Technical Audit Decision Memo
Turn a technical audit into a decision someone can approve, fund, and own. Keep the main memo short enough for one leadership meeting; link detailed findings as evidence instead of pasting the audit into the memo.
Use this after an audit, not instead of one. Write for the person carrying the commercial risk. Separate verified facts from assumptions, compare “do nothing” with change, and name what evidence would reverse the recommendation. If the decision is still unclear, the missing item is usually evidence, ownership, or an agreed risk threshold.
Decision
Decision required[one sentence]
Decision owner[name]
Deadline[date]
Recommendation[approve / reject / defer / run a bounded test]
Facts
Current system and owner[system / person]
Contract or renewal exposure[amount / date]
Operational constraint[fact]
Security or compliance constraint[fact]
Evidence reviewed[code, contracts, interviews, logs]
Evidence not available[access, data, or stakeholder evidence still missing]
Confidence[high / medium / low, and why]
Assumptions to test
Assumption 1[assumption, evidence needed, owner, date]
Assumption 2[assumption, evidence needed, owner, date]
Options
| Option | 12-month cost | Delivery time | Main risk | Exit cost |
|---|---|---|---|---|
| Do nothing for now | [ ] | [ ] | [ ] | [ ] |
| Keep and correct | [ ] | [ ] | [ ] | [ ] |
| Replace | [ ] | [ ] | [ ] | [ ] |
| Build | [ ] | [ ] | [ ] | [ ] |
Recommendation
State the recommendation[and the two facts that decide it. Do not repeat the full audit.]
Funding required[first 90 days and 12-month total]
What would change this decision?[new fact, threshold, or failed assumption]
Reversibility[easy / costly / irreversible, with the last safe exit point]
90-day execution
| Phase | Owner | Exit criterion |
|---|---|---|
| Days 1–30 | [ ] | [ ] |
| Days 31–60 | [ ] | [ ] |
| Days 61–90 | [ ] | [ ] |
Risks accepted
Risk 1[risk, owner, review date]
Risk 2[risk, owner, review date]
Stop or escalation trigger[measurable threshold and person authorised to act]
Built from the decision format used in Some Tech Work technical reviews. See the technical audit scope, technical due diligence, or collect the diligence evidence before writing the memo. Also see when an audit is worth commissioning.