← Agile/Scrum Suite Backlog & Board · Traceability

Requirements Traceability (Agile)

Download Word

This is a traceability view for an Agile program — and it is deliberately not a waterfall requirements traceability matrix. On MedConnect Mobile, requirements are not a fixed document to be traced against; they are a living Product Backlog of epics and user stories, verified by a shared Definition of Done, delivered sprint by sprint. This view makes that chain explicit — Vision → Epic → Story → Definition of Done → Sprint/Release — and shows every one of the 33 stories tracing cleanly through it.

6 Epics
33 User stories
22 Must-priority
218 Story points
1 Shared Definition of Done

01 Why the backlog is the traceability vehicle

A waterfall RTM exists because requirements are captured once, up front, in a document that the delivered system is later checked against — the matrix guards against the system drifting from a frozen baseline. Agile has no frozen baseline. Requirements emerge and are re-prioritised every sprint, so a static matrix would be stale the day it was signed. Bolting one onto a Scrum program would not add rigor; it would signal a misunderstanding of how the program actually works.

What Agile has instead is traceability built into the flow of work. Every requirement is a user story with a unique ID; every story rolls up to exactly one epic; every epic serves the product vision; and every story is verified against one shared Definition of Done before it can be called complete. The trace is not a document maintained alongside the work — it is the work, and it is always current because the backlog is the single source of truth the teams pull from each sprint. This view simply makes that living structure legible in one place.

Vision & Roadmap
The product outcome and release horizon. Vision & Roadmap.
Epic
A large slice of value. 6 epics, each owned by a squad.
User Story
A testable increment with a unique ID. 33 stories in the backlog.
Definition of Done
The universal acceptance gate every story passes. DoR & DoD.
Sprint / Release
Where the story is delivered and demonstrated. 8 sprints, Releases 1 & 2.

02 Vision → Epic → Story

Every epic traces up to the product vision and down to its user stories. The stories below are the complete backlog: each has a unique ID, a MoSCoW priority, a story-point estimate, and a target sprint, and each belongs to exactly one epic. There are no orphan stories and no empty epics — that closure is the first thing this view verifies.

EPIC-1

Patient Identity & Onboarding

Falcon6 stories26 pts
StoryAs a… I want… so that…PriorityPtsTarget
MCM-101As a new patient, I can create an account with email or phone verificationMust5Sprint 1
MCM-102As a patient, I can log in with biometric (Face/Touch ID) after initial setupShould3Sprint 1
MCM-103As a patient, I can link my existing ACME Health record via a secure identity matchMust8Sprint 1
MCM-104As a patient, I can set up and manage my profile (contact info, insurance, emergency contact)Must5Sprint 1
MCM-105As a patient, I can reset my password via a secure self-service flowShould3Sprint 2
MCM-106As a patient, I receive a guided first-run tutorial on first loginCould2Sprint 2
EPIC-2

Appointment Scheduling & Reminders

Falcon5 stories28 pts
StoryAs a… I want… so that…PriorityPtsTarget
MCM-110As a patient, I can search for an available appointment by provider or specialtyMust8Sprint 2
MCM-111As a patient, I can book, reschedule, or cancel a telehealth appointmentMust8Sprint 2
MCM-112As a patient, I receive a push notification reminder 24 hrs and 15 min before my visitMust5Sprint 2
MCM-113As a patient, I can add my appointment to my phone's native calendarCould2Sprint 3
MCM-114As a patient, I can complete a pre-visit intake questionnaire before my appointmentShould5Sprint 3
EPIC-3

Video Visit Experience

Both6 stories42 pts
StoryAs a… I want… so that…PriorityPtsTarget
MCM-120As a patient, I can join a video visit with one tap from my appointment cardMust8Sprint 3
MCM-121As a platform, integrate the HIPAA-compliant video SDK with call-quality fallback to audio-onlyMust13Sprint 3
MCM-122As a patient, I see a "waiting room" state with estimated wait until my provider joinsShould3Sprint 4
MCM-123As a provider, I can screen-share lab results or images during a video visitShould5Sprint 4
MCM-124As a platform, log and encrypt session metadata for HIPAA audit requirementsMust8Sprint 4
MCM-125As a patient, if my connection drops, I can rejoin the same visit within a 5-minute grace windowMust5Sprint 5
EPIC-4

Provider Console

Anchor5 stories34 pts
StoryAs a… I want… so that…PriorityPtsTarget
MCM-130As a provider, I can see my full daily schedule across all telehealth appointments in one viewMust8Sprint 3
MCM-131As a provider, I can launch a visit directly from the schedule without switching systemsMust5Sprint 4
MCM-132As a provider, I can view a patient's intake questionnaire before the visit startsShould5Sprint 4
MCM-133As a provider, my visit notes push directly into the ACME EHR without re-entryMust13Sprint 6
MCM-134As a provider, I can flag a patient case for follow-up or referral from the consoleCould3Sprint 6
EPIC-5

Patient Data Migration & Legacy Decommission

Anchor6 stories57 pts
StoryAs a… I want… so that…PriorityPtsTarget
MCM-140As a platform, build the migration pipeline and field-mapping from CareLink Classic's schemaMust13Sprint 1
MCM-141As a platform, migrate active-patient records with automated validation and a spot-check reportMust13Sprint 4
MCM-142As compliance, I can review a pre-cutover data-integrity validation report before go-liveMust5Sprint 4
MCM-143As a platform, migrate full historical records (inactive patients, visit history archive)Must13Sprint 7
MCM-144As IT operations, decommission CareLink Classic infrastructure after cutover verificationMust8Sprint 8
MCM-145As compliance, retain a read-only archival export of CareLink Classic per records-retention policyMust5Sprint 8
EPIC-6

Messaging & Prescription Refills

Both5 stories31 pts
StoryAs a… I want… so that…PriorityPtsTarget
MCM-150As a patient, I can send a secure message to my care team from the appMust8Sprint 6
MCM-151As a provider, I can respond to patient messages from the console with a templated-reply optionShould5Sprint 6
MCM-152As a patient, I can request a prescription refill from my medication listMust8Sprint 7
MCM-153As a provider, I receive refill requests routed into my existing e-prescribing workflowMust8Sprint 7
MCM-154As a patient, I get push notification status updates on my refill requestCould2Sprint 7

03 Story → Definition of Done (the acceptance gate)

In a waterfall RTM, each requirement traces to its own verification method. In Agile, every story traces to the same gate — the Definition of Done — and that is a strength, not a gap. A single, shared, enforced definition means a completed story means the same thing regardless of which squad delivered it, which sprint it landed in, or how large it was. Uniform verification is what lets two squads (Falcon and Anchor) work in parallel and still produce one coherent product.

A story is not "done" when a developer says so; it is done when it satisfies every item of the DoD:

The Definition of Ready is the upstream half of the same gate. Before a story can enter a sprint it must have a clear user-story statement, written and testable acceptance criteria, and a size estimate from the owning team. Ready governs what may start; Done governs what may be called complete. Together they are the acceptance mechanism a waterfall program spreads across a test plan and a sign-off — here it is two checklists every story passes through, identically.

04 Story → Sprint → Release

The final link is delivery. Each story carries a target sprint, and sprints roll up into the two releases on the roadmap. This is where Agile traceability terminates — not in a one-time acceptance signature, but in a working increment demonstrated at the Sprint Review and, at release boundaries, shipped. Because the target sprint travels with the story in the backlog, the trace from a requirement to the increment that delivered it is always one lookup away, and it updates itself as re-planning moves stories between sprints.

This is the whole chain, and it is self-maintaining. A story ID traces up to its epic and the vision, across to the Definition of Done that accepts it, and forward to the sprint and release that deliver it — and every link lives in artifacts the teams already maintain to do their jobs (backlog, DoD, roadmap, sprint backlogs). Nothing here is a document maintained for traceability; the traceability is a property of how the work is organised. That is the point this view is making.

05 What this view does and does not guarantee

Honesty about the limits of the trace is part of the discipline. What this view guarantees: every story has a unique ID, belongs to exactly one epic, carries a priority and estimate, has a target sprint, and is subject to the same Definition of Done. What it deliberately does not do:

The deliberate choice, stated plainly. The other four suites in this portfolio carry a formal Requirements Traceability Matrix because their delivery models have a fixed requirements baseline to trace against — a BRD, a PWS, a Control Plan. This suite does not, and forcing one would misrepresent how Agile works. This view is the honest equivalent: it shows the traceability Agile genuinely provides, in Agile's own language, and explains why that is the right form rather than the waterfall one.