Core Service Principles

IIntroduction

1.Synopsis

2.Introduction

1. 2.1Objective
2. 2.2Risks
3. 2.3Qualities Requirements
4. 2.4Principled Decisions
5. 2.5Categorizing Principles
6. 2.6Count
7. 2.7Culture and Behaviours
8. IIPrinciples
9. 2.8Principles
10. 2.9Organisation Principles
11. PRINC-O-POP: Primacy of Principles
12. PRINC-O-CWLS: Compliance with Laws and Standards
13. PRINC-O-MB4M: Maximize Benefit for the Most
14. PRINC-O-DFBC: Develop for Business Continuity
15. PRINC-O-AOO: Automate over Operate
16. PRINC-O-DFCU: Develop for Common Use
17. PRINC-O-DOON: Develop for Opportunity over Needs
18. PRINC-O-EOC: Enable over Control
19. PRINC-O-EDE: Enrich. Don’t Exploit
20. PRINC-O-PFE: Plan for the End
21. PRINC-O-POLS: Principle of Least Surprise
22. PRINC-O-RIRR: Reuse, Improve, Reinvent over Reuse
23. PRINC-O-VOPR: Virtual over Physical Resources
24. 2.10Information Principles
25. PRINC-I-AVOT: Authorised Versions of Truth
26. PRINC-I-DIDI: De-identify Shared Information
27. PRINC-I-PDP: Provide Data Portability
28. PRINC-I-IAIT: Entities can Access and Correct Information about Themselves
29. PRINC-I-IIAA: Information is an Asset
30. PRINC-I-IFFP: Information is Fit For Purpose
31. PRINC-I-IIFR: Information Is for Reuse
32. PRINC-I-IISL: Information is Standardized, Versioned and Referenceable
33. PRINC-I-LOPD: Logical over Physical Information Disposal
34. PRINC-I-LUPI: Limit Use of Personal Information
35. PRINC-I-PIPF: Publish Information Publicly First
36. 2.11Security Principles
37. PRINC-S-ATSI: Apply Tokenisation to Sensitive Information
38. PRINC-S-DIAL: Data is a Liability
39. PRINC-S-DID: Defense in Depth
40. PRINC-S-ISPS: Identity First Security
41. PRINC-S-ISS: Independently Secure Systems
42. 2.12Technology Principles
43. PRINC-T-CFPL: Cloud First, OnPrem Last
44. PRINC-T-LRV: Maintained Services to the Latest Released Version
45. PRINC-T-WBW: Wireless before Wired
46. 2.13Integration Principles
47. PRINC-N-ASAF: Accessible Web based REST API First
48. PRINC-N-HVP: HTTPS before Virtual Networks before Physical Networks
49. PRINC-N-NDC: Notifications before Deltas before Copies
50. 2.14Architecture Principles
51. PRINC-A-9A: 9A over Closed Services
52. PRINC-A-ADNU: Automate Devices Not Users
53. PRINC-A-DDCS: Distributed before Decentralized before Centralized
54. PRINC-A-SCMS: Deliver SCALED, VALUABLE, SMART Services
55. PRINC-A-DUS: Deliver Universal Services
56. PRINC-A-LCHC: Loosely Coupled, Highly Cohesive
57. PRINC-A-MOSP: Micro-Services before Split-Services
58. PRINC-A-MTST: Multi-Tenant over Single Tenant
59. PRINC-A-SRP: Single Responsibility Principle (SRP)
60. PRINC-A-SVD: Stakeholder Qualities Driven
61. PRINC-A-UIAC: User Interfaces are Service Clients
62. 2.15User Interface Principles
63. PRINC-U-AFI: Avoid Flow Interruption
64. PRINC-U-AO: Avoid Ornament
65. PRINC-U-EFUR: Easy to Find, Use, Resolve
66. PRINC-U-FACD: From Any Current User Agent
67. PRINC-U-OBI: Offer BREAD Based Interfaces
68. PRINC-U-PASV: Preferred Outcome Single Views
69. PRINC-U-UOC: Undo Over Cancel
70. 2.16Delivery Principles
71. PRINC-Y-DCOT: Automatable Delivery Contracts over Tests
72. PRINC-Y-AABF: Appropriate Accessibility before Functionality
73. PRINC-Y-APBP: Automated Pipeline Before Product
74. PRINC-Y-DVRI: Deliver Validated Value Rapidly and Iteratively
75. IIIAppendices

3.Appendices

4.Regional Considerations

1. 4.1New Zealand
2. Privacy and Sensitive Data
3. Government Agencies
4. Information Archiving and Disposal
5. Security
6. Accreditation
7. C&A