Changes

GC Enterprise Architecture/Framework (view source)

Revision as of 13:29, 12 August 2019

42 bytes added , 13:29, 12 August 2019

m

no edit summary

Line 45: Line 45:

* Work across the entire application lifecycle, from development and testing to deployment and operations

* Ensure quality and security is underpinning the Software Development Lifecycle

−

* Total Cost Of Ownership (TCO) should include the cost for design, construction, operation, and maintenance of a system. For example Training, Support, Disaster Recovery, and Retirement Cost

+

* Total Cost Of Ownership (TCO) should include the cost for design, construction, operation, and maintenance of a system. For example Training, Support, Disaster Recovery, and Retirement Cost

* Ensure accountability for privacy is clear

* Encourage and adopt a process (for example: Test Driven Development (TDD)) to improve the trust between Business and IT

* Ensure that gender diversity and inclusion is considered as part of an intersectional approach to designing for users. Consult the Policy Direction to Modernize the Government of Canada’s Sex and Gender Information Practices and best practices for gender inclusive language. (Would note here that there are likely other examples of best practices that could be included such as positive space exemplars, but nothing else is springing to mind at the moment!)

−

* Adopt a client-centric view of business delivery through customer journey maps and end-to-end service decomposition (internal (GC) and external (public))

+

* Adopt a client-centric view of business delivery through customer journey maps and end-to-end service decomposition (internal (GC) and external (public))

Line 68: Line 68:

* Ensure data is collected in a manner that maximizes use and availability of data

* Ensure data collected aligns to existing enterprise and international standards

−

* Ensure that gender diversity and inclusion is considered according to the Policy Direction to Modernize the Government of Canada’s Sex and Gender Information Practices. The government is moving toward defaulting to gender, sex by exception, and adding a third gender option in a respectful and inclusive manner. This involves making changes in the front end (collection) and the back end (coding, display). For collecting information, the recommended approach is to offer the options “male”, “female” or the third option of “another gender”. If there is a need for more specificity and the capacity for analysis, add a write in option labelled “Please Specify”.

+

* Ensure that gender diversity and inclusion is considered according to the Policy Direction to Modernize the Government of Canada’s Sex and Gender Information Practices. The government is moving toward defaulting to gender, sex by exception, and adding a third gender option in a respectful and inclusive manner. This involves making changes in the front end (collection) and the back end (coding, display). For collecting information, the recommended approach is to offer the options “male”, “female” or the third option of “another gender”. If there is a need for more specificity and the capacity for analysis, add a write in option labelled “Please Specify”.

* Where enterprise or international standards don't exist, develop Standards in the open with key subject matter experts

* Ensure collection of data yields high quality data as per data quality guidelines

Line 77: Line 77:

Data Management

−

* Demonstrate alignment with enterprise and departmental data governance, strategies, and reference models

+

* Demonstrate alignment with enterprise and departmental data governance, strategies, and reference models

* Ensure accountability for data roles and responsibilities

* Design to maximize data use and availability

Line 84: Line 84:

Data Storage

−

* Only handle data which is essential to your service. Do not store all data that you capture unless absolutely necessary

+

* Only handle data which is essential to your service. Do not store all data that you capture unless absolutely necessary

−

* Ensure data is stored in a secure manner in accordance with CSE approved cryptographic algorithms and protocols~~~~ and ~~~~legislation such as the Privacy Act

+

* Ensure data is stored in a secure manner in accordance with CSE approved cryptographic algorithms and protocols and legislation such as the Privacy Act

* Retain data for the minimum time necessary. Follow existing retention and disposition schedules

* Ensure data is stored in a way to facilitate easy data discoverability, accessibility and interoperability

Data Sharing

−

* Data should be shared openly by default as per the Directive on Open Government while taking into consideration existing laws and regulations related to the safeguarding of data, while permitting free and open access

+

* Data should be shared openly by default as per the Directive on Open Government while taking into consideration existing laws and regulations related to the safeguarding of data, while permitting free and open access

* Ensure government-held data can be combined with data from other sources enabling interoperability and interpretability through for internal and external use

* Reduce existing data where possible

* Encourage data sharing and collaboration

−

* Validate or transform all external input before processing

+

* Validate or transform all external input before processing

|}

Line 105: Line 105:

Use Open Standards and Solutions by Default

* Where possible, use open source standards, and open source software first

−

* ''When using Open Source remain at the latest and greatest version''

+

* When using Open Source remain at the latest and greatest version

−

* ''Ensure any extension or change to the Open Source item is contributed back to the community''

+

* Ensure any extension or change to the Open Source item is contributed back to the community

* If an open source option is not available or does not meet user needs, favour platform-agnostic COTS over proprietary COTS, avoiding technology dependency, allowing for substitutability and interoperability

* If a custom-built application is the appropriate option, by default any source code written by the government must be released in an open format via Government of Canada website and services designated by the Treasury Board of Canada Secretariat

* All open source code must be released under an appropriate open source software license

−

* ''Ensure valid license and legal requirements are met for use of Open Source items''

+

* Ensure valid license and legal requirements are met for use of Open Source items

* Expose public data to implement Open Data and Open Information initiatives

Maximize Reuse

−

* Reduce integration Complexity - design systems to be highly modular and loosely coupled to be able to reuse components.

+

* Reduce integration Complexity - design systems to be highly modular and loosely coupled to be able to reuse components.

* Leverage and reuse existing solutions, components, and processes

* Select enterprise and cluster solutions over department-specific solutions

Line 143: Line 143:

Use Cloud first

−

* ''Adopt the Use of the GC Accelerators to ensure proper Security and Access Controls - [https://github.com/canada-ca/accelerators_accelerateurs-azure Azure], [https://github.com/canada-ca/accelerators_accelerateurs-aws AWS]''

+

* Adopt the Use of the GC Accelerators to ensure proper Security and Access Controls - [https://github.com/canada-ca/accelerators_accelerateurs-azure Azure], [https://github.com/canada-ca/accelerators_accelerateurs-aws AWS]

* Enforce this order of preference: Software as a Service (SaaS) first, then Platform as a Service (PaaS), and lastly Infrastructure as a Service (IaaS)

* Enforce this order of preference: Public cloud first, then Hybrid cloud, then Private cloud, and lastly non-cloud (on-premises) solutions

Line 196: Line 196:

* Implement security measures to assure the protection of personal information

* Take into consideration the 7 foundational privacy design principles when designing services.

−

+

|}

Gita.nurlaila

514

edits