Accounts and ownership
List domains, hosting, cloud services, email, analytics, repositories, app stores, payment services and administrator accounts. Record the organisational owner and recovery method.
Code and configuration
Source code, licence, dependency record, build instructions, environment configuration, deployment process and a secure method for transferring secrets.
Data
Data model, import and export process, backup, restoration test, retention, deletion, processor list and location of sensitive information.
Operations
Monitoring, error tracking, uptime, scheduled jobs, renewal dates, support process, incident response and known capacity limits.
Accessibility and content
Known accessibility issues, content ownership, media licences, alt text, document standards, editorial workflow and review dates.
Acceptance
Open defects, deferred scope, security findings, performance results, user acceptance, training completed, owner sign-off and the support or warranty end date.