Skip to content
Mike Reams
← Diagrams

DGM · Business Process

Technology Intake Checklist

A technology intake process checks for reuse first, runs architecture and security reviews in parallel, and records every approval before onboarding.

BPMN diagram in three lanes (requester; architecture and security; procurement): a request goes to a reuse check; an exclusive gateway ends the process with 'reuse it' if a capability exists; otherwise a parallel gateway runs architecture review and security and privacy review together, then joins into contract and onboarding, ending with the record in the CMDB and portfolio.BPMN diagram in three lanes (requester; architecture and security; procurement): a request goes to a reuse check; an exclusive gateway ends the process with 'reuse it' if a capability exists; otherwise a parallel gateway runs architecture review and security and privacy review together, then joins into contract and onboarding, ending with the record in the CMDB and portfolio.

What it is

A technology intake process decides what happens between “we want to buy this” and “it is live.” This version, drawn in BPMN, puts the cheapest question first, runs the expensive reviews side by side instead of one after another, and makes sure every approved purchase ends up as a record someone can find later.

Reading the diagram

  • Lanes show who does each step: the requester, architecture and security, and procurement.
  • Circles are start and end events; a thick border marks an end.
  • Rounded boxes are tasks.
  • Diamonds are gateways: × picks one path, + runs paths in parallel and waits for both.

The steps

  1. Submit the request with the business need, the data involved and the expected users.
  2. Reuse check: if an existing capability already covers the need, the process ends there.
  3. Parallel reviews: architecture checks fit, overlap and integration; security and privacy check data classification, vendor risk and sign-in.
  4. Contract and onboarding once both reviews pass.
  5. Record it: the purchase lands in the CMDB and the application portfolio as the right kind of record.

Common mistakes

  • Reviews in series, so a request waits weeks for each team in turn.
  • Skipping the reuse check, which is how organizations end up with three tools for one job.
  • Approving without a record, so the next audit cannot tell what was bought or why.

Based on OMG Business Process Model and Notation (BPMN) 2.0.2. Drawn for this site; no client or employer material.