Assessment

Elicitation

Does the team understand what the work is and, through problem-solving, break it down into smaller pieces?

Elaboration

Does your team have a way of understanding the detail and how the work will be done?

Risk Management

Incorporating risk identification, analysis, response and monitoring and controls

How are your team's risk management practices?

• Risk identification and management don't occur. No risk registers. Risks are spoken to in ceremonies but not recorded. Potential problems are not spoken about as a risk. Risk management is an afterthought or 'bolted-on'.

• The team keeps a risk register. The risk register is sporadically updated. Some actions are captured to address serious/critical risks. Risks have been identified and are captured using appropriate artefacts such as Risk Story Walls, Big Visual Charts (BVC), a Risk Register, etc. Risks are identified by an appropriate group of stakeholders (i.e. not just the project manager or the team leader in isolation). Risk artefacts are 'owned' by the team, and team members have no reservations about making contributions or changes. Each identified risk has been assigned a risk m•tigation or action plan. Risk mitigations and action plans are a strategy, process or action (i.e. something that can be done). Risks are considered when implementing changes or new systems, processes, products, etc.

• Risks are visualised on a risk matrix in the team area or easily viewable. The risk matrix is reviewed and updated as part Of the DOD for the iteration. Each risk identified has an appropriate risk management approach (Mitigate, Contingency, Transfer, or Accept). Risks, issues and blockers are discussed in appropriate detail as part Of all sessions (stand-ups; iteration planning; showcases; steering committee meetings; etc.). Risk mitigations and action plans are treated like any Other activity or feature; they are represented by individual story cards, included in iteration planning and tracked and completed during the iteration. Unmitigated or uncontrolled risks are easily identifiable. Risks, controls and action plans are assigned to appropriate owners; someone who understands the risk has responsibility and accountability for managing the risk, has an interest in the risk, and has the authority to implement controls/actions. Leaders support the identification of risk and risk management activities.

Dependency Management

How are your team's dependency management practices?

• The team keeps backlog items open for multiple cycles while an external team resolves dependencies. Controls and permissions are limited to a few people. Work is tightly coupled.

• The team splits backlog items if there is an external dependency and brings it into the backlog for completion later. The team uses simulated data or interfaces to make progress. They use Scrum of Scrums to visualise and monitor dependencies.

• The team has the time and focus to earnestly start to cross-train so they can own more Of the work themselves. They start to resolve complexities in their tech stack and architecture. The team has everyone and everything they need to finish the work. They don't accept work with open dependencies. Only critical permissions and controls are restricted. Work is loosely coupled.