software-engineering-quality-framework

software-engineering-quality-framework copied to clipboard

initial thoughts on statements around data processing principles

1

Would appreciate some additional input / discussion here to ensure an appropriate statement of how teams should be operating. @andyblundell and @iw-ezequiel - any thoughts?

walteck

I cannot find the place where this sentence has been moved? I take it has been blended into the context of the other points i.e. "testing is assisted by automation"?...

andyblundell

In the observability page: "Monitor (and generate alerts for) the expiry dates of the SSL certificates within the service" Add example configurations (e.g. Pingdom, UptimeRobot, Jenkins, etc) to show how...

andyblundell

Also: what about a backup of the data outside of GitHub? _Originally posted by @andyblundell in https://github.com/NHSDigital/software-engineering-quality-framework/issues/166#issuecomment-945583278_

andyblundell

Also: we have minimum dashboard scores for *public* repos - what about *private* repos? How much do we trust private repos to be and remain private? _Originally posted by @andyblundell...

iw-ezequiel

Also: GitHub community settings: e.g. having a parent readme, having a published position on accepting contributions, having a license, etc? Should we insist these are all present? _Originally posted by...

iw-ezequiel

Also: can we get a split of repos by directorate, say? Does enterprise give us better options for grouping/classifying repos? What about tagging repos by business area? (The list is...

iw-ezequiel

Also: should we agree a (high bar) minimum dashboard score for *all* new projects, whether public or private? E.g. why wouldn't we insist green for secret scanning etc before a...

iw-ezequiel

Another thought: we should mention the NHSD org-level config, e.g. private repos are hidden from org members, and how this relates to the repo-level config teams need to apply _Originally...

iw-ezequiel

Some other thoughts: 1. UK residency option should be used for NHS repos 2. User accounts should be work accounts (not sure if we should mention SSO or not) 3....

iw-ezequiel