Skip to content

BA Playbook 08

Nobody Knows Who Owns the Requirement

When everyone is involved, ownership can quietly belong to nobody.

Surya · August 8, 2026 · 5 min read · 3 practices

Stakeholders

For Business Analysts stuck sending a requirement in circles between departments, BAs whose requirement docs say "Owner: Business" and nothing more specific, Delivery leads untangling who actually gets to approve a change and Anyone who's heard "ask the business" as an answer.

Someone asks:

“Who owns this requirement?”

Product says:

“Business owns it.”

Business says:

“The BA has been managing it.”

The BA says:

“Risk made the decision.”

Risk says:

“Operations needs to confirm it.”

Operations says:

“Compliance should decide.”

Compliance says:

“Isn’t this owned by Risk?”

Six answers later, we still don’t have an owner.

That’s the strange thing about requirements.

A requirement can have plenty of people around it and still belong to nobody.

Here’s the requirement

REQ-218 — Block trades when customer risk data is unavailable

The requirement says:

If customer risk information cannot be retrieved, the trade must not proceed.

Development starts.

Then QA asks:

“What exactly should happen?”

Should the trade:

  • Fail completely?
  • Go to Manual Review?
  • Continue and be flagged afterwards?

Good question.

So the BA asks:

Who can decide?

That’s where the real problem begins.

“Ask the business”

You’ll hear this a lot.

“Ask the business.”

Okay.

Which business?

Risk?

Operations?

Front Office?

Compliance?

Product?

“Business” is not an owner.

It’s a group of people who may want very different things.

If the answer to “who decides?” is a department name, keep asking.

The BA doesn’t automatically own it

You might have:

  • written the story
  • run the workshops
  • documented the rules
  • updated Jira
  • explained it to development
  • supported QA

That still doesn’t mean you should make the business decision.

A BA often owns the clarity of the requirement.

Not necessarily the choice behind it.

That difference matters.

REQ-218 starts travelling

We ask Risk.

Risk says:

“Operations needs to confirm the workflow.”

Operations says:

“Compliance needs to confirm whether Manual Review is acceptable.”

Compliance says:

“Risk owns the policy.”

Risk → Operations → Compliance → Risk.

Everybody is involved.

Nobody is deciding.

This is what unclear ownership often looks like.

Not silence.

Circulation.

Find ownership at the decision point

Here’s the simplest test:

If two stakeholders disagree, who makes the final call?

That question is much more useful than:

“Who is involved?”

For REQ-218, someone eventually has to choose:

Reject or Manual Review or Continue.

The person with authority to make that choice is much closer to the real owner.

Ownership becomes visible when a decision has to be made.

Three roles worth separating

A lot of confusion disappears if we stop calling everyone the “owner.”

Requirement Owner

Accountable for what the business behaviour should be.

They can approve a material change and stand behind the outcome.

Requirement Steward

Keeps the requirement clear, current and testable.

Often the BA.

The steward makes sure everyone understands the requirement, but does not automatically make the business decision.

Decision Owner

Makes a specific specialist decision. For example:

  • Risk → risk treatment
  • Compliance → regulatory interpretation
  • Operations → operational process
  • Technology → technical design

These can be different people.

That’s perfectly fine.

The problem is when nobody knows which role belongs to whom.

Infographic showing a requirement circulating from Business to BA to Risk to Operations to Compliance and back, the three roles of Requirement Owner, Requirement Steward and Decision Owner, the five-minute ownership test, and a before-and-after example of naming a requirement's owner.
Three roles worth separating — and why “Owner: Business” isn’t one of them.

Back to REQ-218

Instead of writing:

Owner: Business

we write:

Requirement owner
Head of Client Risk Controls
Requirement steward
Business Analyst
Open decision
What happens when customer risk data is unavailable?
Decision owner
Head of Client Risk Controls
Consulted
Operations, Compliance, Technology
Impact if unresolved
QA cannot validate the exception flow.

We still need the decision.

But now we know who must make it.

That alone changes the conversation.

Instead of sending the requirement around the organisation, the BA can take the question to the person who actually has authority to resolve it.

Don’t confuse expertise with ownership

The SME may know the process better than anyone.

That doesn’t automatically mean they can change it.

The SME might say:

“This is how the process works today.”

The owner needs to be able to say:

“This is how the process should work tomorrow.”

Knowledge and authority are different things.

Both matter.

But they are not the same.

The 5-minute ownership test

Pick one important requirement.

Ask:

1. Who can explain why it exists?

2. Who can approve a material change?

3. Who accepts the business outcome?

4. If stakeholders disagree, who makes the final call?

That last question is the important one.

If nobody can answer it clearly, you probably haven’t found the owner yet.

What happened to REQ-218?

The Head of Client Risk Controls finally makes the call:

If risk data is unavailable, the trade must not proceed automatically.

Instead:

Send it to Manual Review.

Now the requirement becomes much clearer.

Business Rule

A trade must not proceed automatically when required customer risk data is unavailable.

Acceptance Criterion

Given customer risk data cannot be retrieved
When pre-trade validation runs
Then automatic processing stops
And the trade enters Manual Review.

Now we know both:

what the system should do

and

who stands behind the decision.

A requirement doesn't have an owner because a name is next to it in Jira.

It has an owner when someone says “I’m accountable for that decision.”

Next time a requirement reaches a fork in the road, don't send it around the organisation again. Ask one question: who gets to choose? If nobody knows, the requirement doesn't have an owner yet.

Take this with you

Requirement Ownership Check

REQUIREMENT OWNERSHIP CHECK

Requirement:

Why does it exist?

Requirement owner:

Requirement steward:

Who approves material changes?

Who makes the final call when people disagree?

Open decision:

Decision owner:

Impact if unresolved:

Get new playbooks first.