Certified Technical Consultant study materials
Certified Technical Consultant study resources

Certified Technical Consultant key terms

Certified Technical Consultant · Get comfortable with the vocabulary.

Statement of Work (SOW)

A formal contract annex that fixes the engagement's scope, deliverables, milestones, acceptance criteria, assumptions, and change process, giving both parties a shared, enforceable baseline for what will and will not be delivered.

Related: Change Request, Scope Creep, Acceptance Criteria
Scope Creep

The gradual, often unrecorded expansion of work beyond the agreed baseline, usually arriving as small client favors; left unchecked it erodes margin, delays milestones, and blurs accountability for delivery.

Related: Statement of Work (SOW), Change Request, Assumption Log
Change Request

A documented, evaluated proposal to alter scope, schedule, cost, or design after baseline approval; it captures impact, requires formal sign-off, and prevents informal verbal changes from becoming unmanaged commitments.

Related: Statement of Work (SOW), Scope Creep, Change Control Board
Change Control Board

A designated group of client and consultant representatives empowered to review, approve, defer, or reject change requests, ensuring decisions are made consistently and with visibility into cost, risk, and schedule impact.

Related: Change Request, Risk Register
Risk Register

A living log of identified engagement risks, each with likelihood, impact, owner, mitigation plan, and status; it is reviewed at every governance meeting so threats are managed proactively rather than discovered at delivery.

Related: Change Control Board, Assumption Log, Escalation Path
Assumption Log

A record of conditions believed true for planning purposes, such as data availability or platform version; each entry is validated early, because an invalidated assumption typically becomes a change request or a delivery risk.

Related: Risk Register, Statement of Work (SOW)
Escalation Path

The pre-agreed chain of contacts and timeframes for raising unresolved issues above the working team, ensuring blockers reach decision-makers quickly without damaging the day-to-day client relationship.

Related: Risk Register, Governance Cadence
Governance Cadence

The scheduled rhythm of steering, status, and review meetings with defined attendees, inputs, and decisions, keeping sponsors informed and giving the engagement a predictable forum for resolving cross-team issues.

Related: Escalation Path, Status Report
Status Report

A recurring written summary of progress against plan, completed and upcoming work, open issues, risks, and decisions needed, written so a sponsor can grasp engagement health in a few minutes.

Related: Governance Cadence, RAG Status
RAG Status

A red, amber, or green rating summarizing the health of a workstream or engagement against schedule, budget, and quality, used to focus sponsor attention where intervention is most needed.

Related: Status Report
Requirements Traceability Matrix

A table linking each requirement to its source, design component, build item, and test case, proving coverage in both directions and exposing requirements that are either unimplemented or untested.

Related: Functional Requirement, User Acceptance Testing (UAT), Acceptance Criteria
Functional Requirement

A statement of what the solution must do, describing behavior, inputs, outputs, and rules in terms a business stakeholder can validate and a developer can build against.

Related: Non-Functional Requirement, Requirements Traceability Matrix
Non-Functional Requirement

A constraint on how the solution performs, covering qualities such as response time, availability, scalability, security, accessibility, and auditability; these often drive architecture more than functional features do.

Related: Functional Requirement, Service Level Agreement (SLA)
User Story

A short, role-oriented description of desired value, typically written as who wants what and why, with acceptance criteria attached; it supports iterative delivery and conversation over exhaustive upfront specification.

Related: Acceptance Criteria, Requirements Workshop
Acceptance Criteria

The specific, testable conditions a deliverable must satisfy to be accepted by the client, agreed before build begins so that sign-off is objective rather than a matter of opinion.

Related: User Story, User Acceptance Testing (UAT), Statement of Work (SOW)
Requirements Workshop

A facilitated session that gathers stakeholders to elicit, clarify, and prioritize needs in one room, resolving conflicts live and producing validated inputs faster than serial interviews.

Related: Stakeholder Map, User Story, MoSCoW Prioritization
Stakeholder Map

A visual analysis of everyone affected by or influencing the solution, plotting interest against influence so engagement effort and communication are directed appropriately.

Related: Requirements Workshop, Governance Cadence
MoSCoW Prioritization

A ranking scheme dividing requirements into must-have, should-have, could-have, and will-not-have categories, giving the client a structured way to trade scope against time and budget.

Related: Requirements Workshop, Scope Creep
Gap Analysis

A structured comparison of current-state capabilities against target-state requirements, identifying what must be built, configured, integrated, or retired to close the distance between them.

Related: Fit-Gap Analysis, As-Is Process
As-Is Process

A documented model of how work is performed today, including exceptions and manual workarounds, serving as the baseline against which redesign and solution fit are judged.

Related: To-Be Process, Gap Analysis
To-Be Process

The designed future-state workflow showing how work will flow once the solution is live, used to validate design decisions, plan training, and prepare users for changed roles.

Related: As-Is Process, Fit-Gap Analysis
Fit-Gap Analysis

A systematic comparison of requirements against standard product capability, classifying each as fit, partial fit, or gap; results determine what is configured, customized, or handled by process change.

Related: Gap Analysis, Configuration vs Customization, To-Be Process
Solution Architecture Document

The authoritative design record describing components, data flows, interfaces, environments, security controls, and key decisions with rationale, used to guide build and support future maintenance.

Related: Integration Pattern, Architecture Decision Record, Non-Functional Requirement
Integration Pattern

A reusable approach to connecting systems, such as point-to-point calls, message queues, or event-driven publish-subscribe, chosen based on coupling, latency, volume, and reliability needs.

Related: API Contract, Middleware, Idempotency
API Contract

The agreed specification of an interface, covering endpoints, request and response schemas, authentication, error codes, and versioning, so independently built systems can integrate without surprises.

Related: Integration Pattern, Idempotency
Idempotency

A property whereby repeating the same operation produces the same result, essential in retried or duplicated integration messages so that records are not created or charged twice.

Related: API Contract, Integration Pattern
Middleware

Software sitting between applications that handles messaging, transformation, routing, or queuing, reducing direct dependencies between systems and centralizing cross-cutting integration concerns.

Related: Integration Pattern, Single Sign-On (SSO)
Single Sign-On (SSO)

An authentication arrangement letting users access multiple systems with one identity provider login, typically via standards such as SAML or OIDC, simplifying access control and offboarding.

Related: Role-Based Access Control (RBAC), Middleware
Role-Based Access Control (RBAC)

An authorization model granting permissions through assigned roles rather than to individuals, making access auditable, consistent, and easier to maintain as staff join, move, or leave.

Related: Single Sign-On (SSO), Least Privilege
Least Privilege

The security principle of granting each user or service only the access needed for its task, limiting blast radius from error or compromise and satisfying common audit and compliance expectations.

Related: Role-Based Access Control (RBAC), Data Residency
Data Residency

The requirement that data be stored and processed within specified geographic or jurisdictional boundaries, affecting cloud region choice, vendor selection, and backup design.

Related: Least Privilege, Data Protection Impact Assessment
Configuration vs Customization

The distinction between changing solution behavior through supported settings and extending it with custom code; configuration is cheaper to maintain and upgrade, while customization buys capability at long-term support cost.

Related: Fit-Gap Analysis, Sandbox Environment, Technical Debt
Sandbox Environment

An isolated copy of the solution used for building, configuring, and testing changes without affecting live users or data, forming the first stage of a promotion path toward production.

Related: Configuration vs Customization, Deployment Pipeline, User Acceptance Testing (UAT)
Data Migration

The controlled extraction, cleansing, transformation, and loading of legacy data into the new solution, including reconciliation and sign-off that records are complete and accurate.

Related: Cutover Plan, Test Data Management
Deployment Pipeline

The automated sequence that builds, tests, and promotes changes through environments to production, making releases repeatable, auditable, and less dependent on individual manual steps.

Related: Sandbox Environment, Cutover Plan, Regression Testing
Test Plan

A document defining test scope, approach, environments, data, roles, entry and exit criteria, and schedule, giving the client visibility into how quality will be proven before go-live.

Related: Regression Testing, User Acceptance Testing (UAT), Test Data Management
Regression Testing

Re-running existing tests after a change to confirm previously working functionality still behaves correctly, guarding against side effects that new configuration or code can introduce.

Related: Test Plan, Deployment Pipeline
User Acceptance Testing (UAT)

Business-led validation that the solution meets agreed acceptance criteria in realistic conditions; formal sign-off here authorizes go-live and shifts responsibility to the client.

Related: Acceptance Criteria, Test Plan, Go-Live Readiness Review
Test Data Management

The practice of provisioning realistic, privacy-safe data for testing, including masking or synthesizing personal information so that tests are valid without exposing regulated records.

Related: Data Migration, Test Plan
Cutover Plan

A sequenced, timed checklist of activities for moving from the old state to the new solution, including data loads, freezes, validation, communications, and rollback triggers.

Related: Go-Live Readiness Review, Data Migration, Hypercare
Go-Live Readiness Review

A formal checkpoint confirming that testing, training, data, support, and rollback arrangements are complete before production release, with named owners accountable for each criterion.

Related: Cutover Plan, User Acceptance Testing (UAT), Hypercare
Hypercare

A defined post-go-live period of intensified support with elevated response targets, daily triage, and rapid fixes, bridging the gap until normal service management takes over.

Related: Cutover Plan, Service Level Agreement (SLA), Knowledge Transfer
Knowledge Transfer

The structured handover of solution understanding, documentation, and operational know-how to client staff or support teams, planned from the start so the client can operate independently.

Related: Runbook, Hypercare, Training Needs Analysis
Runbook

A step-by-step operational guide for routine tasks, monitoring checks, and known failure recovery, enabling consistent support by people who did not build the solution.

Related: Knowledge Transfer, Service Level Agreement (SLA)
Training Needs Analysis

A structured assessment of which user groups need which skills, at what depth and format, so training effort targets real competency gaps rather than repeating what users already know.

Related: Knowledge Transfer, Role-Based Access Control (RBAC)
Service Level Agreement (SLA)

A documented commitment on measurable service levels such as availability, response time, or incident response, defining targets, measurement method, and remedies for shortfall.

Related: Runbook, Hypercare, Non-Functional Requirement
Technical Debt

The accumulated future cost of expedient design or code choices, such as workarounds and unsupported customizations, which slows future change and should be logged and consciously accepted.

Related: Configuration vs Customization, Solution Architecture Document
Architecture Decision Record

A short, dated note capturing a significant design decision, the context, alternatives considered, and consequences, preserving rationale that would otherwise be lost as team members change.

Related: Solution Architecture Document, Technical Debt
Conflict of Interest

A situation where personal, financial, or other interests could improperly influence professional judgment; it must be disclosed promptly and managed, often by recusal or independent review.

Related: Confidentiality, Professional Code of Conduct
Confidentiality

The obligation to protect client information from unauthorized disclosure during and after an engagement, covering data handling, access limits, and return or destruction at close-out.

Related: Data Protection Impact Assessment, Conflict of Interest
Data Protection Impact Assessment

A structured review of how a solution handles personal data, identifying lawful basis, risks, retention, and safeguards before processing begins, often required by privacy regulation.

Related: Confidentiality, Data Residency
Professional Code of Conduct

The ethical standards expected of a consultant, including competence, honesty in reporting, integrity of recommendations, and respect for client autonomy and applicable law.

Related: Conflict of Interest, Confidentiality