Unowned Risk

Kind: anti-pattern

Layer: Enforcement Core

Aliases: Unknown/Unowned Risk

Record: architecture:unowned-risk

Severity: discouraged

Scope: architecture_evolution

Formed by: Identify a risk without assigning owner, severity, mitigation, review date, acceptance status, or escalation path.

Canonical: Ontology

A defect in which a risk is never identified, or is identified and has no owner, severity, mitigation or review date.

Listed in Architecture principles, after Opaque Runtime Behavior and before Unobservable Failure.

Refactored by

• Assign Owner
• Severity Classification
• Mitigation Plan
• Accepted Risk Record
• Scheduled Review

Severity

• discouraged

Category

• Anti-patterns

Force

• Architecture evolution

Negated by

• Risk Management

Violates

• Risk Management

Linked from

• Ask where it appears
• Anti-patterns
• Security / Privacy / Compliance / Governance
• Architecture Review Evolution Governance
• Severity levels
• The forces