Home/Architecture Hub/Enterprise Architecture Assessment

Enterprise Architecture Assessment: How to Audit Before You Migrate

A practical framework for running a pre-migration architecture assessment — covering the 10 dimensions, 7 R's classification, red flags, costs, and the decision logic for sequencing your modernization roadmap.

TL;DR — Executive Summary

Most migration failures aren't caused by bad technology — they're caused by skipping the assessment that would have caught the problems first. Organizations that conduct a formal architecture readiness assessment before migration achieve 2.4x higher success rates, yet most enterprises still proceed without one. A comprehensive assessment costs 1–5% of a typical migration budget and routinely prevents overruns that average 23% above plan.

What You'll Learn

  • The 10 architecture dimensions your assessment must cover before any migration begins
  • The red flags and anti-patterns that signal your org isn't ready to migrate
  • How to apply the 7 R's framework to classify every application in your portfolio
  • What assessments cost, how long they take, and how to calculate the ROI
  • A decision framework for sequencing your modernization roadmap

What Is an Enterprise Architecture Assessment?

An enterprise architecture assessment is a structured evaluation of an organization's current technology landscape — applications, data, infrastructure, integrations, and organizational readiness — conducted before a major migration or modernization initiative to identify gaps, dependencies, and risks that would otherwise surface as cost overruns or failures.

It is not a documentation exercise. Done right, it is the single most consequential investment you can make before committing to a migration.

70%
Digital transformations fail to meet objectives (McKinsey)
23%
Average budget overrun on migrations (IDC 2024–25)
2.4x
Higher success rate with formal assessment
47%
Of migration delays caused by undocumented dependencies

Three Failures That Define What's at Risk

Real-world failures are more instructive than aggregate statistics.

$7 billion lost

Target Canada (2013–2015)

Target rushed an SAP implementation without validating data quality or integration readiness. Data in the system had only 30% accuracy. Three separate systems failed to integrate properly. All 133 Canadian stores closed. A basic architecture assessment would have flagged the data quality gap in week one.

£12.7 billion wasted

UK NHS National Programme for IT (2002–2011)

The largest civilian IT program ever attempted. A top-down architecture designed without stakeholder input produced only £2.6 billion in benefits. The UK National Audit Office concluded the program was undone by "unprecedented scale and boundless complexity" — exactly the finding a proper assessment delivers upfront.

$600 million scrapped

Lidl SAP Failure (~2011–2018)

Lidl's inventory system used purchase-price valuation; SAP used retail-price. A fundamental architecture mismatch discoverable in week one of any serious assessment. Instead, Lidl spent $600 million trying to force SAP to mirror legacy behavior before scrapping the entire project.

The 10-Dimension Architecture Assessment Checklist

A rigorous pre-migration assessment covers ten domains. Most organizations shortchange at least three of them.

01High Risk if Skipped

Application Portfolio

Inventory every application: lifecycle stage, business criticality, technology stack, redundancy, technical debt, and ownership mapping. Apply the 7 R's classification to every application in scope.

02High Risk if Skipped

Data Architecture

Map data sources, schemas, quality levels, volumes, dependencies, and data flows. Classify data by sensitivity tier. Data migration overruns budget 64% of the time — poor data architecture discovery is usually why.

03Medium Risk

Infrastructure & Technology

Inventory servers, storage, networking, cloud readiness, virtualization maturity, and container infrastructure. For 50+ servers, use automated discovery tools: Azure Migrate, AWS Migration Hub, or Faddom.

04High Risk if Skipped

Security & Compliance

Identify security protocol gaps and regulatory requirements (HIPAA, GDPR, PCI-DSS, SOX) before they surface as blockers mid-migration. Security architecture gaps show up in 79% of failed cloud migrations.

05High Risk if Skipped

Integration Patterns & APIs

Map the full API landscape: messaging patterns, service-to-service communication, third-party dependencies, and cloud-native protocol compatibility. Undocumented integrations are among the most expensive migration surprises.

06Medium Risk

Business Process Architecture

Identify core processes, distinguish differentiating from non-differentiating processes, and assess automation level and process maturity. Find processes embedded in legacy code that can't simply be rehosted.

07Medium Risk

Organizational Readiness

Assess team skills gaps (70% of IT decision-makers report a skills gap), DevOps maturity, change management readiness, and governance structures. Technical readiness without organizational readiness still produces failure.

08High Risk if Skipped

Performance & Operations

Capture CPU, memory, and disk I/O baselines over 30+ days. Document peak concurrency, SLAs, and existing monitoring capabilities. Fewer than 30 days of baseline data is statistically unreliable for cloud sizing.

09Lower Risk

Business Capability Mapping

Establish traceability from strategy to technology. Map value streams to application portfolios. This is what allows a defensible conversation with your board about sequencing decisions.

10Medium Risk

Cost & Financial Analysis

Conduct full TCO analysis, including licensing costs, redundant spend, and ROI potential. IDC research shows 20–30% of applications in many organizations are redundant — representing immediate cost savings.

Applying the 7 R's: How to Classify Every Application

Apply the 7 R's framework to every application in your portfolio. Typical distribution: Rehost 40%, Replatform 30%, Retire 15%, Repurchase 10%, Retain 5%.

ClassificationWhat It MeansTypical Use CaseWatch Out
RehostLift-and-shift to cloud with no code changesLow-complexity apps; fast timelines40% higher ongoing cloud costs if overused
RelocateMove to cloud without OS/runtime changesVMware workloads moving to cloud VMware
ReplatformMinor optimizations; no core architecture changeManaged DB, containerization
RefactorRe-architect to be cloud-nativeHigh-value apps with long runway3x slower than rehost
RepurchaseReplace with SaaS equivalentCommodity functions (HR, CRM)
RetireDecommissionRedundant, unused, or obsolete apps
RetainKeep on-premises for nowCompliance, latency, or dependency constraints
⚠ Important Caveat on Rehost

Lift-and-shift completes 3x faster than refactor, but results in 40% higher ongoing cloud costs. If Rehost is your default classification rather than a deliberate choice, your architecture assessment has a sequencing problem.

Red Flags That Signal Migration Unreadiness

If several of these apply to your organization, treat them as blockers — not risks to monitor.

Undocumented dependencies
47% of migration delays trace back to legacy application dependencies not identified during assessment.
No performance baseline
Without 30+ day CPU/memory/IOPS data, you cannot right-size cloud infrastructure. You are guessing at one of the largest cost drivers.
Mandated deadlines without planning
Arbitrary deadlines are among the most reliable predictors of failed migrations. Pressure to meet a date produces exactly the shortcuts that create expensive problems.
Skills gaps unaddressed
Non-cloud talent accounts for ~65% of staff in most organizations. Treating migration as purely technical without workforce readiness creates gaps that surface in production.
No FinOps practices in place
82% of cloud customers cite managing cloud spending as their main challenge. Migrating without cost governance is how you generate a cloud bill larger than your on-premises equivalent.
Lift-and-shift as default
Applied uniformly rather than selectively, this is the most reliable way to generate a cloud bill that shocks your finance team six months post-migration.

What an Assessment Costs — and the ROI Math

Assessment fees are consistently a fraction of migration budgets. The ROI case is nearly irrefutable: a 23% overrun on a $2M migration equals $460,000 in excess costs — exceeding a comprehensive assessment fee on a single prevented overrun.

Engagement TypeCost RangeDuration
Quick assessment / EA QuickScan$19,000–$25,0001–2 weeks
Focused review (single domain)$38,000–$75,0002–4 weeks
Comprehensive EA assessment (mid-market)$50,000–$200,0004–12 weeks
Enterprise-wide deep assessment$150,000–$500,000+3–6 months
EA Center of Excellence setup$6,500–$13,000/month3–6 months
1–5%
Assessment as % of migration budget
23%
Average overrun prevented
28%
Faster migration with pilot first
$430K
Average first-year savings from cost optimization

How to Decide in the Next 30 Days

If your situation is...
No prior architecture documentation exists
Do this
Start with an EA QuickScan ($19K–$25K) to establish a baseline before committing to anything larger
If your situation is...
Actively planning a cloud migration in the next 12 months
Do this
Commission a comprehensive EA assessment (4–12 weeks). Run a pilot migration of 5–10% of workloads first.
If your situation is...
Mid-migration and encountering unexpected costs or delays
Do this
Stop. Conduct emergency dependency and performance mapping before continuing. Rollbacks are expensive — proceeding blind is more expensive.
If your situation is...
Evaluating SAP or ERP modernization
Do this
Budget for a full assessment with specific focus on data quality, integration patterns, and process architecture before any vendor contract is signed.
If your situation is...
Post-merger integration in scope
Do this
Add M&A technical due diligence alongside EA assessment. Post-merger tech debt compounds quickly.

Key Takeaways

1. The assessment gap is the most actionable finding in migration research. Organizations with formal readiness assessments achieve 2.4x higher success rates, yet the majority skip or shortchange this step — directly contributing to the 70% transformation failure rate.

2. The cost asymmetry is stark. Assessments run 1–5% of migration budgets and prevent overruns averaging 23%. The ROI case is nearly irrefutable.

3. Undocumented dependencies are your highest-probability risk. 47% of migration delays trace back to legacy application dependencies not identified during assessment. Dependency mapping is not optional.

4. Lift-and-shift is a choice, not a default. Applied selectively, it's 3x faster to execute. Applied uniformly, it produces 40% higher ongoing cloud costs. The 7 R's classification forces this to be a deliberate decision.

5. Technical debt is a business performance variable, not just a maintenance cost. McKinsey's analysis shows companies in the 80th percentile for low technical debt achieve 20% higher revenue growth. The conversation with your board should be framed accordingly.

Powered by Sphere

Get an Architecture Assessment

Sphere's architecture team will evaluate your technology landscape, map dependencies, and produce a sequenced migration roadmap with risk register and TCO analysis — completing most mid-market assessments in 4–8 weeks.

Frequently Asked Questions

How do you do an enterprise architecture assessment?
Start by scoping the 10 domains: application portfolio, data architecture, infrastructure, security, integrations, business processes, organizational readiness, performance baselines, business capability mapping, and cost/TCO. Run automated discovery tools for infrastructure inventory, conduct stakeholder interviews for organizational readiness, and apply the 7 R's framework to every application in scope. Most mid-market assessments run 4–12 weeks; large enterprise assessments run 3–6 months.
What is included in an architecture audit before migration?
A complete audit covers application inventory and lifecycle classification, data quality and dependency mapping, infrastructure and cloud readiness evaluation, security and compliance gap analysis, integration pattern documentation, performance baseline capture (30+ days of CPU/memory/IOPS data), organizational readiness assessment, and full TCO analysis. Most organizations discover at least one category they've underdocumented — integrations and data quality are the most common gaps.
What should an architecture assessment checklist include before migration?
At minimum: (1) complete application inventory with 7R classification, (2) 30+ day performance baselines for all in-scope systems, (3) full dependency map including undocumented integrations, (4) data quality assessment with accuracy rates documented, (5) security and compliance gap analysis, (6) skills inventory and organizational readiness score, (7) TCO and redundancy analysis, and (8) a sequenced migration roadmap with risk register. If your checklist doesn't include items 2, 3, and 4, you're assessing for comfort, not readiness.
How do you evaluate enterprise architecture health?
Score your architecture across five dimensions: strategic alignment, technical debt level, integration complexity, security posture, and operational maturity. The TOGAF Architecture Maturity Model (April 2025) assesses 10 key domains across 5 maturity levels and provides a useful scoring structure. Anything below Level 3 (Defined) across more than two domains is a migration risk.
When do you need an architecture assessment?
Before any migration initiative involving more than 20 applications, before signing a cloud provider or ERP vendor contract, when cost overruns in existing systems exceed 15% annually, post-merger when two technology stacks need to be rationalized, or when more than 60–70% of your IT budget is consumed by maintenance with limited visibility into why.
How much does an enterprise architecture assessment cost?
Quick assessments run $19,000–$25,000 for 1–2 weeks of focused work. Comprehensive mid-market assessments run $50,000–$200,000 over 4–12 weeks. Large enterprise engagements run $150,000–$500,000+ over 3–6 months. Regulated industries (financial services, healthcare, government) typically add 20–40% to baseline costs. As a rule of thumb, budget 1–5% of your total migration budget for the assessment.
What are the risks of skipping an architecture assessment?
The documented risks are severe: 38% of migrations exceed budget by an average of 23%; 47% of migration delays trace to undocumented dependencies; 18% of projects require partial rollback; and 17% of large IT projects ($15M+) produce cost overruns of 200–400%. Skipping the assessment doesn't eliminate the risk — it moves discovery from the design phase (cheap to fix) to the production phase (expensive to fix, sometimes catastrophically so).
SR
Sphere Research Team
Architecture Practice — Sphere

The Sphere Research Team is the editorial and research arm of Sphere's CTO Accelerator. Our analysis draws on 20+ years of enterprise delivery across AI, cloud, data, and modernization — spanning 230+ projects in financial services, healthcare, insurance, manufacturing, and private equity. Every framework, benchmark, and cost range published here is grounded in real project data and reviewed by Sphere's senior engineering leadership.