Standards and links¶
The government and Defra standards this site builds on. Our guardrails apply these to Defra's context - they do not replace them.
Defra¶
| Resource | What it is |
|---|---|
| Defra Digital Service Manual | How Defra designs, builds and runs digital services, including service assessments |
| Defra software development standards | Detailed engineering practice: languages, coding style, testing, source control, versioning and release |
| Defra Digital blog | What Defra digital, data and technology teams are working on and learning |
| Defra on GitHub | Defra's open source code |
| Defra Data Services Platform | Defra group open and shared data |
Government standards¶
| Standard | Why it matters | Where we apply it |
|---|---|---|
| Service Standard | The 14 points every government service is assessed against | Throughout, especially principles |
| Technology Code of Practice | Criteria for designing, building and buying technology, used in spend control | Mapped below |
| Secure by Design | Government approach to security in digital delivery | Secure by Design in Defra |
| GOV.UK Service Manual | How to deliver government services | Alongside the Defra Digital Service Manual |
| GOV.UK Design System | Styles, components and patterns | Front end guardrails |
| API technical and data standards | How to build government APIs | APIs and integration |
| Cloud First policy | Default to public cloud | Hosting and platforms |
| AI Playbook for the UK Government | Safe and effective use of AI | AI guardrails |
| Greening Government ICT and Digital Services strategy | Sustainable technology | Sustainability guardrails |
| Government Data Quality Framework | Managing data quality | Data guardrails |
| Cyber Assessment Framework | Assessing cyber resilience (GovAssure) | Security |
Technology Code of Practice mapping¶
How the 13 points of the Technology Code of Practice map to this site.
| TCoP point | Defra guidance |
|---|---|
| 1. Define user needs | GR-PRIN-02; Defra Digital Service Manual |
| 2. Make things accessible and inclusive | Front end and accessibility |
| 3. Be open and use open source | Open source and working in the open |
| 4. Make use of open standards | GR-TECH-05, data standards |
| 5. Use cloud first | Hosting and platforms |
| 6. Make things secure | Security guardrails, Secure by Design |
| 7. Make privacy integral | GR-DATA-06 |
| 8. Share, reuse and collaborate | Handrail, GR-TECH-01 |
| 9. Integrate and adapt technology | APIs and integration |
| 10. Make better use of data | Data architecture |
| 11. Define your purchasing strategy | Choosing technology |
| 12. Make your technology sustainable | Sustainability |
| 13. Meet the Service Standard | Governance; Defra Digital Service Manual |
Cross-government architecture¶
Other parts of government publish architecture in the open. We reuse their models and approaches rather than inventing our own.
| Resource | What it is | How it relates to this site |
|---|---|---|
| Secure by Design artefact library | Reusable security patterns, blueprints, checklists and threat models, run in the open on GitHub | Linked from Secure by Design in Defra and threat modelling |
| OCTO architecture resources | Cross-government enterprise architecture from the Office of the Government CTO: capability model, reference architectures, self-assessment tools and AI enablement | The home of the models below |
| Digital Technology Capability Model | A six-level common language for a department's technology landscape | Not used for the technology capability model, which follows Technology Business Management (TBM). Useful when comparing Defra with other departments |
| Citizen Facing Reference Architecture | How citizen-facing government services fit together, from channels to infrastructure | Our transactional service reference architecture is Defra's detailed view of it |
| Architecture maturity self-assessment | A 10-minute self-assessment of architecture practice across 14 dimensions | Use it to assess an architecture team or SDA; see the roadmap |
| AI technology enablement | AI risk toolkit, assurance questionnaire and governance operating model | Linked from the AI guardrails |
| Local Government Architecture Model | GDS Local's layered model of the technology councils use, from public channels and shared components down to service and corporate systems | Inspired the layered view in our technology capability map. Useful where Defra services work with councils, such as planning, waste and environmental health |
| Government data architecture | Cross-government data architecture guidance from the Data Marketplace | Complements our data architecture and data standards |
| Lightweight architecture for learning at pace | Government Technology blog post on lightweight, trust-based architecture practice | Reflected in our advice-first governance |
Inspiration¶
We have learned from other departments working in the open, in particular the DfE architecture site. Thank you.