Business Core · Object

Technology

The organisation’s tools and systems taken as a whole: what exists, how it connects, how each part was sourced, how it is protected, and what it will take to keep it working.

The term

What it is

Technology in the Business Core is what the organisation has to work with in systems: the applications, platforms, integrations, devices and services it runs on. Each was acquired to solve a particular problem, and the object exists because the sum of those solutions has properties none of them has alone — dependencies, overlaps, exposure and cost that only appear when the estate is looked at in one piece.

Two neighbours are easy to confuse with it. Operational Systems asks whether a given tool fits the process it serves; Technology asks what the whole collection amounts to and where it is heading. Data Core owns the data itself — its ownership, meaning, access and retention — while this object owns the systems that hold and move it.

Since general-purpose AI became widely available, the object has also had to carry AI. Models that draw on an organisation’s own documents and act inside its systems are technology decisions with unusual properties: their behaviour is probabilistic, their quality has to be measured, and regulators have begun to classify them by risk. The framework places them here, with the rest of the estate, and not as a separate strategy.

Why it earns a place

What goes wrong without it

01

The estate is designed whether or not anyone designs it

Every purchase and integration adds to an architecture. Left to accumulate, it takes the shape of past decisions made one at a time, and the cost of that shape arrives later as integration work nobody budgeted for.

02

Most technology cost arrives after the decision

Integration, support, security patching, licence growth and eventual migration outweigh the initial price in most estates. A sourcing decision judged on acquisition cost is judged on the smallest part of it.

03

Security and debt are paid for either way

Both can be deferred, and both accumulate interest while deferred. The choice is between paying on a schedule the organisation sets and paying on one set by an incident or an unsupported system.

One level in

The modules within technology

Five working areas: what the estate consists of, how each part is sourced, where AI and automation are used, how the whole is protected, and what it still owes to its own past.

  1. The technology estate

    The systems the organisation runs, the integrations between them, and the few principles that decide what may be added. Kept once, for the whole organisation, so that every other view of technology can refer to the same entries.

    Learn
  2. Build, buy or subscribe

    Deciding for each capability whether to build it, license it or rent it as a service, with the whole cost over time and the cost of leaving counted before the commitment is made.

    Learn
  3. AI and automation

    Where AI and automation are used, who stays accountable for what they do, how their quality is measured, and how each use is classified by risk. The home in the framework for AI as something the organisation adopts and operates.

    Learn
  4. Security

    Information and cyber security as a capability: knowing what is worth protecting, holding a recognised baseline of controls, managing identity and access, and being able to restore. Risk is operated here and reported into the organisation’s wider risk register.

    Learn
  5. Technical debt and renewal

    What the estate owes to earlier decisions, which of those debts are worth repaying, and how ageing systems are replaced without stopping the business while it happens.

    Learn

Across the framework

What it touches

  • Business CoreOperational Systems, under Tooling, judges whether one tool fits one process. The estate here holds the organisation-wide catalogue that assessment refers to, so the same system is not listed twice.
  • Business CoreBusiness Assets keeps the asset register, the IP position and the lifecycle dates of held assets. Security and renewal here refer to those entries and add the attacker’s and the architect’s view of them.
  • Business CoreCompliance maps which rules apply — the AI Act and NIS2 among them — and owns breach notification under incident response. Governance sets the risk appetite that security and AI risks are reported against.
  • Data CoreData Governance decides who owns which data, who may see it and how long it is kept. Technology owns the systems that enforce those decisions, and the AI register refers to them for the data each use draws on.
  • Time CoreRenewal is delivered as projects, planned and run under Project management. The roadmap here sets the sequence and the architecture; the schedule lives there.
  • Omni CorePersonalization and Customer Support are where much customer-facing AI appears. What the customer should experience is decided there; the oversight and evaluation of the underlying system are held here.

Beyond the framework

Models worth knowing here

The Omnigoal says where this belongs and what it touches. It does not tell you how to think about it — other people have done that, and done it well. These are theirs.

  1. The technology acceptance model

    Fred D. Davis · 1989

    Also known as TAM (technology acceptance)

    Whether people use a new system depends mainly on whether they think it will help them and whether they think it will be easy.

    Davis separated perceived usefulness from perceived ease of use and found usefulness to be the stronger of the two: people will put up with a difficult system that clearly helps, but not an easy one that does not. For anyone introducing technology it shifts the question from features to what the user believes the system will do for their own work.

    Reach for it when
    When a system has been implemented on time and budget and nobody is using it, and before choosing a tool on the strength of its feature list.
    Where it stops
    It predicts intention to use from a few beliefs and leaves out social pressure, habit and whether use is compulsory, which later versions tried to add. It explains adoption, not whether the technology was worth adopting.

    Fred D. Davis, “Perceived Usefulness, Perceived Ease of Use, and User Acceptance of Information Technology”, MIS Quarterly, 1989.

  2. The NIST Cybersecurity Framework

    National Institute of Standards and Technology · 2014

    Also known as NIST CSF

    A common structure for managing cyber risk, organised around what an organisation must be able to do before, during and after an incident.

    It groups security work into a few functions — identifying what needs protecting, protecting it, detecting attacks, responding and recovering — and the 2024 revision added governing as a function of its own. Its main value is as a shared map: it lets management, technical staff and suppliers describe their position and their gaps in the same terms.

    Reach for it when
    When security is discussed only in terms of tools, and when the board asks how exposed the company is and nobody can answer in business terms.
    Where it stops
    It says what to cover, not how much is enough or which controls to buy. It was written for US critical infrastructure and needs translating for a small company’s scale and risks.

    National Institute of Standards and Technology, Framework for Improving Critical Infrastructure Cybersecurity, 2014; The NIST Cybersecurity Framework 2.0, 2024.

  3. The TOGAF Standard

    The Open Group · 1995

    Also known as TOGAF, The Open Group Architecture Framework

    A method for describing how a business, its information and its technology fit together, and for changing that fit deliberately.

    At its centre is a repeating cycle for developing an enterprise architecture: understanding the business, then data and applications, then technology, then planning how to move from the current state to the target one. Its value is in making the connections explicit, so a technology decision can be traced back to a business need and forward to what it will affect.

    Reach for it when
    When systems have accumulated one project at a time and nobody can say how they fit together, and before a large change that will touch many of them at once.
    Where it stops
    It is large and generic, and adopted in full it can produce architecture documents faster than decisions. Most organisations use a small part of it, and small companies may need little of it at all.

    The Open Group, TOGAF, first version 1995; The TOGAF Standard, 10th edition, 2022. TOGAF is a registered trademark of The Open Group and is named here only to refer to its work.

  4. Wardley mapping

    Simon Wardley · 2005

    Also known as Wardley maps

    Map what a user needs, the components that serve it, and how far each component has evolved from novel to commodity.

    Components are placed by how visible they are to the user and by how mature they are — from newly invented, through custom-built and product, to utility. The insight is that the right way to handle a component depends on where it sits: invent the novel parts, buy or rent the commodities, and expect everything to drift towards commodity over time.

    Reach for it when
    When deciding what to build, buy or outsource, and when a company is spending engineering effort on something the market already sells as a utility.
    Where it stops
    Placing components on the evolution axis is a judgement that different people make differently. The map is only as good as the conversation that produced it.

    Simon Wardley, Wardley Maps: Topographical Intelligence in Business, published openly under a Creative Commons licence from 2016; developed from 2005.

These are other people’s models, named here so you can go to the source and use them properly. The Omnigoal is not affiliated with their authors and is not endorsed by them; nothing of theirs is reproduced here — no canvas, no diagram, no wording. Each is described in our own words, with the originator credited, because the framework is a place to put thinking, not a replacement for the people who did it. Model names and trademarks belong to their respective owners and are used here only to refer to the work itself.

Every model in the framework, and where each one belongs

Draw the integration map before approving the next system. Most of what an estate costs to change sits in the connections between the boxes, and those are the parts nobody bought.

The other objects in the Business Core

HR

The people the organisation has, the people it needs, and how the gap between them is closed through planning, hiring, development and retention. Capability is usually the slowest constraint on a plan to move.

Learn

Value Proposition

What the organisation offers, stated in terms of what it does for someone rather than what the product is. Who the customer is comes from the Market Core; what they are offered is settled here.

Learn

Monetisation

How what is offered turns into money: what is charged for, on what basis, how often and by whom. Whatever the pricing metric rewards is what the organisation will end up producing.

Learn

Core Competencies

The few things the organisation does better than most, that customers value and competitors struggle to copy. What counts as core decides what is kept in-house and what goes to partners.

Learn

Business Assets

What the organisation owns and can put to work, from premises and equipment to intellectual property and accumulated data. The intangible assets are usually the most valuable and the least often listed.

Learn

Operational Systems

The processes and standards that let the organisation do the same work twice without deciding how each time. A process that is routinely worked around is worse than none.

Learn

Partners

The organisations the business relies on for capability it has decided not to build. The decision is the substance, and the exit terms are best agreed while the relationship is still good.

Learn

Stakeholders

Everyone with a claim on the organisation or a stake in what it does, including groups it never chose. The market asks who will buy; this object asks who has standing.

Learn

Finance

Whether the business is profitable, whether it has cash, and whether it can fund what it intends to do next — three questions that are often confused. It also covers how capital is raised, how investments are appraised, and how tax bears on both.

Learn

Supply Chain

Everything between a supplier and a customer: sourcing, moving, holding and delivering. It is where the trade-off between efficiency and resilience is made, usually without anyone deciding it.

Learn

Manufacturing Operations

Where things are actually made: capacity, flow, quality and the maintenance that keeps all three possible. A production system runs at the speed of its slowest step.

Learn

Compliance

The obligations the organisation has no choice about — legal, regulatory, financial, health and safety, and data protection — and the controls that show they are being met. Commitments made above the legal minimum are held under Responsibility in the Vision Core.

Learn

Organisation

How the organisation is structured and led: who decides what, how work is divided and coordinated, and how people take up change. HR covers the people; this object covers the arrangement they work in.

Learn

Governance

Who owns the organisation and how it is overseen: the board, enterprise risk, succession and, eventually, exit. It is where decisions about the organisation itself are taken, rather than decisions within it.

Learn

Innovation

Where new offers and new ways of working come from, how they are tested, and how the decision to scale or stop them is taken. An idea nobody is able to stop is a commitment rather than an experiment.

Learn
Back to the Business Core