NEW TECHNOLOGY REVIEW CHECKLIST

Should your business adopt this technology?

Review business value, security, privacy, integration, cost, vendor risk, resilience and implementation before introducing a new platform.

Business value
Security
Data
Integration
Risk
0 of 34 answered0%
1
Business Value

Is the business problem this technology will solve clearly defined?

The decision should begin with a genuine business need rather than a product feature or current technology trend.

2
Business Value

Are the expected business outcomes clearly documented?

Examples may include reducing administration, improving customer response times, reducing risk or improving reporting.

3
Business Value

Have measurable success criteria been defined?

The business should know how it will measure adoption, time saved, cost, quality, risk reduction or customer outcomes.

4
Ownership

Is a business owner clearly responsible for the technology and its outcomes?

A nominated owner should remain accountable for business value, user adoption, approvals and ongoing decisions.

5
Ownership

Is someone responsible for technical administration and support?

The business should know who will manage users, access, integrations, configuration, updates and vendor support.

6
Ownership

Have affected employees and stakeholders been consulted?

People who use or depend on the process should be involved before the technology is selected.

7
Security

Has the technology completed a cybersecurity review?

The review should consider account security, authentication, access controls, encryption, logging and known risks.

8
Security

Does the technology support multi-factor authentication?

Important business platforms should support MFA for standard users and administrators.

9
Security

Does the technology support role-based access and least privilege?

Users should receive only the access required for their responsibilities.

10
Security

Does the technology provide useful audit logs and security alerts?

The business should be able to review sign-ins, administrative changes, data access and suspicious activity.

11
Data & Privacy

Is it clear what business, customer and employee data the technology will collect?

The business should understand every type of information stored, processed or transferred by the platform.

12
Data & Privacy

Is the location of stored and processed data understood?

The business should understand where data is hosted, backed up and processed, including any overseas locations.

13
Data & Privacy

Have privacy and data-handling risks been reviewed?

The business should assess whether the technology's collection, use, retention and sharing of information is appropriate.

14
Data & Privacy

Do the contract and platform terms clearly explain who owns the business data?

The organisation should retain appropriate rights to access, export and control its information.

15
Data & Privacy

Are data-retention and deletion settings available and understood?

The business should know how long information is retained and whether deleted data is removed from backups and related systems.

16
Integration

Have all required system integrations been identified?

The business should understand which applications, databases, email platforms and workflows must connect to the technology.

17
Integration

Are integration credentials, API keys and service accounts managed securely?

Credentials should not be stored in spreadsheets, source code or personal accounts.

18
Integration

Has the impact of integration failures been considered?

The business should understand what happens when connected systems are unavailable, delayed or return incorrect information.

19
Technology Fit

Has the technology been compared with systems already used by the business?

The business may already own tools that provide similar capabilities or can be configured to meet the requirement.

20
Technology Fit

Is the technology compatible with current devices, browsers, networks and cloud platforms?

Compatibility should be confirmed before licences are purchased or implementation begins.

21
Technology Fit

Can the technology support the expected number of users, data volume and future growth?

The platform should remain usable and affordable as the organisation expands.

22
Cost

Has the full cost of the technology been calculated?

Include licences, implementation, integrations, training, support, data migration, consulting and ongoing administration.

23
Cost

Is it clear how pricing changes as users, storage, features or usage increase?

Low initial pricing may increase significantly when the business grows or requires advanced capabilities.

24
Cost

Have contract length, renewal, cancellation and price-change terms been reviewed?

The business should understand its commitments before signing or accepting online terms.

25
Vendor

Has the vendor's stability and reputation been reviewed?

Consider the vendor's history, customer support, security record, financial stability and service availability.

26
Vendor

Is the vendor support model suitable for the business?

The business should understand support hours, response channels, escalation, service levels and any additional support cost.

27
Vendor

Has the vendor provided security, privacy and compliance documentation?

Useful evidence may include security policies, independent reports, certifications, incident processes and data-handling information.

28
Resilience

Has the impact of the technology becoming unavailable been assessed?

The business should understand which operations would stop and how staff would continue working during an outage.

29
Resilience

Can important business data be independently backed up or exported?

The business should not depend entirely on one vendor without a practical method to recover or export important information.

30
Resilience

Is there a clear exit and migration plan if the technology is replaced?

The business should understand how users, data, documents, integrations and records can be moved to another platform.

31
Implementation

Will the technology be tested through a controlled pilot before full deployment?

A pilot helps confirm suitability, identify issues and collect user feedback before wider implementation.

32
Implementation

Is employee training included in the implementation plan?

Users should understand how to use the system, protect information and report problems.

33
Implementation

Is there a clear plan for communication, adoption and process change?

Technology often fails when employees are not prepared for changes to their daily work.

34
Implementation

Will the technology be reviewed after implementation?

The business should confirm whether expected outcomes were achieved and identify security, cost, adoption or support issues.

Please answer all questions to calculate your technology-review score.