Sitemap

Patterns

Recommended approaches to solving common issues

• Pattern Overview
• Snyk as a Security Scanning Tool
• API Management (APIM)
• Authentication - One Login
• Authentication - Azure B2C
• Containerised services
• Configuration of services
• JSON Configuration for Application Questions
• Technical Designs
• How to maintain secrets with key vaults IaC

Principles

To guide the behaviour and decisions of Ofqual teams

• 01. We focus on user and business outcomes balancing design and function
• 02. We are needs-driven and design and deliver proportionate evidence-based solutions
• 03. We are accountable, fostering ownership through empowerment
• 04. We fail fast, learn, share and reuse
• 05. We design and continuously develop services that are durable and resilient
• 06. We understand and manage the threats we face
• 07. We are collaborative and transparent
• 08. We use the right tools and have the right rules
• 09. We keep things neat and tidy
• 10. Security is everyone’s responsibility

Standards

Explicitly stated expectations for Ofqual teams

• Data Driven Architecture
• Writing a principle
• Back-end development
• Front-end Development
• Defining a Service in Ofqual
• Writing a standard
• Security In First Party Software
• Build Pipelines for Digital Infrastructure
• Developer Testing
• Release Pipelines in Digital Services
• VIPER-Style Architecture in C# Front-Ends
• Secret Management
• Static Web Applications
• Infrastructure as Code
• Shutter page content
• Commit Messages
• IaC Build Configuration Standard
• Naming Conventions