Changes

GC Enterprise Architecture/Framework (view source)

Revision as of 15:38, 10 September 2019

751 bytes added , 15:38, 10 September 2019

no edit summary

Line 36: Line 36:

Fulfillment to the needs of the stakeholders to the Government of Canada

−

* <I~~><u~~>Understand stakeholders well, conduct stakeholder analysis and create stakeholder mapping for each service being delivered

+

* Understand stakeholders well, conduct stakeholder analysis and create stakeholder mapping for each service being delivered

−

* Ensure stakeholders' needs are clearly identified and captured for each service

+

* Ensure stakeholders' needs are clearly identified and captured for each service

* Ensure accountability for privacy is clear

−

* Ensure gender diversity and inclusion are considered as part of an intersectional approach to designing the service. Consult the Policy Direction to Modernize the Government of Canada’s Sex and Gender Information Practices and best practices for gender inclusive language ~~~~

+

* Ensure gender diversity and inclusion are considered as part of an intersectional approach to designing the service. Consult the Policy Direction to Modernize the Government of Canada’s Sex and Gender Information Practices and best practices for gender inclusive language

−

* ~~~~Adopt a client-centric view of business delivery of service through customer journey maps and end-to-end service decomposition (internal (GC) and external (public))

+

* Adopt a client-centric view of business delivery of service through customer journey maps and end-to-end service decomposition (internal (GC) and external (public))

Focus on Business Outcome and Strategic Alignment to the Department and to the Government of Canada

−

* ~~~~Establish business architecture early, focusing on business services and capabilities to eliminate technological constraints from transformation designs and roadmaps

+

* Establish business architecture early, focusing on business services and capabilities to eliminate technological constraints from transformation designs and roadmaps

* Use tools, such as Value Stream, to ensure business outcomes are achieved through services being delivered

* Model operation flow for each service being delivered in a business process modeling tool, using departmental chosen standard for business process notation, such as Business Process Modeling Notation (BPMN), and find optimization in the business process first

Line 52: Line 52:

Horizontal Enablement

−

* <i~~><u~~>Use business processes developed to identify common enterprise processes

+

* Use business processes developed to identify common enterprise processes

* Optimize common enterprise processes and maximize its re-use

* Encourage and use a process (for example: Test Driven Development (TDD)) to improve the trust between Business and IT

Line 62: Line 62:

* Use the GC Business Capability Model as a baseline and refine the capabilities to deeper levels that are applicable to the departmental use

* Identify frequently used business capabilities to identify area of focus in resource and skills requirement (Resource Management) for the department as well as to guide investments

−

* Identify common business capabilities that can be leveraged by the GC enterprise and share it with the community for possible collaboration through a working group

+

* Identify common business capabilities that can be leveraged by the GC enterprise and share it with the community for possible collaboration through a working group

−

|}

Line 75: Line 74:

* Ensure data is collected in a manner that maximizes use and availability of data

* Ensure data collected aligns to existing enterprise and international standards

−

* Ensure that gender diversity and inclusion is considered according to the Policy Direction to Modernize the Government of Canada’s Sex and Gender Information Practices. The government is moving toward defaulting to gender, sex by exception, and adding a third gender option in a respectful and inclusive manner. This involves making changes in the front end (collection) and the back end (coding, display). For collecting information, the recommended approach is to offer the options “male”, “female” or the third option of “another gender”. If there is a need for more specificity and the capacity for analysis, add a write in option labelled “Please Specify”.

+

* Ensure that gender diversity and inclusion is considered according to the Policy Direction to Modernize the Government of Canada’s Sex and Gender Information Practices. The government is moving toward defaulting to gender, sex by exception, and adding a third gender option in a respectful and inclusive manner. This involves making changes in the front end (collection) and the back end (coding, display). For collecting information, the recommended approach is to offer the options “male”, “female” or the third option of “another gender”. If there is a need for more specificity and the capacity for analysis, add a write in option labelled “Please Specify”

−

* Where enterprise or international standards don't exist, develop Standards in the open with key subject matter experts and consultation with Enterprise Data Community of Practice.

+

* Where enterprise or international standards don't exist, develop Standards in the open with key subject matter experts and consultation with Enterprise Data Community of Practice

* Ensure collection of data yields high quality data as per data quality guidelines

* Ensure data is collected through ethical practices supporting appropriate citizen and business-centric use

+

* Ensure data is collected only if it cannot be obtained through data-sharing

* Data should only be purchased once and should align with international standards

+

* Data purchased or obtained through data-sharing should be sourced to encouraged use by others

* Where necessary, ensure collaboration with department/agency data stewards/custodians, other levels and jurisdiction of government and indigenous people

* Reduce the collection of redundant data

Line 85: Line 86:

Data Management

−

* Demonstrate alignment with enterprise and departmental data governance, architecture, strategies, and reference models~~~~

+

* Demonstrate alignment with enterprise and departmental data governance, architecture, strategies, and reference models

−

* ~~~~Where appropriate align data to existing common vocabulary~~~~

+

* Where appropriate align data to existing common vocabulary

−

* ~~~~Ensure metadata is captured and defined to maximize discovery and availability

+

* Ensure metadata is captured and defined to maximize discovery and availability

* Ensure accountability for data roles and responsibilities

* Design to maximize data use and availability

Line 94: Line 95:

Data Storage

−

* Only handle data which is essential to your service. Do not store all data that you capture unless absolutely necessary

+

* Only handle data which is essential to your service. Do not store all data that you capture unless absolutely necessary

−

* Ensure data is stored in a secure manner in accordance with CSE approved cryptographic algorithms and protocols and legislation such as the Privacy Act

+

* Ensure data is stored in a secure manner in accordance with CSE approved cryptographic algorithms and protocols and legislation such as the Privacy Act

* Retain data for the minimum time necessary. Follow existing retention and disposition schedules

* Ensure data is stored in a way to facilitate easy data discoverability, accessibility and interoperability

−

~~~~Data Use

+

Data Use

−

* Ensure that data is used in an Ethical and Secure manner

+

* Ensure that data is used in an Ethical and Secure manner

* Maximize re-usability where appropriate

* Ensure that combined data does not risk identification or re-identification of sensitive or personal information

Line 106: Line 107:

Data Sharing

−

* Data should be shared openly by default as per the Directive on Open Government while taking into consideration existing laws and regulations related to the safeguarding of data, while permitting free and open access

+

* Data should be shared openly by default as per the Directive on Open Government while taking into consideration existing laws and regulations related to the safeguarding of data, while permitting free and open access

+

* If data cannot be shared, explicitly state the laws and/or regulations preventing its sharing

* Ensure government-held data can be combined with data from other sources enabling interoperability and interpretability through for internal and external use

* Reduce existing data where possible

* Encourage data sharing and collaboration

−

* Validate or transform all external input before processing

+

* Validate or transform all external input before processing

|}

Line 121: Line 123:

Use Open Standards and Solutions by Default

* Where possible, use open source standards, and open source software first

−

* When using Open Source remain at the latest and greatest version

+

* When using Open Source remain at the latest and greatest version to ensure any security vulnerabilities are patched

* Ensure any extension or change to the Open Source item is contributed back to the community

−

* If an ~~open source~~ option is not available or does not meet user needs, favour platform-agnostic COTS over proprietary COTS, avoiding technology dependency, allowing for substitutability and interoperability

+

* If an Open Source option is not available or does not meet user needs, favour platform-agnostic COTS over proprietary COTS, avoiding technology dependency, allowing for substitutability and interoperability

* If a custom-built application is the appropriate option, by default any source code written by the government must be released in an open format via Government of Canada website and services designated by the Treasury Board of Canada Secretariat

−

* All ~~open source~~ code must be released under an appropriate open source software license

+

* All Open Source code must be released under an appropriate open source software license

* Ensure valid license and legal requirements are met for use of Open Source items

* Expose public data to implement Open Data and Open Information initiatives

Line 136: Line 138:

* Work across the entire application lifecycle, from development and testing to deployment and operations

* Ensure quality and security is underpinning the Software Development Lifecycle

−

* Total Cost Of Ownership (TCO) should include the cost for design, construction, operation, and maintenance of a system. For example Training, Support, Disaster Recovery, and Retirement Cost

+

* Total Cost of Ownership (TCO) should include the cost for design, construction, operation, and maintenance of a system. For example Training, Support, Disaster Recovery, and Retirement Cost

−

Design Systems to be Measurable and Accountable

+

Design Systems to be Measurable and Accountable

* Publish performance expectations for each business service and supporting application and technology service(s)

* Make an audit trail available for all transactions to ensure accountability and non-repudiation

* Establish business and IT metrics to enable business outcomes

* Apply oversight and lifecycle management to digital investments through governance

−

* Complete an Algorithmic Impact Assessment (AIA) for systems automating decisions as per the [https://tbs-sct.gc.ca/pol/doc-eng.aspx?id=32592 Directive on Automated Decision-Making].

+

* Complete an Algorithmic Impact Assessment (AIA) for systems automating decisions as per the [https://tbs-sct.gc.ca/pol/doc-eng.aspx?id=32592 Directive on Automated Decision-Making].

Maximize Reuse

−

* Reduce integration Complexity - design systems to be highly modular and loosely coupled to be able to reuse components.

+

* Reduce integration Complexity - design systems to be highly modular and loosely coupled to be able to reuse components.

* Leverage and reuse existing solutions, components, and processes

* Select enterprise and cluster solutions over department-specific solutions

Line 154: Line 156:

* Inform the GC EARB about departmental investments and innovations

* Share code publicly when appropriate, and when not, share within the Government of Canada

+

* Use micro services scoped to a single purpose and made available for cross-business use

Enable Interoperability

* Expose all functionality as services

−

* ~~Use microservices built around business capabilities. Scope each service to a single purpose~~

+

* Make all services available through a well-defined interface, such as a HTTPS-based [https://www.canada.ca/en/government/publicservice/modernizing/government-canada-standards-apis.html application programming interface (API)]

−

* Run each IT service in its own process and have it communicate with other services through a well-defined interface, such as a HTTPS-based [https://www.canada.ca/en/government/publicservice/modernizing/government-canada-standards-apis.html application programming interface (API)]

+

* Design APIs according to the Mandatory Procedures for Application Programming Interfaces (Government of Canada API Standards)

−

* ~~Run applications in containers~~

+

* All APIs with potential for cross-departmental, inter-jurisdictional, or public consumption must be published to [https://api.canada.ca/en/homepage | the GC API Store]

−

* ~~Leverage~~ the [[gccollab:groups/profile/1238235/engovernment-of-canada-digital-exchangefru00c9change-numu00e9rique-du-gouvernement-du-~~canada~~|GC Digital Exchange Platform]] for ~~components such as [https://api~~.~~canada~~.~~ca/en/homepage#all-apis the API Store], Messaging, and the~~ GC ~~Service Bus~~

+

* Use the [gccollab:groups/profile/1238235/engovernment-of-canada-digital-exchangefru00c9change-numu00e9rique-du-gouvernement-du-Canada | Canadian Digital Exchange Platform (CDXP)] for data exchange where suitable (e.g. GC Event Broker for asynchronous messaging)

−

~~~~Develop with Security in mind

+

Develop with Security in mind

* Applications that store, process, handle, or have network access to sensitive information should be developed with security in mind from the start, and should be audited and assessed before use

* Ensure sensitive data is protected appropriately when stored and transmitted (Duplicate D3)

* Minimise the opportunity for accidental data leakage across application boundaries

* Ensure only authorised parties can access sensitive information

+

* Log access to facilitate audits and isolate unauthorized behaviour

* Restrict access to sensitive data to those applications designed to handle such material in a secure manner

|}

Line 188: Line 192:

* Ensure response times meet user needs, and critical services are highly available

* Support zero-downtime deployments for planned and unplanned maintenance

−

* Use distributed architectures, assume failure will happen, handle errors gracefully, and monitor actively

+

* Use distributed architectures, assume failure will happen, handle errors gracefully, and monitor performance and behaviour actively

−

* Establish architectures that supports new technology insertion with minimal disruption to existing programs and services~~~~

+

* Run applications in containers to enable rapid deployment and scaling

−

* ~~~~Control Technical Diversity - design systems based on technologies and platforms already in use.

+

* Establish architectures that supports new technology insertion with minimal disruption to existing programs and services

+

* Control Technical Diversity - design systems based on modern technologies and platforms already in use.

|}

Gita.nurlaila

514

edits