4.2 Business Capabilities, Capability Mapping, and Assessment

Key Takeaways

  • TOGAF defines a Business Capability as a particular ability that a business may possess or exchange to achieve a particular purpose: it describes what the enterprise does, not how or by whom.

  • Capabilities are named with nouns or noun phrases (e.g., Policy Administration, Customer Relationship Management, Payment Settlement), deliberately avoiding organizational department names.

  • Capability maps are organized hierarchically across levels (Level 1 broad domains, Level 2 operational capabilities, Level 3 granular building blocks) and stratified into Strategic, Core, and Supporting tiers.

  • Capability assessment evaluates each capability across four fundamental dimensions—People, Process, Technology, and Information—scoring maturity, business value, risk, and performance gaps.

  • Capability Heat Mapping visualizes assessment results through color-coded matrices (e.g., red for high gap/critical priority, yellow for moderate, green for satisfactory), directing strategic investment to areas of highest architectural leverage.

Last updated: October 2026

4.2 Business Capabilities, Capability Mapping, and Assessment

In modern enterprise architecture practice, the Business Capability is the central building block of Business Architecture. As articulated in the TOGAF Series Guide: Business Capabilities, business capability mapping bridges executive strategy and technological execution. By abstracting enterprise abilities away from organizational politics and technical implementation details, business capabilities provide an enduring architectural foundation that withstands corporate reorganizations, mergers, and technology refresh cycles.


Understanding Business Capabilities: The Anchor of Architecture

The TOGAF Enterprise Metamodel defines a Business Capability as a particular ability that a business may possess or exchange to achieve a particular purpose. It defines the general term Capability as an ability that an organization, person, or system possesses. Capabilities represent the fundamental capacities an enterprise requires to deliver value to its customers, partners, and internal stakeholders.

The defining characteristic of a business capability is its long-term stability:

  • Corporate leadership and organizational charts change frequently (often annually).
  • Software applications, databases, and programming languages are upgraded or replaced every three to seven years.
  • Infrastructure platforms transition from on-premises mainframes to virtual machines, private clouds, and public cloud containers.
  • Yet, an international commercial airline's capability to Manage Flight Reservations or an insurance company's capability to Adjudicate Claims remains fundamentally unchanged over decades.

Because capabilities evolve slowly, they serve as the ideal baseline against which enterprise architects align IT investments, evaluate strategic gaps, and plan multi-year digital transformations.


The "What" versus "How" and "Who" Architectural Separation

A critical distinction tested on the OGEA-103 examination is the boundary between capabilities, processes, organizations, and technologies:

  • Capability = What: Defines what the enterprise does to create value (e.g., Fraud Detection). It describes an intrinsic capacity or ability, completely independent of how that ability is currently executed.
  • Process = How: Defines how the capability is delivered through orchestrated, sequential tasks, decision gateways, and workflow handoffs (e.g., Automated Transaction Screening Procedure via Rule Engine).
  • Organization = Who: Defines who is accountable for or executes the capability (e.g., Financial Crimes Investigation Unit). Organizational structures can be reorganized without altering the underlying capability.
  • Application / Technology = With What: Defines the technological systems and tools that automate and support the capability (e.g., Machine Learning Anomaly Detection Microservice).

Conflating these concepts is an architectural anti-pattern. If an architect models "Billing Department" or "SAP Ledger System" as a business capability, the capability map will immediately degrade upon the next corporate restructuring or software migration.


Capability Naming Conventions and Common Anti-Patterns

The TOGAF Series Guide: Business Capabilities recommends naming conventions that keep capabilities stable and distinct from organization units, systems, and processes:

  1. Standard Syntax: Capabilities must be expressed as a Noun or a Noun followed by a qualifying Verb/Gerund or Noun Phrase.
    • Valid Examples: "Customer Account Management," "Risk Underwriting," "Product Engineering," "Inventory Optimization," "Regulatory Compliance Reporting."
  2. Avoid Departmental Names: Never name a capability after an organizational silo (e.g., "Human Resources Department," "Marketing Team").
  3. Avoid Software Product Names: Never name a capability after an IT asset or vendor product (e.g., "Salesforce Platform," "Oracle Financials").
  4. Avoid Process Action Sentences: Never name a capability as a procedural command or process step (e.g., "Send Invoices to Clients," "Review Daily Log Files").

Structuring the Capability Hierarchy: Levels and Stratification

To manage complexity across large corporations, business capabilities are structured into hierarchical decompositions and functional stratifications.

Hierarchical Decomposition (Levels)

Capability mapping decomposes capabilities from broad enterprise domains down to fine-grained building blocks:

  • Level 1 (Top-Level Domains): Broad functional categories that collectively define the total scope of the enterprise. A Level 1 map is usually a small set of broad capabilities (e.g., Customer Relationship Management, Financial Resource Management, Supply Chain Management).
  • Level 2 (Operational Capabilities): Distinct, self-contained business capabilities nested under each Level 1 domain. Level 2 capabilities provide the primary level of granularity for enterprise portfolio management, investment allocation, and architectural gap analysis (e.g., under Customer Relationship Management: Customer Acquisition, Customer Service Delivery, Loyalty Program Administration).
  • Level 3 (Execution Building Blocks): Granular capabilities providing specialized support to Level 2 capabilities (e.g., under Customer Acquisition: Lead Scoring, Identity Verification, Know-Your-Customer [KYC] Screening).

Stratification Tiers (The Three Bands)

To ensure balanced coverage, capability maps are stratified into three distinct horizontal categories:

Stratification TierStrategic PurposeCore Enterprise CharacteristicsTypical Examples
Strategic CapabilitiesDirection & OversightFocus on long-range vision, executive governance, capital allocation, and market positioning.Strategic Planning, Enterprise Architecture, Corporate Brand Management, Mergers & Acquisitions.
Core CapabilitiesValue Creation & DeliveryDirectly deliver products, services, and experiences to external customers; represent the primary competitive advantage of the firm.Product Design, Loan Origination, Manufacturing Operations, Retail Order Fulfillment.
Supporting CapabilitiesEnterprise EnablementProvide essential shared services and infrastructure that enable Core and Strategic capabilities to function smoothly.Human Capital Management, Legal Counsel, Corporate Procurement, IT Infrastructure Operations.

Multi-Dimensional Capability Assessment: People, Process, Technology, and Information

A business capability is not merely an abstract box on a slide; it is realized in practice through the orchestration of four interdependent enterprise dimensions:

  1. People: The personnel, leadership, organizational culture, professional skillsets, competencies, and talent pipelines required to execute the capability.
  2. Process: The documented business processes, operational policies, control frameworks, and standard operating procedures that govern how work is performed.
  3. Technology: The business applications, software tools, integration infrastructure, and physical hardware that automate and support the capability.
  4. Information: The underlying data entities, knowledge assets, analytics models, and data governance standards utilized and generated by the capability.

When assessing a capability's health, architects evaluate all four dimensions simultaneously. A common failure in digital transformation occurs when an enterprise invests $50M in modern Technology (cloud software) while ignoring People (lack of skilled engineers) and Information (fragmented, inaccurate legacy data), leaving overall capability maturity unchanged.


Capability Heat Mapping: Visualizing Gaps to Guide Investment

Once the capability hierarchy is established and assessed across the four dimensions, architects conduct Capability Heat Mapping. Heat mapping applies color-coded visual overlays to the capability map to convey complex analytical findings to executive stakeholders:

  • Heat Mapping Criteria:
    • Maturity Gap: Comparing Current Maturity (e.g., Level 1 Ad-Hoc) against Target Maturity (e.g., Level 4 Quantitatively Managed).
    • Strategic Importance: Differentiating between core competitive differentiators (High Importance) and commodity back-office capabilities (Low Importance).
    • Operational Risk / Technical Debt: Identifying capabilities vulnerable to cyber threats, single points of failure, or severe regulatory non-compliance.
    • Business Value Potential: Estimating the return on investment (ROI) derived from capability uplift.

Color-Coding Semantics

  • Red (Critical Investment Priority): High strategic importance combined with severe capability deficiencies (low maturity, fragile technology, or poor data quality). Red capabilities receive top priority in candidate roadmap components.
  • Yellow / Amber (Moderate Attention): Moderate gaps or capabilities undergoing controlled evolution.
  • Green (Healthy / Differentiating): Operating effectively at target maturity with robust technical and process enablement.
  • Blue / Gray (Commodity / Candidate for Outsourcing): Low strategic differentiation and acceptable performance; prime candidates for commercial SaaS adoption or third-party business process outsourcing (BPO).

Enterprise Case Scenario: Retail Banking Modernization

Consider an international retail bank executing a digital modernization program. The enterprise architect models the Level 2 capability Commercial Loan Underwriting under the Level 1 domain Credit Operations:

  • Strategic Context: Executive leadership mandates reducing commercial loan approval times from 14 days to under 4 hours to defend market share against agile fintech lenders.
  • Capability Assessment Findings:
    • People Dimension (Maturity: High): Highly experienced senior credit analysts with deep risk assessment expertise.
    • Process Dimension (Maturity: Medium): Rigorous underwriting guidelines, but laden with manual document handoffs and paper signing steps.
    • Technology Dimension (Maturity: Low): Core underwriting calculations executed in disconnected desktop spreadsheets and legacy 3270 terminal green-screen applications.
    • Information Dimension (Maturity: Low): Applicant credit histories manually re-keyed from PDF attachments; absence of automated API connections to corporate credit bureaus.
  • Architectural Diagnosis & Heat Map Result: The capability is designated RED (Critical Gap). Despite outstanding human capital, technological obsolescence and manual information flows create a catastrophic operational bottleneck.
  • Downstream ADM Impact: In Phase B, the architect specifies target automated underwriting processes. In Phase C, the architect mandates RESTful credit bureau integration and unified borrower data schemas. In Phase E, this capability is packaged into a high-priority work package named "Automated Credit Decisioning Engine."

Practitioner Exam Traps and Level-of-Detail Pitfalls

  • The Granularity Explosion: Decomposing capability maps down to Level 5 or 6 during Phase B. Decomposing beyond Level 3 in enterprise-wide architecture creates unwieldy, unmaintainable models that confuse stakeholders. Fine-grained functional decomposition belongs in detailed solution design.
  • The Technology-Centric Assessment: Evaluating capability maturity purely by inspecting server ages or software release versions. A capability supported by brand-new software can still be failing if staff lack training or if business data is corrupted.
  • Ignoring Strategic Weight: Allocating equal transformation funding to every red box on a heat map. If an operational capability is red but carries low strategic significance (e.g., Cafeteria Meal Scheduling), it should receive minimal investment compared to a red core revenue-generating capability.
Loading diagram...
Business Capability Hierarchy Stratification and Four-Dimension Assessment
Test Your Knowledge

Which of the following adheres strictly to the TOGAF standard naming conventions and conceptual definition for a Business Capability?

A

Regional Accounts Payable Department

B

SAP Enterprise Resource Planning Platform

C

Validate Daily Cash Receipts in Ledger

D

Payment Settlement and Reconciliation

Test Your Knowledge

An enterprise architect evaluates a global logistics firm's 'Fleet Maintenance Dispatch' capability. The assessment reveals that vehicle mechanics are world-class experts (People: Level 4) and safety inspection checklists are strictly codified (Process: Level 4), but mechanics record telemetry in disconnected paper logbooks (Information: Level 1) and dispatchers schedule repairs using standalone legacy desktop computers (Technology: Level 1). What conclusion should the architect draw regarding capability assessment?

A

Score the capability at an overall high maturity level, because strong people and well-codified processes fully compensate for outdated tools and records.

B

The capability has a serious multi-dimensional deficit: performance depends on balanced maturity across people, process, technology, and information.

C

Remove technology and information from the business capability assessment, because those dimensions belong only to Phases C and D.

D

Reclassify Fleet Maintenance Dispatch from a core capability to a supporting capability, so that its weaknesses no longer affect priorities.

Test Your Knowledge

When presenting a business capability heat map to executive leadership during Phase B, what does a capability highlighted in red typically signify to the enterprise architecture governance board?

A

The capability is obsolete and is scheduled for decommissioning without replacement in the next Transition Architecture.

B

The capability already operates at its target maturity, so it needs no further budget allocation in the Phase E work packages.

C

The capability is strategically important but has a serious performance, maturity, or technology gap that needs priority investment.

D

The capability has been fully outsourced to a managed service provider and is therefore outside the scope of the architecture.

Sections you finish are checked off in the contents.