← Tutorials 🤖 AI 📓 Architect's Notebook ☁ AWS 📋 Cheatsheet 🗃 Databases 🚀 DevOps 🧩 DSA ❓ FAQ 🖥 Frontend ☕ Java 🍏 MongoDB 🐍 Python 🌿 Spring Boot 🏗 System Design 🏛 TOGAF
Tutorials › TOGAF
★ marked topics include in-depth explanations with visual diagrams. Other topics give concise, exam-ready summaries.

Enterprise Architecture Fundamentals

🏛️ TOGAF · Foundations · 6 min read

Enterprise Architecture (EA) is the discipline of describing an organization's structure — its business processes, information, applications, and technology — and steering their evolution so that change is deliberate, aligned to strategy, and not accidental. It is the "town planning" of an enterprise: instead of every team building its own road, EA gives a shared map and rules.

Why Enterprise Architecture

  • Strategy → execution — translate business goals into concrete IT and process change.
  • Reduce complexity & duplication — one CRM, not seven; reusable building blocks.
  • Manage change — see the impact of a change across business, data, apps, and tech.
  • Govern — ensure projects comply with agreed principles and standards.

The Four Architecture Domains (BDAT)

Every EA effort works across four interlinked domains — the backbone of TOGAF:

  • Business — strategy, organization, processes, capabilities.
  • Data — logical/physical data assets and management.
  • Application — the application systems and their interactions.
  • Technology — hardware, networks, platforms that run it all.
💡 TOGAF is the most widely used EA framework. Others include the Zachman Framework (a taxonomy), FEAF (US federal), and Gartner's practice. TOGAF's differentiator is the ADM — a repeatable process, not just a classification scheme.

TOGAF Overview

🏛️ TOGAF · Foundations · 6 min read

TOGAF — The Open Group Architecture Framework — is an open, vendor-neutral framework and method for developing and governing enterprise architecture. First released in 1995 and now at version 10 (the "TOGAF Standard"), it is maintained by The Open Group and used by a majority of the Global 50.

The Six Parts of the TOGAF Standard

PartWhat it covers
ADMThe step-by-step method to develop architecture (the core)
ADM Guidelines & TechniquesHow to apply/adapt the ADM (gap analysis, principles, patterns)
Architecture Content FrameworkWhat you produce — deliverables, artifacts, building blocks
Enterprise Continuum & ToolsHow to classify & store reusable assets
Reference ModelsTRM and III-RM reference models
Architecture Capability FrameworkHow to set up & run an architecture practice (governance, ARB, skills)

Who Uses It

Enterprise architects, solution architects, CIOs/CTOs, and transformation programs use TOGAF to standardize how architecture is done across teams. Certifications: TOGAF Foundation (Level 1) and TOGAF Certified (Level 2).

💡 Think of TOGAF as a toolbox plus a recipe: the ADM is the recipe (process), the Content Framework is the list of dishes you make (deliverables), and the Enterprise Continuum is your pantry of reusable ingredients.

TOGAF Core Concepts

🏛️ TOGAF · Foundations · 7 min read

A handful of concepts recur throughout TOGAF. Getting these straight makes the rest of the framework click.

ADM

The iterative method (Preliminary + Phases A–H) for developing architecture.

Architecture Domains

Business, Data, Application, Technology (BDAT).

Building Blocks

Reusable components — Architecture (ABB, abstract) and Solution (SBB, concrete).

Enterprise Continuum

A way to classify assets from generic (foundation) to specific (organization).

Architecture Repository

Where all architecture assets and standards live.

Deliverables / Artifacts

Contractually-specified outputs vs. the diagrams/matrices/catalogs inside them.

Stakeholders & Concerns

People with an interest; views & viewpoints address their concerns.

Architecture Governance

The control framework (principles, ARB, compliance) ensuring conformance.

Baseline → Target → Transition

Architecture work is always about moving from where you are (Baseline) to where you want to be (Target), via one or more achievable steps (Transition architectures). The difference between baseline and target is found through Gap Analysis.

TOGAF Architecture Domains

🏛️ TOGAF · Foundations · 6 min read

TOGAF structures all architecture into four domains, often abbreviated BDAT. ADM Phases B, C, and D produce them.

DomainADM PhaseAnswers
Business ArchitectureBWhat does the business do? (capabilities, processes, org, value streams)
Data ArchitectureCWhat information do we manage and how?
Application ArchitectureCWhat applications support the business & data?
Technology ArchitectureDWhat platforms/infrastructure run the applications?

Data + Application together are often called Information Systems Architecture (Phase C). The domains are layered: business drives information systems, which run on technology.

💡 A change request rarely touches one domain. EA's value is showing the ripple: a new business capability (B) may need new data (D-domain data), new apps (A), and new infrastructure (T).

Architecture Development Method (ADM)

🏛️ TOGAF · ADM · ★ In-depth · 14 min read

The ADM is the heart of TOGAF — a tested, iterative, step-by-step method for developing and managing the lifecycle of an enterprise architecture. It runs as a continuous cycle: a Preliminary phase to set up, then eight phases (A–H), all revolving around a central Requirements Management process that feeds and is fed by every phase.

The ADM Lifecycle — Visual

Requirements Management (central, continuous) Preliminary Framework & Principles AVision BBusiness CInfo Systems DTechnology EOpp & Sol FMigration GImpl Gov HChange Mgmt Teal = define architectures · Amber = plan delivery · Red = govern build · Indigo = manage change → loops back

The Phases in One Line Each

PhasePurpose
PreliminarySet up the architecture capability, framework & principles
A — VisionScope, stakeholders, high-level vision, secure approval
B — BusinessTarget business architecture (capabilities, processes, org)
C — Information SystemsData & Application architectures
D — TechnologyTarget technology/infrastructure architecture
E — Opportunities & SolutionsIdentify delivery options, group into work packages
F — Migration PlanningSequence & prioritize into an Implementation & Migration Plan
G — Implementation GovernanceGovern the build, ensure conformance
H — Change ManagementManage change to the deployed architecture; trigger new cycles

Key Properties

  • Iterative — across the whole cycle, between phases, and within a phase.
  • Requirements-driven — Requirements Management sits in the center, touching every phase.
  • Tailorable — adapt phases, depth, and artifacts to your organization (an "ADM iteration" model).
  • Scoped by iteration — Baseline-first vs Target-first, breadth, depth, time period.
💡 The ADM is a cycle, not a waterfall. Phase H change requests feed a new Phase A — the architecture is continuously kept alive, not delivered once and abandoned.

Preliminary Phase

🏛️ TOGAF · ADM · 5 min read

The Preliminary Phase happens before the ADM cycle begins. It answers "how do we do architecture here?" — establishing the architecture capability rather than producing an architecture itself.

Key Activities

  • Define the scope of the enterprise affected and the architecture footprint.
  • Establish the architecture team & organization (and the ARB).
  • Tailor TOGAF and select tools — define the Architecture Framework to use.
  • Define and ratify the Architecture Principles.
  • Set up the governance and repository.

Key Outputs

Tailored architecture framework, Architecture Principles, initial Architecture Repository, Request for Architecture Work (often the trigger into Phase A), and the governance model.

💡 Mnemonic for Preliminary: define the 5 W's + frameworksWhere (scope), Who (team/governance), What (principles), Why (drivers), and the How (tailored framework & tools).

Architecture Vision (Phase A)

🏛️ TOGAF · ADM · ★ In-depth · 10 min read

Phase A kicks off an architecture cycle. It takes the Request for Architecture Work and produces an agreed, high-level Architecture Vision — a compelling, aspirational summary of the target and the value it delivers — plus a Statement of Architecture Work that is formally approved before detailed work starts.

Phase A Flow — Visual

Request forArchitecture Work Identify stakeholders+ concerns Business goals& drivers Architecture Visiontarget sketch + value Statement ofArchitecture Work(approved)

Key Activities

  • Confirm scope, constraints, and assumptions; identify stakeholders & concerns.
  • Confirm business goals, drivers, and KPIs.
  • Evaluate business capabilities and assess readiness for transformation.
  • Define scope and develop the high-level Architecture Vision (often with a Business Scenario).
  • Identify risks and secure approval of the Statement of Architecture Work.

Key Deliverables

Architecture Vision document, approved Statement of Architecture Work, refined Architecture Principles, Communications Plan, and a Capability Assessment.

💡 Phase A is about buy-in and scope, not detail. If you can't get the Statement of Architecture Work signed off, you don't proceed — this gate prevents wasted effort on unsanctioned work.

Business Architecture (Phase B)

🏛️ TOGAF · ADM · ★ In-depth · 11 min read

Phase B develops the Business Architecture — describing how the enterprise operates to meet its goals. It is usually done first among the domain architectures because it demonstrates business value and underpins the Data, Application, and Technology work that follows.

What It Describes — Visual

Strategy & Business Goalsdrivers · objectives · KPIs Capabilitieswhat we can do Value Streamshow value flows Processeshow work is done Org & Roleswho does it Drives → Data · Application · Technology architectures (Phases C & D)

Key Activities

  • Develop the Baseline and Target Business Architecture.
  • Model business capabilities, value streams, processes, organization, functions, and services.
  • Perform Gap Analysis between baseline and target.
  • Resolve impacts across the Architecture Landscape; update the requirements.

Common Artifacts

TypeExamples
CatalogsOrganization/Actor, Driver/Goal/Objective, Role, Business Service/Function
MatricesBusiness Interaction, Actor/Role
DiagramsBusiness Footprint, Functional Decomposition, Value Stream, Business Capability map
💡 Modern TOGAF leans on Business Capability Mapping and Value Streams as the anchor models — they're stable over time (capabilities rarely change) while processes and org structures churn.

Data Architecture (Phase C)

🏛️ TOGAF · ADM · ★ In-depth · 10 min read

Data Architecture is one half of Phase C (Information Systems Architecture). It defines the structure of the organization's logical and physical data assets and the data management resources — independent of any specific application or technology.

Layers of Data Architecture — Visual

Conceptual — business data entitiesCustomer, Order, Product (what the business cares about) Logical — normalized data modelentities, attributes, relationships (tech-neutral) Physical — actual schemastables, partitions, indexes, stores (Postgres, S3, Kafka) Cross-cutting: data governance · master data · security/classification · lifecycle

Key Activities

  • Develop Baseline & Target Data Architecture; build the logical data model and data entity catalog.
  • Map data entities to business functions and to applications (which app is the system of record?).
  • Address data governance, master data management, quality, security & classification.
  • Run Gap Analysis; identify data migration needs.

Common Artifacts

Data Entity/Data Component catalog, Data Entity/Business Function matrix, Application/Data matrix (CRUD), Logical/Physical Data diagrams, Data Migration & Data Lifecycle diagrams.

💡 Two key principles: data is an asset (managed enterprise-wide, not per-app) and each data entity should have a single system of record to avoid conflicting "truths".

Application Architecture (Phase C)

🏛️ TOGAF · ADM · ★ In-depth · 10 min read

The other half of Phase C. Application Architecture defines the major application systems needed to process data and support the business — their interactions and relationships to core business processes. It describes applications as logical groups of capability, not products.

Application Landscape — Visual

Channels: Web · Mobile · Partner APIs CRMcustomer mgmt Order Mgmtsales & fulfilment ERP / Financebilling, GL Integration layer (APIs / ESB / events) → Data Architecture

Key Activities

  • Develop Baseline & Target Application Architecture; build the application portfolio catalog.
  • Map applications to business functions/services and to data entities (CRUD).
  • Define application interactions, interfaces, and the integration approach.
  • Identify candidates for retire / consolidate / replace; run Gap Analysis.

Common Artifacts

Application Portfolio catalog, Interface catalog, Application/Function & Application/Data matrices, Application Communication diagram, Application & User-Location diagram, Software Engineering / Distribution diagrams.

💡 TOGAF keeps Application Architecture product-agnostic: you describe the "Order Management" capability and its interfaces; the actual product (SAP, a custom service) is a Solution Building Block chosen later in Phase E.

Technology Architecture (Phase D)

🏛️ TOGAF · ADM · ★ In-depth · 10 min read

Phase D defines the technology infrastructure — the hardware, software platforms, networks, and runtime services — needed to support the application and data architectures. It turns logical applications into something deployable.

Technology Stack — Visual

Applications (from Phase C) Platform services: runtimes · app servers · API gateway · messaging Compute · Storage · Database engines · Containers / Kubernetes Network · Data centers / Cloud regions · Security infrastructure Guided by the TOGAF Technical Reference Model (TRM)

Key Activities

  • Develop Baseline & Target Technology Architecture; build the technology portfolio / standards catalog.
  • Map technology components to the applications they host.
  • Address platform decisions: on-prem vs cloud, containers, networking, NFRs (performance, availability, security).
  • Run Gap Analysis; feed candidate solutions into Phase E.

Common Artifacts

Technology Standards & Technology Portfolio catalogs, Application/Technology matrix, Environments & Locations diagram, Platform Decomposition diagram, Network Computing/Hardware diagram, Processing diagram.

💡 Phase D is where the Technical Reference Model (TRM) and standards (the "Standards Information Base") keep technology choices consistent — preventing every project from picking a different database or queue.

Opportunities & Solutions (Phase E)

🏛️ TOGAF · ADM · 6 min read

Phase E is the first phase concerned with delivery. Having defined target architectures (B–D) and the gaps, it identifies how to deliver them — grouping gaps into work packages and defining the high-level migration approach and transition architectures.

Key Activities

  • Consolidate the Gap Analysis results from Phases B, C, D.
  • Determine the delivery approach (buy vs build, increments, big-bang vs phased).
  • Group requirements/gaps into Work Packages.
  • Identify Transition Architectures if the target can't be reached in one step.
  • Produce the outline Implementation & Migration Strategy and an initial Architecture Roadmap.

Key Outputs

Work packages, candidate Solution Building Blocks, Transition Architectures, the consolidated gaps/solutions, and the initial Architecture Roadmap — all refined into a detailed plan in Phase F.

💡 Phase E answers "what projects do we need and in what rough order?" Phase F then turns that into a costed, sequenced, governed plan.

Migration Planning (Phase F)

🏛️ TOGAF · ADM · ★ In-depth · 10 min read

Phase F finalizes how and when the architecture will be delivered. It turns the work packages and transition architectures from Phase E into a detailed, costed, risk-assessed, and sequenced Implementation & Migration Plan — agreed with the business and aligned to project/portfolio management.

From Gaps to a Sequenced Plan — Visual

Work packages(from Phase E) Prioritizevalue vs cost vs risk Transition Arch 1 → 2 → Target Cost / benefit + Business Value Assessment Implementation & Migration Plan (sequenced) Output handed to delivery teams & governed in Phase G

Key Activities

  • Confirm interactions with the enterprise's project & portfolio management.
  • Assign business value to each work package; prioritize by value, cost, risk, and dependencies.
  • Estimate resource requirements and timings; confirm Transition Architecture increments.
  • Perform risk assessment and confirm readiness factors.
  • Complete the Implementation & Migration Plan and finalize the Architecture Definition Document.

Key Deliverables

Implementation & Migration Plan, finalized Architecture Roadmap & Transition Architectures, Implementation Governance Model, and the completed Architecture Definition Document.

💡 Phase F is where architecture meets reality: budgets, dependencies, and sequencing. A technically perfect target with no viable migration path is worthless — Phase F proves the journey is feasible.

Implementation Governance (Phase G)

🏛️ TOGAF · ADM · 6 min read

Phase G provides architectural oversight of the implementation. As projects build the solution, Phase G ensures they conform to the target architecture and its standards, handling deviations through governance.

Key Activities

  • Confirm scope & priorities with delivery; guide solution development.
  • Perform architecture compliance reviews on projects.
  • Issue Architecture Contracts between the architecture function and implementers.
  • Manage deviations and grant dispensations where justified.

Key Outputs

Architecture Contract (signed), Compliance Assessments, change requests for the architecture, and a compliant, deployed solution.

💡 Phase G is the bridge between "the architecture on paper" and "the system being built." Compliance reviews here are where the Architecture Review Board earns its keep.

Architecture Change Management (Phase H)

🏛️ TOGAF · ADM · 6 min read

Phase H ensures the architecture continues to be fit for purpose after it's deployed. It establishes the process for managing changes to the baseline — deciding whether a change is a simple update, an incremental change, or a trigger for a whole new ADM cycle.

Change Classification

TypeResponse
Simplification changeHandled via change management techniques
Incremental changeMay be handled by architecture amendment within current cycle
Re-architecting changeSignificant — triggers a new ADM cycle (back to Phase A)

Key Activities

  • Monitor technology & business change; manage risks.
  • Assess change requests against the architecture and its value.
  • Decide the change path and govern the architecture lifecycle.
💡 Phase H is what makes TOGAF a living cycle: changes flow into Requirements Management and, when large enough, kick off Phase A again — closing the loop.

Requirements Management

🏛️ TOGAF · ADM · ★ In-depth · 9 min read

Requirements Management sits at the center of the ADM — it's not a phase but a continuous process that every phase both feeds and draws from. Its job is to capture, store, validate, prioritize, and manage changes to architecture requirements throughout the entire lifecycle.

Why It's in the Center — Visual

Requirements Management A · Vision B · Business C · IS D · Tech E/F · Plan G · Govern H · Change Prelim Every phase reads from and writes back to the requirements repository

Key Activities

  • Identify & document requirements (often via Business Scenarios in Phase A).
  • Baseline, prioritize, and store requirements in the repository.
  • Assess impact of changing requirements on current and prior phases.
  • Implement requirement changes and track status to closure.

What It Is Not

It does not dispose of requirements or make the architecture decisions — the individual phases do that. Requirements Management is the process and repository that keeps every phase working from the same agreed, current set of requirements.

💡 Because requirements change constantly, putting their management at the hub means any new or changed requirement is immediately visible to — and can re-trigger — any phase. This is the dynamic that keeps TOGAF responsive.

Architecture Principles

🏛️ TOGAF · Governance · ★ In-depth · 9 min read

Architecture Principles are general rules and guidelines, intended to be enduring, that inform and constrain how an organization sets about fulfilling its mission through architecture. They are established in the Preliminary Phase and govern every decision in the ADM.

The Four-Part Structure of a Principle — Visual

Namememorable, no jargon Statementthe rule itself Rationalewhy — business benefit Implicationsconsequences / cost Example: "Data is an Asset"Statement: data is managed enterprise-wide · Rationale: better decisions · Implications: governance, stewardship needed

What Makes a Good Principle

TOGAF defines five quality criteria: Understandable, Robust, Complete, Consistent, Stable.

Typical Principle Categories

  • Business — e.g. "Primacy of Principles", "Business Continuity", "Compliance with Law".
  • Data — e.g. "Data is an Asset", "Data is Shared", "Common Vocabulary".
  • Application — e.g. "Technology Independence", "Ease of Use".
  • Technology — e.g. "Control Technical Diversity", "Interoperability".
💡 Principles must be actionable and testable. "We value quality" is a slogan. "Every new system must expose a REST API conforming to the enterprise API standard" is a principle you can govern against.

Architecture Governance

🏛️ TOGAF · Governance · ★ In-depth · 10 min read

Architecture Governance is the practice of managing and controlling architectures at an enterprise level. It ensures that what gets built actually conforms to the agreed architecture, principles, and standards — and that deviations are deliberate, justified, and recorded.

The Governance Framework — Visual

Architecture Board (ARB)decisions & accountability Principles & Standardsthe rules Compliance Reviewscheck conformance Contracts & Dispensationsenforce / waive Architecture Repository (single source of truth)

The Four Domains of Governance

TOGAF aligns architecture governance with corporate, technology, IT, and architecture governance. Good governance is characterized by: Discipline, Transparency, Independence, Accountability, Responsibility, Fairness.

Key Mechanisms

  • Architecture Review Board (ARB) — the decision-making body.
  • Architecture Compliance Reviews — formal checks of projects against the architecture.
  • Architecture Contracts — agreements binding teams to the architecture.
  • Dispensations — time-boxed, recorded exceptions when full compliance isn't feasible.
💡 Governance without teeth is theatre. The combination of contracts (commitment) + compliance reviews (verification) + dispensations (controlled flexibility) is what makes TOGAF governance enforceable yet pragmatic.

Architecture Review Board (ARB)

🏛️ TOGAF · Governance · ★ In-depth · 9 min read

The Architecture Board (often called the Architecture Review Board) is the cross-organization body responsible for overseeing the implementation of the architecture governance strategy. It is the place where architecture decisions, exceptions, and conflicts are resolved with authority.

Where the ARB Sits — Visual

Executive / CIOmandate & sponsorship Architecture Review Boardenterprise architects + key stakeholders Project / Solution teamssubmit for review Compliance & exceptionsapprove / reject / waive Standards & repositorymaintain

Responsibilities

  • Provide the basis for all decision-making regarding the architecture.
  • Consistency between sub-architectures; identify reusable components.
  • Enforce architecture compliance; review and approve dispensations.
  • Monitor and control architecture contracts; improve the architecture practice itself.
  • Resolve conflicts/ambiguities and provide advice and guidance.

Composition & Cadence

Typically chaired by a lead/chief architect, with representation from business and IT stakeholders. It meets on a regular cadence plus on-demand for major decisions, and has a clear, documented operating model and authority.

💡 The ARB is a governance body, not a design committee. It decides whether work conforms and grants exceptions — it doesn't do the detailed architecture itself.

Compliance Assessment

🏛️ TOGAF · Governance · 5 min read

Architecture Compliance Assessment is the formal review of a project or solution against the target architecture, principles, and standards — usually conducted in Phase G and owned by the ARB.

Levels of Conformance

LevelMeaning
IrrelevantArchitecture spec doesn't apply to this system
ConsistentImplements some features, doesn't contradict
CompliantSome features implemented, none contradicted
ConformantAll applicable features implemented
Fully ConformantComplete match to the architecture spec
Non-conformantContradicts the architecture → needs dispensation or rework
💡 A non-conformant project isn't automatically killed — it can apply for a time-boxed dispensation, which records the deviation and its remediation deadline.

Risk Management

🏛️ TOGAF · Governance · 5 min read

Risk management is an ADM-wide technique to identify, classify, and mitigate risks before and during transformation. It runs continuously, with formal touchpoints in Phases A (initial), E/F (planning), and G (governance).

The Risk Process

  • Identify risks (business, technical, delivery, security).
  • Classify by impact (Catastrophic→Negligible) and frequency → an Effect × Frequency matrix.
  • Determine initial risk level, then apply mitigation to get a residual risk.
  • Monitor residual risks via governance.

Two Risk States

Initial risk = before mitigation; residual risk = after mitigation. The gap shows the value of the mitigation. Risks that remain too high after mitigation must be escalated to the ARB / sponsors.

💡 Risk classification feeds directly into Phase F prioritization — high-risk work packages may be sequenced earlier (to fail fast) or deferred until dependencies de-risk them.

Architecture Repository

🏛️ TOGAF · Content Framework · 5 min read

The Architecture Repository is where an enterprise stores and manages all architecture assets — models, patterns, standards, principles, and deliverables — so they can be governed and reused across the organization.

The Six Classes of Content

AreaHolds
Architecture MetamodelThe method & content framework being used
Architecture CapabilityParameters, skills, roles of the architecture practice
Architecture LandscapeThe live architectures (Strategic / Segment / Capability levels)
Standards Information Base (SIB)Mandated standards the enterprise must comply with
Reference LibraryReusable reference models & patterns
Governance LogRecord of governance activity & decisions
💡 The repository is the home of the Enterprise Continuum — the classification scheme that organizes everything in it from generic to specific.

Enterprise Continuum

🏛️ TOGAF · Content Framework · ★ In-depth · 9 min read

The Enterprise Continuum is a classification model and "view" of the repository that organizes reusable architecture assets along a spectrum from the most generic (applicable to any organization) to the most specific (built for your enterprise). It helps architects find and reuse assets rather than reinventing them.

The Continuum — Visual

Architecture Continuum (generic → specific) Foundation Common Systems Industry Organization-Specific Solutions Continuum (generic → specific) Foundation Solutions Common Sys Solutions Industry Solutions Organization Solutions Architecture Continuum = ABBs (what) · Solutions Continuum = SBBs (how) · they map column-to-column Assets are adopted & specialized left → right; lessons feed back right → left

The Two Continua

  • Architecture Continuum — reusable architecture building blocks (ABBs): Foundation → Common Systems → Industry → Organization-Specific.
  • Solutions Continuum — the matching reusable solution building blocks (SBBs) that realize each architecture level.
💡 Think left-to-right = increasing specificity. You pull a generic Foundation asset and specialize it down to your organization; the experience flows back as reusable patterns. This is how an enterprise stops solving the same problem repeatedly.

Architecture Content Framework

🏛️ TOGAF · Content Framework · 5 min read

The Content Framework defines what the ADM produces — a structured model of all the work products, so outputs are consistent and well-defined regardless of who creates them.

Three Categories of Work Product

Deliverables

Formal, contractually-specified outputs, reviewed & signed off (e.g. Architecture Definition Document).

Artifacts

Granular work products describing an aspect — catalogs, matrices, diagrams. Live inside deliverables.

Building Blocks

Reusable components of capability — ABBs (abstract) and SBBs (concrete).

It is underpinned by the Architecture Metamodel, which defines the formal entities (actors, functions, data entities, application components…) and their relationships.

💡 Relationship to remember: a Deliverable contains many Artifacts, and Artifacts describe Building Blocks.

Architecture Artifacts

🏛️ TOGAF · Content Framework · ★ In-depth · 9 min read

Artifacts are the granular architectural work products. TOGAF groups them into three types — Catalogs, Matrices, and Diagrams — and organizes them by ADM phase. They are the concrete things architects draw and tabulate.

The Three Artifact Types — Visual

Catalogslists of things e.g. App Portfolio Matricesrelationships (X vs Y) e.g. App/Data CRUD Diagramsvisual pictures e.g. App Communication

Views & Viewpoints

Artifacts realize views — representations of the system from the perspective of related concerns. A viewpoint defines how to construct a view (the conventions/template); the view is what a specific stakeholder actually sees. This addresses ISO/IEC 42010 stakeholder concerns.

Examples by Domain

DomainCatalogMatrixDiagram
BusinessOrg/ActorActor/RoleValue Stream
DataData EntityData Entity/FunctionLogical Data
ApplicationApp PortfolioApp/Data (CRUD)App Communication
TechnologyTechnology StandardsApp/TechnologyEnvironments & Locations
💡 Catalog → Matrix → Diagram is a natural progression: list the things, tabulate how they relate, then draw the relationships that matter to a stakeholder.

Architecture Deliverables

🏛️ TOGAF · Content Framework · 5 min read

Deliverables are the formal, contractual work products of the ADM — reviewed, agreed, signed off, and stored in the repository. They are the milestones that move the architecture forward and bind stakeholders.

Key Deliverables Across the ADM

DeliverableCreated/used
Request for Architecture WorkTrigger into Phase A
Statement of Architecture WorkPhase A — the approved scope/contract
Architecture VisionPhase A
Architecture Definition Document (ADD)B–F — the core architecture description
Architecture Requirements SpecificationB–F — measurable requirements
Architecture RoadmapE/F
Implementation & Migration PlanF
Architecture ContractG
💡 The Architecture Definition Document (the "what it is") and the Architecture Requirements Specification (the "what it must satisfy") are companion deliverables that evolve together through Phases B–F.

Architecture Building Blocks (ABB) — and ABB vs SBB

🏛️ TOGAF · Content Framework · ★ In-depth · 10 min read

A Building Block is a reusable, replaceable package of functionality. TOGAF distinguishes two kinds: ABBs describe what capability is required (technology-agnostic, defined during architecture), while SBBs describe how it is implemented (concrete products, defined during the Solutions work).

ABB vs SBB — Visual

ABB — Architecture Building Block "What" — required capability "Identity & Access Management" technology-neutral · defined in Phases B–D specifies functions, interfaces, standards SBB — Solution Building Block "How" — concrete implementation "Keycloak / Okta / AWS Cognito" product-specific · chosen in Phase E realizes the ABB realized by

Comparison

ABBSBB
QuestionWhat is needed?How is it built?
NatureAbstract, logical, product-neutralConcrete, physical, product-specific
Defined inArchitecture Continuum (Phases B–D)Solutions Continuum (Phase E)
DefinesRequired capability, standards, interfacesSpecific products/components meeting the ABB
Example"Message Queue capability""Apache Kafka cluster v3"
💡 ABBs keep the architecture stable and vendor-independent; SBBs let you swap implementations without changing the architecture. If you can replace Kafka with RabbitMQ without redrawing the architecture, your ABB/SBB separation is working.

Solution Building Blocks (SBB)

🏛️ TOGAF · Content Framework · ★ In-depth · 7 min read

Solution Building Blocks are the concrete, implementable components that realize the Architecture Building Blocks. They are vendor- and product-aware and live in the Solutions Continuum. SBBs are what delivery teams actually procure, configure, and build.

Characteristics

  • Define the specific products, custom components, or services used.
  • Fulfil the functions and conform to the interfaces/standards specified by their ABB.
  • Are organization- and project-specific; selected in Phase E (Opportunities & Solutions).
  • Captured in the repository for reuse across projects.

How SBBs Relate to the ADM

PhaseBuilding block focus
B, C, DDefine/refine ABBs (required capabilities)
EIdentify SBBs that realize the ABBs (buy/build/reuse)
F, GPlan & govern the delivery of those SBBs
💡 See Architecture Building Blocks (ABB) for the full ABB vs SBB comparison and diagram. Rule of thumb: ABB = specification, SBB = realization.

Architecture Capability Framework

🏛️ TOGAF · Capability · 5 min read

The Architecture Capability Framework describes how to establish and operate an architecture practice within an enterprise — the organization, roles, skills, processes, and governance needed to do architecture, as opposed to the architecture itself.

What It Covers

  • Architecture Governance & the Architecture Board (ARB).
  • Architecture Compliance process.
  • Architecture Skills Framework — roles & competencies of architects.
  • Architecture Maturity Models — assessing & improving the practice.
  • Setting up the Architecture Repository & tools.
💡 This is established largely in the Preliminary Phase. You build the capability once, then run many ADM cycles through it.

Stakeholder Management

🏛️ TOGAF · Capability · ★ In-depth · 9 min read

Stakeholder Management is a key ADM technique for identifying the people who matter to an architecture, understanding their concerns, and tailoring communication so the architecture gains and keeps their support. Architecture fails politically far more often than technically — this is how you prevent that.

The Power / Interest Grid — Visual

Power → Interest → Keep Satisfiedhigh power, low interest Manage Closelykey players — engage deeply Monitorminimal effort Keep Informedlow power, high interest

The Process

  1. Identify stakeholders (sponsors, users, operators, regulators, suppliers…).
  2. Classify by power and interest (the grid above) to set engagement level.
  3. Determine concerns — what each cares about (cost, risk, security, usability…).
  4. Map concerns to viewpoints — choose the views/artifacts that answer them.
  5. Tailor the Communications Plan for each group.

Concerns → Views → Viewpoints

A CFO's concern (cost) and a security officer's concern (risk) need different views of the same architecture. Stakeholder Management drives which artifacts you actually produce — you build the views your stakeholders need, not every possible diagram.

💡 Output: a Stakeholder Map and a Communications Plan, started in Phase A and maintained throughout. Engaging "Manage Closely" stakeholders early is the single highest-leverage activity in an architecture effort.

Business Capability Mapping

🏛️ TOGAF · Capability · 5 min read

A Business Capability is what a business does (an ability), independent of how or who does it. Capability Mapping produces a stable, hierarchical map of these abilities — a foundational anchor model in modern Business Architecture.

Why Capabilities Are Powerful

  • Stable — "Manage Customer Relationships" persists even as processes, org charts, and tools change.
  • Heat-mappable — overlay strategy, cost, risk, or maturity to spotlight investment areas.
  • Bridge to IT — map capabilities → applications → technology to see coverage & gaps.

Structure

Usually a 2–3 level decomposition (Level 1 broad domains → Level 2/3 sub-capabilities). Each is a noun phrase ("Order Management"), never a verb/process ("Process Orders").

💡 A capability map is the perfect canvas for executive conversations: colour Level-1 capabilities by strategic priority and you instantly show where to invest — without a single technical diagram.

Value Streams

🏛️ TOGAF · Capability · 5 min read

A Value Stream is an end-to-end sequence of value-adding stages that an enterprise performs to deliver value to a stakeholder (usually a customer). It views the business from the perspective of value delivery, complementing the capability map.

Example — "Acquire Product"

Search → Select → Order → Pay → Receive. Each stage delivers incremental value and is enabled by capabilities.

Value Streams + Capabilities

  • Value streams show flow (how value is created, left to right).
  • Capabilities show ability (what's needed, as a stable inventory).
  • Cross-mapping them reveals which capabilities are critical to which value — and where they're weak.
💡 TOGAF pairs Value Streams + Business Capabilities as the two primary Business Architecture viewpoints — flow and ability, two lenses on the same business.

Gap Analysis

🏛️ TOGAF · States & Planning · ★ In-depth · 9 min read

Gap Analysis is the core TOGAF technique for comparing the Baseline architecture with the Target architecture to identify what is missing, what must be removed, and what stays. It is performed in every domain phase (B, C, D) and the consolidated gaps drive Phases E and F.

The Gap Matrix — Visual

Baseline (rows) × Target (columns) Baseline ↓ / Target → Service A Service B (new) Service C Removed Service A Retained Service X (old) Eliminated New (none existed) GAP → build Diagonal = retained · "Eliminated" column = removed · "New" row = GAPS to fill Each GAP becomes a requirement → work package → roadmap item

How to Read It

  • List Baseline elements as rows, Target elements as columns, plus an "Eliminated" column and a "New" row.
  • Diagonal matches = retained (no action).
  • A baseline element with no target match → falls in Eliminated (decommission).
  • A target element with no baseline match → a cell in the New row = a gap to fill.
💡 Every gap is a unit of work. Gaps from Phases B/C/D are consolidated in Phase E, grouped into work packages, and sequenced into the roadmap in Phase F. Gap Analysis is the engine that turns "current vs future" into a concrete backlog.

Baseline Architecture

🏛️ TOGAF · States & Planning · 4 min read

The Baseline Architecture (the "as-is") describes the existing state of the enterprise across the business, data, application, and technology domains — before any proposed change.

Why It Matters

  • You can't plan a journey without knowing the starting point — it's one half of every Gap Analysis.
  • Reveals duplication, technical debt, and reusable assets.
  • Captured in each domain phase as a "Baseline ... Architecture" view.
⚠️ Don't over-invest in documenting the baseline. Capture it only to the depth needed to find gaps and risks — "just enough" baseline. Chasing a perfect as-is map is a common way to stall an architecture program.

Target Architecture

🏛️ TOGAF · States & Planning · 4 min read

The Target Architecture (the "to-be") describes the desired future state across all four domains — what the enterprise wants to achieve to meet its goals, driven by the Architecture Vision and requirements.

Characteristics

  • Aligned to strategy, principles, and the Architecture Vision.
  • Defined per domain (Target Business / Data / Application / Technology Architecture).
  • The other half of Gap Analysis; the destination the roadmap drives toward.
💡 The target is rarely reached in one leap. The path from Baseline → Target is bridged by one or more Transition Architectures — see the next topic.

Transition Architecture

🏛️ TOGAF · States & Planning · ★ In-depth · 9 min read

A Transition Architecture is a formal, deployable intermediate state between the Baseline and the Target. Because large targets can't be reached in one step, transitions break the journey into achievable, value-delivering increments — each one a coherent architecture in its own right.

Stepping Stones to the Target — Visual

Baselineas-is Transition 1quick wins Transition 2core platform Targetto-be Each transition is fully operational & delivers business value — not a half-built state

Key Points

  • Defined in Phase E, detailed and sequenced in Phase F.
  • Each transition must be a working, value-delivering state — not an incomplete mess.
  • Aligns architecture increments to the organization's appetite for change and funding cycles.
  • Documented in the Architecture Definition Document and shown on the Architecture Roadmap.
💡 Transition Architectures are how TOGAF reconciles "big vision" with "incremental delivery". They let you bank value and reduce risk along the way instead of betting everything on one big-bang cutover.

Architecture Roadmaps

🏛️ TOGAF · States & Planning · ★ In-depth · 9 min read

The Architecture Roadmap lists individual work packages and transition architectures on a timeline, showing how the enterprise moves from Baseline to Target. It is the bridge between architecture and delivery — the artifact executives and PMOs actually use to fund and schedule change.

A Roadmap on a Timeline — Visual

Q1Q2Q3Q4 Transition 1 Transition 2 → Target WP1: Identity platform WP2: Data cleanup WP3: Core services migration WP4: API gateway WP5: Decommission legacy

What's On It

  • Work packages with start/end, dependencies, and the transition they belong to.
  • Transition Architectures as milestones.
  • Business value & priority (from Phase F), risks, and resource needs.

Lifecycle

An initial roadmap appears in Phase E, is finalized and costed in Phase F, governed in G, and updated in H as change requests arrive. It is a living artifact, not a one-time Gantt chart.

💡 The roadmap is what turns architecture from a "binder on a shelf" into funded projects. If your architecture doesn't produce a roadmap, the business has nothing to act on.

Work Packages

🏛️ TOGAF · States & Planning · 4 min read

A Work Package is a logically grouped set of actions — a project or project increment — that delivers part of the architecture. Work packages are how gaps get organized into deliverable chunks of work.

Where They Come From

  • Gaps (from Gap Analysis) are grouped into work packages in Phase E.
  • Each work package implements specific Solution Building Blocks.
  • Prioritized and sequenced into the roadmap & migration plan in Phase F.
  • Handed to delivery teams and governed via Architecture Contracts in Phase G.
💡 Chain to remember: Requirement → Gap → Work Package → Project → Solution Building Block deployed.

Reference Architectures

🏛️ TOGAF · Reference & Patterns · 5 min read

A Reference Architecture is a proven, reusable template for a class of solutions — a generic blueprint that organizations specialize for their own needs. They live in the Reference Library of the repository and sit on the generic end of the Enterprise Continuum.

TOGAF's Built-in Reference Models

  • TRM (Technical Reference Model) — a taxonomy of generic platform services & their interfaces (the "foundation architecture").
  • III-RM (Integrated Information Infrastructure Reference Model) — focuses on Boundaryless Information Flow.

Industry Examples

BIAN (banking), eTOM/Frameworx (telecom), ARTS (retail), cloud provider Well-Architected frameworks. You adopt one and specialize it rather than starting from a blank page.

💡 Reference architectures accelerate work and improve quality — but must always be tailored. A reference model used unquestioned becomes a constraint instead of an enabler.

Solution Blueprinting

🏛️ TOGAF · Reference & Patterns · 5 min read

Solution Blueprinting is the practice of producing a detailed, implementable design for a specific solution — translating architecture (ABBs) into concrete Solution Building Blocks, components, integrations, and deployment topology.

What a Blueprint Captures

  • Selected products/components (SBBs) and how they fit together.
  • Integration points, data flows, and interfaces.
  • Deployment topology, environments, and NFRs (security, performance, availability).
  • Compliance to enterprise principles & standards.
💡 Blueprinting bridges enterprise architecture and solution architecture: the EA defines the guardrails (ABBs, principles); the blueprint shows a specific, compliant way to build within them.

Architecture Patterns

🏛️ TOGAF · Reference & Patterns · 5 min read

An Architecture Pattern is a reusable solution to a recurring problem in a given context. Patterns capture proven design wisdom so architects don't re-solve the same problems — TOGAF treats them as reusable assets in the Reference Library.

Pattern Structure

Typically: Name · Problem/Context · Forces · Solution · Resulting Context · Examples (the classic pattern template).

Common Enterprise Patterns

  • Integration — API Gateway, Publish/Subscribe, Event-Driven, ESB.
  • Application — Layered, Microservices, CQRS, Saga.
  • Resilience — Circuit Breaker, Bulkhead, Retry.
  • Data — Master Data Management, Data Lake, Polyglot Persistence.
💡 Patterns differ from reference architectures by scope: a pattern solves one recurring problem; a reference architecture is a whole-solution template that often composes many patterns.

Security Architecture

🏛️ TOGAF · Reference & Patterns · 6 min read

Security Architecture is a cross-cutting concern woven through every ADM phase rather than a single phase. It ensures confidentiality, integrity, and availability are designed in — not bolted on. TOGAF integrates with frameworks like SABSA and O-ESA for depth.

Security Across the ADM

PhaseSecurity focus
Preliminary / ASecurity principles, policies, risk appetite, key stakeholders (CISO)
B / C / DThreat modeling, data classification, identity & access, secure tech standards
E / FSecurity in work packages & sequencing; controls roadmap
G / HSecurity compliance reviews; monitor evolving threats

Core Concerns

  • Identity & access management (authN/authZ), least privilege.
  • Data protection — encryption in transit & at rest, classification.
  • Defense in depth, zero-trust, and regulatory compliance (GDPR, PCI-DSS).
💡 Treat security as a viewpoint with its own stakeholder (the CISO) and its own concerns mapped across every domain — that's how TOGAF keeps it from being an afterthought.

Integration Architecture

🏛️ TOGAF · Reference & Patterns · 6 min read

Integration Architecture defines how applications and systems connect and exchange data across the enterprise. As application portfolios grow, integration becomes the dominant source of complexity — a deliberate integration architecture prevents a tangle of point-to-point links.

Integration Styles

StyleUse when
API / REST (synchronous)Request/response, real-time queries
Messaging / Events (async)Decoupling, scalability, event-driven flows
API GatewaySingle managed entry point, security, throttling
ETL / BatchBulk data movement, analytics loads
ESB (legacy)Centralized mediation/transformation

Principles

  • Prefer loose coupling and well-defined contracts/interfaces.
  • Standardize on enterprise API & event standards (governed in Phase D).
  • Avoid point-to-point sprawl; use gateways/brokers as integration hubs.
💡 Integration architecture is the connective tissue between Application Architecture (the apps) and Technology Architecture (the platforms that carry the traffic) — and a frequent home for reusable patterns.

Cloud Architecture using TOGAF

🏛️ TOGAF · Applying TOGAF · ★ In-depth · 10 min read

Migrating to the cloud is a textbook use of the ADM: it's a transformation spanning all four domains, needs governance, and benefits hugely from transition architectures. TOGAF provides the method; cloud Well-Architected frameworks provide the reference content.

Mapping Cloud Migration onto the ADM — Visual

A · Vision — cloud strategy, drivers (cost, agility), readiness assessment B · Business — capabilities affected, new operating model (DevOps, FinOps) C · Data & App — data residency, app dispositions (7 R's), cloud-native patterns D · Technology — cloud platform, network, IAM, landing zone, security baseline E/F · Migrate in waves — transition architectures (lift-shift → optimize → cloud-native) G/H · Govern landing zone & guardrails · manage continuous cloud change

The 7 R's of App Disposition (Phase C/E)

Rehost (lift & shift) · Replatform · Repurchase (SaaS) · Refactor (cloud-native) · Retire · Retain · Relocate. Each app gets a disposition, captured as a Solution Building Block decision.

Key TOGAF Touchpoints

  • Principles — "cloud-first", "design for failure", "automate everything".
  • ABB → SBB — "object storage capability" (ABB) → "Amazon S3" (SBB), keeping the architecture portable.
  • Transition Architectures — migrate in waves; never big-bang an enterprise.
  • Governance — a cloud landing zone + guardrails is Architecture Governance made executable.
💡 TOGAF + cloud is complementary, not competing: use the ADM to decide why, what, and in what order; use the cloud Well-Architected framework as the reference architecture for the how.

Microservices Architecture using TOGAF

🏛️ TOGAF · Applying TOGAF · ★ In-depth · 10 min read

Microservices is an Application/Technology architecture style; TOGAF supplies the enterprise context that keeps a microservices estate aligned to business capabilities and governed instead of sprawling into chaos.

Capabilities → Services — Visual

Business Capabilities (Phase B) → service boundaries Customer Svcown DB Order Svcown DB Payment Svcown DB Inventory Svcown DB API Gateway + Event Bus (Integration Architecture) Container platform / K8s (Technology Architecture · Phase D)

TOGAF Adds Discipline

  • Service boundaries from capabilities — Phase B business capabilities are the natural seams (bounded contexts), avoiding arbitrary splits.
  • Data ownership — Data Architecture enforces each service owns its data (one system of record).
  • Standards & patterns — Phase D mandates API/event standards, observability, resilience patterns (Circuit Breaker, Saga).
  • Governance — the ARB prevents "every team a snowflake"; reusable SBBs (gateway, mesh) are shared.
⚠️ Microservices without EA governance produce a distributed monolith — hundreds of services with tangled dependencies. TOGAF's capability mapping + standards + ARB are exactly the controls that keep it manageable.

Legacy Modernization using TOGAF

🏛️ TOGAF · Applying TOGAF · 6 min read

Modernizing legacy systems is a high-risk transformation where TOGAF's structured, incremental approach shines — establishing a clear baseline, a target, and safe transitions rather than a risky rip-and-replace.

Modernization Strategies (per app)

StrategyWhat
EncapsulateWrap legacy with APIs, keep it running
Rehost / ReplatformMove with little/some change
Refactor / Re-architectRestructure the code/architecture
Rebuild / ReplaceNew build or COTS/SaaS

Why TOGAF Fits

  • Baseline architecture surfaces hidden dependencies and risk.
  • Strangler-fig via Transition Architectures — incrementally replace, delivering value each wave.
  • Governance ensures new components meet current standards.
💡 The Strangler Fig pattern maps perfectly to Transition Architectures: route slices of functionality to new services over successive transitions until the legacy can be retired.

Digital Transformation using TOGAF

🏛️ TOGAF · Applying TOGAF · 6 min read

Digital transformation re-imagines business models, customer experiences, and operations using digital technology. As an enterprise-wide, strategy-driven change across all domains, it is exactly what the ADM is built to orchestrate.

How TOGAF Steers It

  • Phase A — anchor transformation to business strategy & measurable outcomes; assess readiness.
  • Phase B — re-map capabilities & value streams for the digital operating model.
  • Phases C/D — target data/app/tech for cloud, data, AI, APIs.
  • Phases E–H — sequence change into transitions; govern continuously.
💡 Transformation programs fail when tech runs ahead of business change. TOGAF's business-first sequencing (B before C/D) keeps the "why" driving the "how".

TOGAF and Agile

🏛️ TOGAF · Applying TOGAF · 6 min read

TOGAF and Agile are complementary, not contradictory. EA sets the intentional direction and guardrails; Agile teams deliver within them with autonomy. The key is doing "just enough architecture" at the right altitude.

How They Combine

  • Iterative ADM — run the ADM in increments; don't big-design-up-front.
  • Architecture runway — EA provides just-in-time enabling architecture ahead of teams.
  • Guardrails over gates — principles & standards let teams move fast safely.
  • Lightweight artifacts — produce the minimum viable architecture that adds value.

Altitudes

Enterprise architecture (strategic, slow-changing) → Solution architecture (per initiative) → Team architecture (sprint-level). TOGAF governs the top; Agile owns the bottom; they meet at the runway.

💡 The Open Group publishes guidance on "Agile + TOGAF". The mantra: govern the intent, not the implementation detail.

TOGAF and DevOps

🏛️ TOGAF · Applying TOGAF · 6 min read

DevOps is an operating-model and technology concern that TOGAF addresses in Business (ways of working) and Technology (toolchain, platforms) architectures. EA ensures DevOps practices are adopted consistently and securely across teams.

TOGAF's Role

  • Business Architecture — define the DevOps operating model, team topologies, and capabilities.
  • Technology Architecture — standardize the CI/CD toolchain, platform engineering, IaC.
  • Principles — "automate everything", "you build it, you run it", "shift-left security".
  • Governance — policy-as-code & automated compliance checks in pipelines (governance made continuous).
💡 DevOps + Cloud + Microservices + Agile usually arrive together in a transformation — TOGAF is the umbrella that keeps these four mutually reinforcing instead of four uncoordinated initiatives.

Architecture Maturity Models

🏛️ TOGAF · Maturity · 5 min read

An Architecture Maturity Model assesses how capable and consistent an organization's architecture practice is, providing a baseline and a path for improvement. TOGAF references models like the ACMM (Architecture Capability Maturity Model).

The Five Maturity Levels (CMM-style)

LevelState
1 · InitialAd-hoc, informal, hero-driven architecture
2 · Managed / Under DevelopmentSome processes & roles defined
3 · DefinedDocumented, standardized EA process in use
4 · Measured / ManagedMetrics-driven; architecture value measured
5 · OptimizingContinuous improvement of the practice itself

Use

  • Assess current maturity → set a realistic target → close gaps in the architecture capability.
  • Part of the Architecture Capability Framework; often run periodically by the ARB.
💡 Maturity models apply the same Baseline → Target → Gap thinking to the architecture practice itself — TOGAF turning its lens inward for continuous improvement.