Document Request List

Use this list to request existing client material before creating new artifacts. Existing documents reveal ownership, assumptions, and gaps, even when they are stale.

Architecture and systems

Request:

• Current architecture diagrams.
• Service catalog or application inventory.
• Environment and account structure.
• Network diagrams and DNS ownership notes.
• Data flow diagrams.
• Dependency and integration lists.
• Previous modernization plans.

Delivery and operations

Request:

• CI/CD standards and pipeline templates.
• Release process documentation.
• Incident response process.
• Recent postmortems.
• Runbooks for critical systems.
• On-call schedules and escalation paths.
• SLOs, SLAs, or support commitments.

Security and compliance

Request:

• Security policies relevant to the engagement.
• Access review process and recent evidence.
• Vulnerability management process.
• Data classification policy.
• Compliance control mappings.
• Recent audit findings or customer security requests.
• Exception register.

Financial and vendor context

Request:

• Cloud cost reports.
• Tagging or allocation policy.
• Vendor inventory.
• Renewal dates for relevant tools.
• Existing consolidation or procurement constraints.

Watchouts

• Stale documents are still useful when compared with live evidence.
• Some sensitive documents may require restricted handling.
• Ask who owns each document and when it was last trusted.