need a record of the one that is actually running.
One page, the whole method.
Six columns per system
Six columns will answer the questions you actually end up asking. Maps that try to capture
everything tend not to get finished.
Inbound and outbound mean every path, including manual uploads, email attachments, a shared
folder, and somebody rekeying from a screen.
What interviews will miss
People will tell you about the systems they work with. The ones that cause trouble later are
usually the ones nobody has thought about in years, so you have to go looking.
Firewall, load balancer, DNSShows what is actually talking to what. Chase down anything nobody can account for.
Scheduled jobs and cronBatch work is rarely documented, and it is often where the surprises are.
Database accountsWhich account connects, and from where. One system reading another's tables directly turns up more often than people expect.
Ask operationsAsk what they do by hand every month. Those spreadsheets carry more load than anyone realises.
Certificate and licence renewalsSomebody pays for each one. They can usually tell you what it is for.
Ordering the work
The system's owner can answer both without going away to look anything up. Anything high on
both axes will need attention eventually, though starting there is risky. Those systems tend
to be the most coupled, and a first attempt that stalls is hard to come back from.
What to resist
Starting with a tooling decision. Mapping often stalls while a discovery platform is
evaluated and procured. You learn more from a spreadsheet with the six columns filled in
than from a platform nobody has populated yet.
What you use it for afterwards
Choosing the next seamIn most organisations it is the one place blast radius has been written down.
Audit and due diligenceThese requests arrive at short notice, and they tend to ask which systems process a given category of data.
DecommissioningBefore you switch something off, the map tells you what still depends on it.
Keeping it current is a small standing job. Attach it to something that already happens, such
as a change approval step, so it does not rely on a review nobody attends.
What it doesOne business sentence. If nobody can write one, record that.
Who owns itA named business owner and a named technical owner. Not a team.
What goes inEvery inbound path, including uploads, email, shared folders, rekeying.
What comes outFiles, APIs, reports, direct database writes, anything copied by hand.
What it runs onLanguage, framework, version, host, and whether any is out of support.
If it stopsBlast radius in plain words, and tolerable downtime.
What interviews will miss
Firewall rules, load balancer config, DNS
Scheduled jobs and cron tables
Database accounts and where they connect from
Ask operations what they do by hand each month
Certificate and licence renewals
Order on two axes
Consequence. Down for a day: inconvenience, revenue, or regulatory?
Fragility. Supported? Understood? Last successful change?
Anything high on both will need attention eventually, though it is rarely the right place to start. Begin where there is real pain and a small blast radius.
Finished when
You can pick any system and say, without checking, what breaks if it stops, and you can
name the first seam and defend the choice. One to three weeks for a mid-sized estate.
Past a month, the map has become the project.
Resist
Evaluating a tool firstA spreadsheet with six columns filled in is worth more than a platform with nothing in it.
Starting at the worst systemProve the approach somewhere smaller, then come back to it.
Greyquill Software modernises systems that cannot be switched off, one
seam at a time, with the evidence to show it worked. greyquill.io