Technical Debt Inventory and Attributes

The relationship between the Technical Debt Inventory and the Risks Inventory is one of cross-reference and co-governance. The Technical Debt Inventory cross-references Risks that are created, increased, mitigated, accepted, or otherwise associated with a Technical Debt Item. Risk assessment and acceptance remain authoritative in the Risks Inventory, while the Technical Debt Inventory remains authoritative for the technical condition, disposition, remediation, validation, residual Technical Debt, and closure. A dedicated related inventory is not present in the supplied IF4IT URL inventory. Until one is published, refer to the IF4IT Enterprise Inventory Management Best Practices document for the current Noun Type definition and inventory-governance context.

The relationship is carried through these attributes: Related Risks [Multi-Value]; Likelihood; Residual Risk; Accepted Exposure; Risk Acceptance Reference; Current Controls [Multi-Value]; Compensating Controls [Multi-Value]; Reconsideration Triggers [Multi-Value]; Validation Evidence [Multi-Value]. The related inventory’s stable Semantic Identifier or other authoritative identifier should be stored rather than duplicating the full related record. Changes that affect materiality, priority, acceptance, remediation, validation, closure, or reopening should be reconciled across both records while preserving each inventory’s separate audit history.

This relationship prevents Risk acceptance from being mistaken for Technical Debt closure and prevents Technical Debt remediation from silently closing related Risk obligations. It supports coordinated assessment, explicit residual exposure, aligned review and expiration dates, escalation, and reconciliation before closure or reopening. Without the relationship, Risk and Technical Debt decisions can conflict, duplicate evidence, or leave accepted exposure unowned.