Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Architecture artifactIntermediate

Architecture Decision Records

An architecture decision record captures an important design choice, its context, alternatives, rationale, consequences, and current status.

What it means

ADRs create a durable decision trail that helps future teams understand why a security boundary, identity model, cryptographic choice, or exception exists.

Why it matters

Systems outlive the people who designed them. Recorded decisions reduce repeated debate and make it easier to reassess assumptions when conditions change.

Practical focus

  • Record the problem and constraints before the chosen answer
  • List meaningful alternatives and tradeoffs
  • Link decisions to requirements, risks, and evidence
  • Supersede old records rather than rewriting history

Common mistakes

  • Documenting only the final technology name
  • Using ADRs for trivial implementation details
  • Removing rejected options and lost assumptions
  • Never revisiting decisions after major change

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

ISC2 ISSAPISC2 ISSEPISACA CGEIT

Authoritative sources