GEA-NZ v3.2 Application and Software Services Reference ... · Version 3.2 of the Application and Software Services Reference Taxonomy document [split out from the v3.1 Application

01

Government Enterprise Architecture of New Zealand (GEA-NZ)

Produced by Government Enterprise Architecture

Approved 25th May 2017 – Updated 2018 March

GEA-NZ v3.2

Application and Software Services

Reference Taxonomy

GEA-NZ v3.2 Application and Software Services Reference Taxonomy Page 1 of 51

Document Control Project ID/Name Government Enterprise Architecture of New Zealand

Author Jim Clendon

Title GEA-NZ v3.2 Application and Software Services Reference Taxonomy

DIA File Reference

Document Classification: UNCLASSIFIED

Document Approval

Department of Internal Affairs

The GEA-NZ Application and Software Services Reference Taxonomy is approved by Government Enterprise Architecture Group (GEAG) and Government Enterprise Architect in-line with AoG policy.

Contact us: Enquiries regarding this document are welcome to Email: [email protected]

Acknowledgements

The GEA-NZ v3.2 Application and Software Services Reference Taxonomy was developed by the Government Enterprise Architecture, System Transformation, Service and System Transformation, supporting the Deputy Government Chief Technology Officer and the Government Chief Digital Officer (GCDO), Department of Internal Affairs, New Zealand.

The feedback and suggestions received from a number of experts from various agencies, and the collaboration working sessions, were greatly appreciated.

It was peer-reviewed and approved by the Government Enterprise Architecture Group (GEAG) members. Approval was on the 25th of May 2017.

Crown copyright ©. This copyright work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International (CC BY-NC-ND 4.0) licence. In essence, you are free to copy and adopt the work, as long as you attribute the work to the Department of Internal Affairs. You must also give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use. If you remix, transform, or build upon the material, you may not distribute the modified material. You may not use the original material for commercial purposes. You also agree to abide by the other licence terms. To view a copy of this licence, visit http://creativecommons.org/licenses/by-nd/4.0/. Please note that neither the Department of Internal Affairs emblem nor the New Zealand Government logo may be used in any way which infringes any provision of the Flags, Emblems, and Names Protection Act 1981 or would infringe such provision if the relevant use occurred within New Zealand. Attribution to the Department of Internal Affairs should be in written form and not by reproduction of the Department of Internal Affairs emblem or New Zealand Government logo.

mailto:[email protected]

http://creativecommons.org/licenses/by-nd/4.0/

http://www.legislation.govt.nz/act/public/1981/0047/latest/whole.html#dlm52216


Revision history

Version Date Description of changes Author Approved by

v3.2 June 2017 Version 3.2 of the Application and Software Services Reference Taxonomy document [split out from the v3.1 Application and ICT Services Reference Model and Taxonomy document]

Jim Clendon Regine Deleu

GEAG

The major focus was simplification – from up to 5 levels, now 3. 76 elements have been removed, only a few added. Industry standard terms have been included to aid discovery. Specific high level changes are:

- Moved: o A1.04 Financial Accounting was Financial and Asset Management o A1.04 Workforce Management was Workforce Capability Management o A1.13 Change Management was Business transformation and Improvement o A4.03 Data Governance was Data and Records Governance o A4.08 Geospatial Information System (GIS) was Geospatial Information o A8 System Integration was Interfaces and Integration

- Promoted to Area from Category: o A8.05 Service Oriented Architecture (SOA) was A8.01.01 Services Integration o A8.06 Enterprise Service Bus (ESB) was A8.01.02 o A8.07 Enterprise Application Integration (EAI)” was A8.01.0

- Removed: o A8.01 Integration as it was effectively duplicating A8 System Integration

- Moved to another taxonomy: o A7.05.01 Cloud Computing Services moved to Infrastructure as I1.05 Cloud Infrastructure Deployment Models o A7.06 Server Configuration Types moved to Infrastructure as I1.04 Server Configuration Types

- Within the "Notes" [Description] we have added: o Source: [where we have identified it - updated description] o Related term: [as required] o Narrower term: [as required] o Was: [old ID]

v3.2 2018 March

Updated diagrams to landscape. GCIO to GCDO change. A1.02 Financial Management Information System [FMIS] was A1.02 Financial Accounting. Name change to align with standard industry term. A1.15 Management Accounting. Deleted element. Not a standard industry application name. A1.16 Payroll was A1.03.05 Payroll. Promoted to level 2 as A1.16 Payroll is at times deployed as a standalone application. A2.09 Case Management was A2.06.04 Case Management. Promoted to level 2 as A2.09 Case Management is at times deployed as a standalone application.

Jim Clendon GEAG


Published by the Department of Internal Affairs www.ict.govt.nz

Table of Content

Document Control ....................................................................................................................................................................................................................................................................................... 1

Document Approval .......................................................................................................................................................................................................................................................................................... 1

Revision history ................................................................................................................................................................................................................................................................................................. 2

Table of Content ................................................................................................................................................................................................................................................................................................ 3

Executive Summary ..................................................................................................................................................................................................................................................................................... 4

Application and Software Services Reference Taxonomy Introduction ........................................................................................................................................................................................................ 5

Application and Software Services Reference Taxonomy Structure ................................................................................................................................................................................................................. 5

GEA-NZ Framework Context ............................................................................................................................................................................................................................................................................. 6

Application and Software Services Reference Taxonomy Principles ................................................................................................................................................................................................................. 8

Application and Software Services Reference Taxonomy ........................................................................................................................................................................................................................... 12

A1 Corporate Applications .............................................................................................................................................................................................................................................................................. 12

A2 Common Line of Business Applications ...................................................................................................................................................................................................................................................... 22

A4 Data and Information Management .......................................................................................................................................................................................................................................................... 29

A5 Identity and Access Management .............................................................................................................................................................................................................................................................. 35

A6 Security Services ........................................................................................................................................................................................................................................................................................ 38

A7 ICT Components, Services and Tools .......................................................................................................................................................................................................................................................... 41

A8 System Integration ..................................................................................................................................................................................................................................................................................... 47

http://www.ict.govt.nz/


Executive Summary GEA-NZ reference taxonomies provide categorisation elements and terms to describe business, information, application, and infrastructure architecture for use across All of Government (AoG), sectors, clusters, and agencies. The Reference Taxonomies are used to:

● Provide common language to;

o Promote service, information, system, and technology interoperability.

o Reduce complexity by abstracting, organising and simplifying complex information sets.

o Improve overall consistency and cohesiveness of cross government services, shared services and common capabilities.

o Deliver consistent and aligned views of commonly required operational and technological services.

● Improve the efficacy, utility and cost effectiveness of ICT across government;

o Drive ICT efficiencies and transformation programmes through identification of opportunities for development or and reuse of common solutions.

o Support the development and delivery of coherent AoG Common Capabilities portfolio.

o Support the AoG Data Governance initiatives.

The intended audience of the Application and Software Services Reference Taxonomy is (but not limited to):

● Agencies’ Enterprise, Business and Solution Architects

● Business Service Management Providers

● Business partners involved in development and delivery of business and technology solutions

● Business and IT Managers

● Business Subject Matter Experts

● Security Specialists for Certification & Accreditation activities (C&A)

● Suppliers to the New Zealand Government


Application and Software Services Reference Taxonomy Introduction The GEA-NZ Application and Software Services Reference Taxonomy describes and categorises the functions of the New Zealand Government across eight common application and software services domains instead of a siloed, agency-by-agency view.

The elements or terms in the taxonomy provide the basis for developing specific application and software services reference architectures and patterns, and defining application and software services capability. These reference architectures and patterns can be more readily used across government where the terms from the reference taxonomy are used consistently.

It is used for:

● Identification of duplication of application and software services within and across agencies and corresponding opportunities for cost reduction; collaboration, shared services, and solution reuse in agency IT portfolios.

● Identification of gaps in application and software services within and across agencies and corresponding opportunities for investment to improve customer centric service delivery, and related agency, cluster, and sector support functions.

● Mapping and cataloguing Sector, Cluster and Agency data and information assets.

● Defining Government Business Capabilities. Note: this was done for the GEA-NZ Government Business Capability Model by Government Enterprise Architecture. It covers Enterprise Capabilities, and Generic Government Capabilities. Sector, Cluster and Agency specific capabilities can be defined in the same manner by the responsible sectors and agencies.

The GEA-NZ Application and Software Services Reference Model describe the relationship within the GEA-NZ framework. This includes a description of artefacts and relationships across all GEA-NZ dimensions, and how to use the business taxonomy to realise architectural and business value.


GEA-NZ Framework Context The Application and Software Services Reference Taxonomy is part of the Application and Software Services Dimension (red rectangle in the diagram below) which is an integral part of the Government Enterprise Architecture for New Zealand (GEA-NZ) Framework. It is one of the 4 core dimensions of GEA-NZ (blue rectangle in the diagram below). The other 4 GEA-NZ dimensions are the control dimensions.

GEA-NZ FrameworkStandards

Identity, Privacy, and Security

Strategy, Investment, and Policy

Governance and Performance

Business

Customer

People and Organisations

Channels

Product and Services

Process

Data and Information

Application and Software Services

Infrastructure


The following table shows the GEA-NZ Application and Software Services Reference Taxonomy in context with the other GEA-NZ dimensions.

Ap

plic

atio

n a

nd

So

ftw

are

Se

rvic

es

represents a key mechanism for realising strategic goals, through adoption of agile core business applications and industry standard corporate support functions

Strategy, Investment, and Policy

provides the application and software services that enables governance and performance measurement and control, and offers opportunities to improve business efficiency through sharing and reuse

Governance and Performance

provides the application and software services that support business services, processes, capabilities, information sharing, and reuse

Business

sets requirements and provides the tools to manage, model, structure, share, and exchange data and information

Data and Information

provides the application and software service requirements for technology and infrastructure services, and supporting applications for infrastructure management (e.g. CMDB)

Infrastructure

provides the application and software service controls needed to support security and privacy requirements

Security and Privacy

sets the application and software service requirements that drive development and scope of corresponding standards

Standards


Application and Software Services Reference Taxonomy Principles The principle RB1A is specific to the Application and Software Services reference taxonomy; and the others (RT2-RT5) are generic to all GEA-NZ Reference Taxonomies.

Principle RT1A

Description Principle Reference Taxonomy 1 Application and Software Services (RT1A); Elements that make up the Application and Software Services Domains, Areas, and Categories should be recognised industry terms, with at least two examples of applications or and Software Services of that type in the market.

Rational This is practice in useful industry taxonomies such as the Tele-management Forum application map.

1. Using terms for which there are commercially available solutions makes the taxonomy more useful to both vendors and agencies. 2. Unusual terms reduce usability and relevance of the taxonomy.

Exceptions We may include elements for emerging and possibly experimental concepts for which we may want to provide guidance or direction, for example, where an element is specified to support the strategic direction of Government.

Principle RT2

Description Reference Taxonomy Principle 2 (RT2) is that elements should be useful at the Category level (3rd level).

Rational This is good practice. It assists the users apply the taxonomy to their architecture.

1. Use open language like "Category X includes;" rather than a list. The list should serve as examples. 2. An alternative to using level 4 sub-categories is summarising the "Narrower Terms:" that may belong to a category instead of creating lower level 4 sub-categories.

This approach will be used to simplify the taxonomy for GEA-NZ v3.2. 3. There shall be NO AoG level 5.

Exceptions Where level 4 is needed it is permitted and may be used where particular focus on a category supports the strategic direction of Government.

Principle RT3

Description Reference Taxonomy Principle 3 (RT3) is that the source of a term, or the definition used SHOULD be noted in the notes as “Source: The_Source”.

Rational This is best practice. It assists the user of the taxonomy check for updated information, and provides useful context.


1. All new or revised terms used in the v3.2 Taxonomy MUST have the source shown in the description. 2. All terms SHOULD have a source.

Exceptions Where elements / terms have not been revised, or are not new the "Source" MAY be missing in the v3.2 version of the taxonomy due to time constraints.

NOTE: In general the sources were FoNZ/NZGLS, the US FEAF v2, the AGA v3.0, augmented by Wikipedia.

Principle RT4

Description Reference Taxonomy Principle 4 (RT4) is that related terms SHOULD be listed under "Related Terms:" in the element description.

Rational This is best practice. It assists term discovery when alternative terms are searched for in the taxonomy.

1. "Related Terms:" MUST be used if a name changes, for instance as per principle RT1 (RT1A)

2. "Related Terms:" SHOULD be used if there is an alternative industry term.

Exceptions Where terms have not been revised, or are not new, "Related Terms:" MAY be missing in the v3.2 version of the taxonomy due to time constraints.

Principle RT5

Description Reference Taxonomy Principle 5 (RT5) is that element GUID's, and Element Taxonomy ID's, SHOULD be consistent across versions of the taxonomy.

Rational This is good practice. It assists the user manage change between versions.

1. In Spark EA models the GUIDS for an element MUST not be changed where the element is otherwise the same, even if the name has changed, but has the same meaning, or the ID has had to change due to levelling. This means elements in models can be updated to reflect new version names and descriptions while preserving any relationships established by the user.

2. ID's MUST NOT be reused for another element, when an element is removed from the taxonomy, or moved to another part of the taxonomy for levelling purposes. This avoids confusion where comparing across different versions.

Exceptions 1. Elements ID's may change where we need to re-level a taxonomy. However element ID's will not be re-used from version 3.2 onwards. 2. Element ID's MAY be re-used to correct past errors in the taxonomy where elements may be incorrectly placed due to an ID error.


Reference Taxonomy Structure The application and software services taxonomy structure is a simple 3 level hierarchy.


Reference Taxonomy Domains The domains are shown in the diagram below:

Note: The Application and Software Services Reference Taxonomy is available in a range of formats. Email [email protected] for more information.

GEA-NZ v3.2 Application and Software Services Reference Taxonomy; 9 Domains [Level 1]

(A1)Corporate Applications

(A2)Common Line of Business

Applications

(A3)End User Computing

(A4)Data and Information Management

(A5)Identity and Access Management

Services

(A6)Security Services

(A7)ICT Components, Services and

Tools

(A8)System Integration

(A9)Specialist Line of Business

Applications


Application and Software Services Reference Taxonomy Tables

A1 Corporate Applications

Standard corporate applications within government to support the internal facing functions for managing staff, money and the way government agencies run their business.

Note: The applications found in this domain can also be used as software services or application components. Many commercial applications may contain elements of applications listed here and specific software solutions may offer a mix of these in one suite.

(A1)Corporate Applications

(A1.01)

Enterprise Resource Planning (ERP)

(A1.02)

Financial Management Information

System [FMIS]

(A1.03)

Human Resource Management

(A1.04)

Workforce Management

(A1.05)

Corporate Governance and Strategy

(A1.06)

Corporate Administration

(A1.07)

Supply Chain Management

(A1.08)

Business Intelligence (BI)

(A1.09)

Business Continuity Software and

Services

(A1.11)

Enterprise Content Management

(ECM)

(A1.12)

Business Process Management

System (BPMS)

(A1.10)

Unified Communications and

Collaboration

(A1.13)

Change Management

(A1.14)

Stakeholder Relationship

Management

(A1.16)

Payroll

2018-02-09: 'A1.02 Financial Accounting' changed to 'A1.02 Financial Management Information System [FMIS]'.

2018-02-09: 'A1.16 Payroll' was 'A1.03.05 Payroll' but was promoted to level 2.

2018-02-09 'A1.15 Management Accounting' deleted as content included in 'A1.02 Financial Management Information System [FMIS]'


The following table lists all the elements for A1 Corporate Applications.

Alias [ID] Name Notes [Description

A1 Corporate Applications These are standard corporate applications within government to support the internal facing functions for managing staff, money and the way government agencies run their business. Note: The applications found in this domain can also be used as ICT services or application components. Many commercial applications may contain elements of applications listed here and specific software solutions may offer a mix of these in one suite.

A1.01 Enterprise Resource Planning (ERP)

Enterprise resource planning (ERP) is business process management software that allows an organization to use a system of integrated applications to manage the business and automate many back office functions related to technology, services and human resources. ERP software typically consists of multiple enterprise software modules that are individually purchased, based on what best meets the specific needs and technical capabilities of the organization. Each ERP module is focused on one area of business processes, such as product development or marketing. Source: www.webopedia.com/TERM/E/ERP.html In the past ERP solutions focused on back office functions but modern solutions often include some key front office functions as well. Note: Application Categories for ERP can be found under the Corporate Applications and Core Business Applications areas. Example ERP Modules are: - Financial Accounting - Management Accounting - Human Resources - Workforce Management - Supply Chain Management - Project Management - Customer Relationship Management - Self Service


A1.02 Financial Management

Information System [FMIS]

A Financial Management Information System [FMIS] supports Financial accounting and Management Accounting.

Financial Management Information Systems accumulate and analyse financial data in order to make good financial management decisions in

running the business. FMIS is the acronym for the term “Financial Management Information Systems”.

The basic objective of the financial information system is to meet the firm's financial obligations as they come due, using the minimal amount of

financial resources consistent with an established margin of safety. Outputs generated by the system include accounting reports, operating and

capital budgets, working capital reports, cash flow forecast, and various What-If Analysis reports. The evaluation of financial data may be

performed through ratio analysis, trend evaluation, and financial planning modelling. Financial planning and forecasting are facilitated if used in

conjunction with a Decision Support System (DSS).

Source: ITINFO

Financial Accounting is a specialized branch of accounting that keeps track of an organisation's financial transactions. Using standardized

guidelines, the transactions are recorded, summarized, and presented in a financial report or financial statement such as an income statement or

a balance sheet. Organisation's issue financial statements on a routine schedule. The statements are considered external because they are given

to people outside of the organisation, with the primary recipients being owners/stockholders, as well as certain lenders. If a corporation's stock

is publicly traded, however, its financial statements (and other financial reporting) tend to be widely circulated, and information will likely reach

secondary recipients such as competitors, customers, employees, labour organizations, and investment analysts.

Source: Accounting Coach

Management Accounting [Was A1.15 Management Accounting] is a profession that involves partnering in management decision making,

devising planning and performance management systems, and providing expertise in financial reporting and control to assist management in the

formulation and implementation of an organization's strategy.

Source: Institute of Management Accountants (IMA)

Related Term: Financial Management, Financial and Asset Management [v3.1 name], Financial Accounting [v3.2 name].

A1.02.01 Budget Planning and Execution Software that supports all activities undertaken to determine priorities for future spending and to develop an itemised forecast of future funding and expenditures during a specified period of time. This includes the collection and use of performance information to assess the effectiveness of programs and develop budget priorities and the legal (apportionment) and managerial (allotment and sub-allotment) distribution of budget authority to achieve results consistent with the formulated budget.

A1.02.02 General Ledger (GL) A general ledger (GL) is a chronological accounting record a business uses to keep track of financial transactions. Transactions are categorized and summarized into general ledger accounts. An account is a unique record for each type of asset, liability, equity, revenue and expense. The number and type of accounts that make up the general ledger is determined by the chart of accounts (COA). The general ledger is the primary component of most financial accounting software applications, including accounts payable software, accounts receivable software and enterprise asset management (EAM) software. The GL can be thought of as an electronic database that provides the data required to build financial reports. The general ledger is at the core of any enterprise resource planning (ERP) financial management system, which encompasses the functions that are required to maintain one or more sets of books, generate financial reports, manage cash and fixed assets and execute payment and accounts receivable transactions. Source: Whatis.com Narrower Term: Accounts Payable, Accounts Receivable


A1.02.03 Accounts Payable Accounts payable, a liability account in the GL that documents money the business owes for the purchase of goods or services. Source: WhatIs.com Software that manages and pays the funds owed. Broader Term: General Ledger (GL)

A1.02.04 Accounts Receivable Accounts receivable is an asset account in the general ledger (GL) that documents money owed to a business by customers who have purchases goods or services on credit. Source: WhatIS.com Software that supports collections and receivables, including deposits, fund transfers, and receipts for sales or service. Broader Term: General Ledger (GL)

A1.02.05 Asset Management Software that supports the tracking of information related to deploying, operating, maintaining, upgrading, and disposing of assets cost-effectively. Includes an inventory of assets.

A1.02.06 Expense Management Support the management and reimbursement of costs paid by employees or an organisation.

A1.02.07 Financial Audit Software used to track and manage financial audit and support the examination and verification of records for accuracy.

A1.02.08 Investment Portfolio Management Software or services that provide the set of capabilities to support the administration of a group of investments held by an organisation. Related Term: Portfolio Management [Previous Name]

A1.02.09 Financial Reporting Software or services that support the preparation of accurate and timely financial reports.

A1.02.10 Financial Risk Management Software or services that support financial risk management.

A1.03 Human Resource Management Applications, software or services that support human resource management. Human resource management (HRM or simply HR) is a function in organisations designed to maximize employee performance in service of their employer?s strategic objectives. HR is primarily concerned with how people are managed within organisations, focusing on policies and systems. HR departments and units in organisations are typically responsible for a number of activities, including employee recruitment, training and development, performance appraisal, and rewarding (e.g., managing pay and benefit systems). HR is also concerned with industrial relations, that is, the balancing of organisational practices with regulations arising from collective bargaining and governmental laws. Note: Health and Safety often is a module in an HR suite but is under A1.09 Business Continuity in this framework.

A1.03.01 Recruitment Software that supports the procedures for attracting and selecting high-quality, productive employees with the right skills and competencies, in accordance with merit system principles. This includes developing a staffing strategy and plan, and establishing an applicant evaluation.

A1.03.02 Education / Training Software that supports the design, development, and implementation of a comprehensive employee development and training approach to ensure that agency employees have the right competencies.

A1.03.03 Personnel Administration Support the matching between an organisation’s employees and potential opportunities as well as the modification, addition and general upkeep of an organisation’s employee-specific information. Narrower Term: Employee Records, Time and Attendance, Career Development and Retention

A1.03.04 Staff Directory Software that supports the listing of employees and their whereabouts.

A1.03.06 Team and Organisation Management

Software that supports the hierarchy structure and identification of employees within the various sub-groups of an organisation.

A1.03.07 Skills Management Software that supports the proficiency of employees in the delivery of an organisation's products or services. Narrower Term: Digital Skills Management

A1.03.08 Emergency Notification Software that enables designated individuals to communicate critical information to many individuals across multiple devices.


A1.04 Workforce Management Applications, software or services supports workforce management. Workforce management encompasses all the activities needed to maintain a productive workforce. It can be part of or overlap with HR management and ERP systems. Related term: Workforce Capability Management [Previous name]

A1.04.01 Resource Planning and Allocation Software that supports the processes for identifying the workforce competencies required to meet the agency's strategic goals and for developing the strategies to meet these requirements. The software also supports procedures for attracting and selecting high-quality, productive employees with the right skills and competencies, in accordance with merit system principles. This includes developing a staffing strategy and plan; establishing an applicant evaluation approach; announcing the vacancy, sourcing and evaluating candidates against the competency requirements for the position; initiating pre-employment activities; and hiring employees.

A1.04.02 Field Service Management Software to optimally plan and dispatch field service technicians and their properly stocked vehicles to a customer's location in a timely manner in order to deliver against their service commitments. Narrower Term: Demand Management, Workforce Scheduler, Workforce Dispatcher

A1.04.03 Contingent Workforce Management

Software that supports the continuity of operations for an organisation's business through the identification of surge or temporary personnel in addition to agency staff.

A1.05 Corporate Governance and Strategy

Applications, software or services that support corporate governance functions. Corporate governance broadly refers to the mechanisms, processes and relations by which corporations are controlled and directed. Governance structures identify the distribution of rights and responsibilities among different participants in the corporation (such as the board of directors, managers, shareholders, creditors, auditors, regulators, and other stakeholders) and include the rules and procedures for making decisions in corporate affairs. Corporate governance includes the processes through which corporations' objectives are set and pursued in the context of the social, regulatory and market environment. Governance mechanisms include monitoring the actions, policies and decisions of corporations and their agents. Corporate governance practices are affected by attempts to align the interests of stakeholders.

A1.05.01 Strategy and Planning Software that allows setting up the activities of determining strategic direction, identifying and establishing programs, services and processes, and allocating resources (capital and labour) among those programs and processes.

A1.05.02 Governance Software that supports decisions, actions, business rules and other matters that govern an organisation.

A1.05.03 Compliance Management Compliance Management software and or services provide a common framework and an integrated approach to manage all compliance requirements faced by an agency. It enables companies to manage cross-industry mandates and regulations such as SOX, OSHA, EH&S, and FCPA as well as industry focused regulatory guidelines from FDA, FERC, FAA, HACCP, AML, Basel II, and Data Retention laws.

A1.05.04 Internal Control Support the methods and procedures used by the organisation to safeguard its assets, produce accurate accounting data and reports, contribute to efficient operations, and encourage staff to adhere to management policies and mission requirements.

A1.05.05 Corporate Policy Software that supports development and enforcement of corporate policy within an organisation.

A1.05.06 Risk Management Software that allows planners to explicitly address uncertainty by identifying and generating metrics, setting parameters, prioritizing, and developing mitigations, and tracking risk.

A1.05.07 Corporate Performance Management

Software that allows setting up performance metrics, such as cost and profitability, for planners to explicitly address uncertainty by identifying and generating metrics, setting parameters, prioritizing, and developing mitigations, and tracking risk. Note: May also be called Enterprise Performance Management

A1.06 Corporate Administration Applications, software or services that support the day-to-day management and maintenance of the internal administrative operations.

A1.06.01 Legal Advice Software that supports giving legal advice.

A1.06.02 Facilities Management Software that supports facilities management including the maintenance, administration, certification, and operation of office buildings that are possessions of the government / agency.

A1.06.03 Accommodation Management Software that supports managing the accommodation needs of the workforce.

A1.06.04 Asset Booking Software that supports the processes for viewing availability, booking, and tracking the use of assets. Assets may include vehicles, media, and facilities.


A1.06.05 Travel Software that supports activities associated with planning, preparing, booking, and monitoring of business-related travel expenses. This may include employees and others supporting the work of the government.

A1.06.06 Service Centre Software that supports the management of a service centre to respond to government and contract employees' technical and administrative questions. Note: The service centre software and services may be separate to A7.04.12 Service Desk software and services.

A1.07 Supply Chain Management Supply chain management (SCM) is the oversight of materials, information, and finances as they move in a process from supplier to manufacturer to wholesaler to retailer to consumer. Supply chain management involves coordinating and integrating these flows both within and among companies. It is said that the ultimate goal of any effective supply chain management system is to reduce inventory (with the assumption that products are available when needed). As a solution for successful supply chain management, sophisticated software systems with Web interfaces are competing with Web-based application service providers (ASP) who promise to provide part or all of the SCM service for companies who rent their service. Related term: Procurement [Previous name] Source: TechTarget

A1.07.01 Supplier Management Software used to manage the relationship and lifecycle of existing suppliers. The purpose of Supplier Management is to obtain value for money from suppliers and contracts. It ensures that underpinning contracts and agreements align with business needs, Service Level Agreements and Service Level Requirements. Supplier Management oversees process of identification of business needs, evaluation of suppliers, establishing contracts, their categorisation, management and termination. Note: This has a close link to "Partner Relationship Management" in the "Common Line of Business Application" area. Narrower Terms: Sourcing Management, Supplier Contract Management, Supplier Performance Management, Supplier Balanced Scorecard.

A1.07.02 Ordering / Purchasing Allow the placement of request for a product

A1.07.03 Supplier Catalogue Management Support the listing of available products or services that an organisation offers and shopping cart / ordering functionality. Was: A1.07.02.01 Supplier Catalogue Management

A1.07.04 Invoice Tracking and Approval Software that manages inflow and outflows of "products", as well as data about the level of "products" on hand and support the identification of where a shipment or delivery is within the business cycle. Was: A1.07.02.02 Invoice Tracking and Approval

A1.07.05 Logistics and Transportation Provide for efficient freight and traffic management to receive purchased goods and services. Was: A1.07.02.03 Logistics and Transportation

A1.07.06 Procurement Applications, software or services that supports procurement; the acquisition of goods, services or works from an outside external source. Was A1.07

A1.07.07 Supply Chain Assurance Supply chain assurance outcomes are improved supply chain risk management and implementation of appropriate mitigation's.


A1.08 Business Intelligence (BI) Business Intelligence (BI) is the set of strategies, processes, applications, data, products, technologies and technical architectures which are used to support the collection, analysis, presentation and dissemination of business information. BI technologies provide historical, current and predictive views of business operations. Common functions of business intelligence technologies are reporting, online analytical processing, analytics, data mining, process mining, complex event processing, business performance management, benchmarking, text mining, predictive analytics and prescriptive analytics and are capable of handling large amounts of structured and sometimes unstructured data to help identify, develop and otherwise create new strategic business opportunities. The goal is to allow for the easy interpretation of these big data. Identifying new opportunities and implementing an effective strategy based on insights can provide businesses with a competitive market advantage and long-term stability. Source: Wikipedia Business intelligence (BI) is an umbrella term that includes the applications, infrastructure and tools, and best practices that enable access to and analysis of information to improve and optimize decisions and performance. Source: Gartner IT Glossary Related Term: Business Intelligence and Analytics [Previous Name]

A1.08.01 Data Warehouse (DW) A data warehouse (DW, DWH) is a system used for reporting, data analysis, and integrating data from one or more disparate sources to create a central repository of data. Data warehouses store current and historical data and are used for creating trending reports for senior management reporting such as annual and quarterly comparisons. The data stored in the warehouse is uploaded from the operational systems (such as marketing, sales, etc.). The data may pass through an operational data store for additional operations before it is used in the DW for reporting. Source: Wikipedia [Modified] Related Term: Enterprise Data Warehouse (EDW), Operational Data Store (ODS). Narrower Terms: Data Mart, Data Mining, Decision Support, Predictive Analysis.

A1.08.02 Knowledge Discovery Knowledge discovery is the science of finding patterns within sets of data. This data can consist of anything from boolean values (did he go left? did he go right?), sports scores, web visit statistics, laboratory analyses, or other scientific measurement. By itself data is simply measurement transformed into numbers and statistics, but inherent in the data is a lot of knowledge that can be put to good use. Also known as data mining, knowledge discovery has enjoyed great success in many lucrative fields, including: - Government surveillance - Customer relationship management - Digital mapping - Medical risk assessment - Market analysis - Educational research Source: SEMAG Related Term: Data Mining, Knowledge and Discovery Management [Previous Name]

A1.08.03 Business Intelligence Reporting Software and or services that supports analysis, reporting and statistics for Business Intelligence. Narrower Term: Ad hoc Reporting, Balanced Scorecard, BI Dashboard, On Demand Reporting, Mashup, Standardised / Canned.

A1.08.04 Operational Data Store (ODS) An operational data store (ODS) is a database designed to integrate data from multiple sources for additional operations on the data. Unlike a master data store the data is not passed back to operational systems. It may be passed for further operations and to the data warehouse for reporting. Because the data originates from multiple sources, the integration often involves cleaning, resolving redundancy and checking against business rules for integrity. An ODS is usually designed to contain low-level or atomic (indivisible) data (such as transactions and prices) with limited history that is captured "real time" or "near real time" as opposed to the much greater volumes of data stored in the data warehouse generally on a less-frequent basis. Source: Wikipedia


A1.08.05 Analytics Analytics is the discovery, interpretation, and communication of meaningful patterns in data. Especially valuable in areas rich with recorded information, analytics relies on the simultaneous application of statistics, computer programming and operations research to quantify performance. Analytics is multidisciplinary. There is extensive use of mathematics and statistics, the use of descriptive techniques and predictive models to gain valuable knowledge from data analysis. The insights from data are used to recommend action or to guide decision making rooted in business context. Thus, analytics is not so much concerned with individual analyses or analysis steps, but with the entire methodology. There is a pronounced tendency to use the term analytics in business settings e.g. text analytics vs. the more generic text mining to emphasize this broader perspective. There is an increasing use of the term advanced analytics, typically used to describe the technical aspects of analytics, especially in the emerging fields such as the use of machine learning techniques like neural networks to do predictive modelling Source: Wikipedia Related Term: Statistical Analytics [Previous Name] Narrower Term: Advanced Analytics

A1.08.06 Data Profiling Software that supports all forms of data analysis of extremely large, complex data sets (big data) that are manipulated for business consumption. Data profiling is the process of examining the data available in an existing data source (e.g. a database or a file) and collecting statistics and information about that data. The purpose of these statistics may be to: - Find out whether existing data can easily be used for other purposes. - Improve the ability to search the data by tagging it with keywords, descriptions, or assigning it to a category. - Give metrics on data quality including whether the data conforms to particular standards or patterns. - Assess the risk involved in integrating data for new applications, including the challenges of joins. - Assess whether metadata accurately describes the actual values in the source database. - Understanding data challenges early in any data intensive project, so that late project surprises are avoided. Finding data problems late in the project can lead to delays and cost overruns. - Have an enterprise view of all data, for uses such as master data management where key data is needed, or data governance for improving data quality.

A1.08.07 Data Lake A data lake is a storage repository that holds a vast amount of raw data in its native format until it is needed. While a hierarchical data warehouse stores data in files or folders, a data lake uses a flat architecture to store data.

A1.09 Business Continuity Software or services to support the business continuity. This includes Health and Safety Management, Disaster Management.

A1.09.01 Health & Safety Software and or services that support the security and physical well-being of an organisation's employees. Note: This is often part of an HR suite.

A1.09.02 Disaster Management Software and or services that support the emergency processes and recovery of the physical facilities and people in case of a disaster. Related Term: Emergency Management

A1.10 Unified Communications and Collaboration

Software and or services that support unified communications and collaboration.

A1.10.01 Calendaring Software and or services that provide users with an electronic version of a calendar, an appointment book, address book, and/or contact list.

A1.10.02 Communications Integration Software and or services that support the integration and coordination between different communication types that delivers the value of unified communications. It includes the ability to contact people with a range of different types of communications technology as appropriate for the situation and person, presence across different communication types, and follow-me functionality across different communication types.

A1.10.03 Electronic Meeting and Collaboration

Software and or services for sharing presentations, electronic whiteboards, screens with other meeting participants. These may be delivered bundled as part of video conferencing tools, or delivered separately. Note: Video Conferencing is a separate category under A1.10.09 Video. Narrower Term: Web Conferencing

A1.10.04 Email Services Software and or services for delivering, storing and managing e-mail. Electronic mail, commonly referred to as email or e-mail, is a method of exchanging digital messages from an author to one or more recipients. Modern email operates across the Internet or other computer networks. Email systems are based on a store-and-forward model. Email servers accept, forward, deliver and store messages.


A1.10.05 Event / News Management Software and or services that provides users with frequently updated content to which they subscribe.

A1.10.06 Instant Messaging Software and or services that provides Instant messaging (IM). These technologies support a form of communication over the Internet that offers quick transmission of text-based messages from sender to receiver. In push mode between two or more people using personal computers or other devices, along with shared clients, instant messaging basically offers real-time direct written language-based online chat. The user's text is conveyed over a network, such as the Internet. It may address point-to-point communications as well as multicast communications from one sender to many receivers. More advanced instant messaging allows enhanced modes of communication, such as live voice or video calling, video chat and inclusion of hyperlinks to media.

A1.10.07 Social Software Software that supports the capturing, storing and presentation of communication, usually written but may include audio and video as well. Interactive tools handle mediated interactions between a pair or group of users. They focus on establishing and maintaining a connection among users, facilitating the mechanics of conversation and talk.

A1.10.08 Syndication Management Software and or services that supports web feed formats used to publish frequently updated works, such as blog entries, news headlines, audio, and video, in a standardised format. This can include ATOM feeds, RSS etc.

A1.10.09 Video Software and or services for communicating with people using video. Video is the technology of electronically capturing, recording, processing, storing, transmitting, and reconstructing a sequence of still images representing scenes in motion. Narrower Term: On-demand Video Streaming, Video Chat, Video Conferencing.

A1.10.10 Voice Software for communicating with people using voice or audio channels.

A1.10.11 Voicemail Software for storing voicemail, delivering notifications and managing access to stored messages. Voice-mail is a computer based system that allows users and subscribers to exchange personal voice messages; to select and deliver voice information; and to process transactions relating to individuals, organisations, products and services, using an ordinary telephone.

A1.10.99 Other Unified Communications and Collaboration

Other Unified Communications and Collaboration software.


A1.11 Enterprise Content Management (ECM)

Software and or services that support Enterprise Content Management (ECM). ECM is an umbrella term covering document management, Web content management, search, collaboration, records management, digital asset management (DAM), workflow management, capture, and scanning. ECM is primarily aimed at managing the life-cycle of information from initial publication or creation all the way through archival and eventually disposal. Note: The underlying modules / applications components / services are found in "Records and Content Management".

A1.12 Business Process Management System (BPMS)

The Business Process Management System (BPMS) is considered a critical component of operational intelligence (OI) solutions to deliver real-time, actionable information. This real-time information can be acted upon in a variety of ways - alerts can be sent or executive decisions can be made using real-time dashboards. OI solutions use real-time information to take automated action based on pre-defined rules so that security measures and or exception management processes can be initiated. Note: BPM is viewed as a bridge between Information Technology (IT) and Business. Note: The components that make up BPMS are found in the application area "Business Process Management Tools". For the purposes of the ART we have taken this approach as while BPMS is a recognised application system or suite the components can be found in many other applications as core building blocks for those applications.

A1.13 Change Management Software and or services that support Change Management. Change Management is the process, tools and techniques to manage the people-side of change to achieve the required business outcome. It also incorporates the organisational tools that can be utilised to help individuals make successful personal transitions resulting in the adoption and realisation of change. - Process: Planning for change, Managing change, Reinforcing change. - Tools: Individual change model, Communications, Sponsorship, Coaching, Training, Resistance management. Related term: Business transformation and Improvement [Previous name]

A1.13.02 Project Portfolio Management Software and or services that support the centralized management of processes, methods, and technologies used by project managers and project management offices to analyse and collectively manage current or proposed projects based on numerous key characteristics. Broader Term: Programme Portfolio Management. Related Term: Portfolio Management [Previous Name], Investment Portfolio Management, Application Portfolio Management.

A1.13.03 Programme Management Software and or services that support Program Management. Programme Management is the process of managing several related projects. It provides oversight of the purpose and status of the projects in a program and can use this oversight to support project-level activity to ensure the program goals are met by providing a decision-making capacity that cannot be achieved at project level.

A1.13.04 Project Management Software and or services that provides capabilities for cost estimation and planning, scheduling, cost control and budget management, resource allocation, collaboration, communication, quality management and documentation or administration systems, which are used to deal with the complexity of large projects. Project management is the application of knowledge, skills, tools and techniques to project activities to meet project requirements. Project management is accomplished through the application and integration of the project management processes of initiating, planning, executing, monitoring and controlling, and closing.

A1.13.05 Requirements Management Software and or services used to document, analyse, trace, prioritize and agree on requirements for an initiative and communicate with the relevant stakeholders.

A1.14 Stakeholder Relationship Management

Stakeholder Relationship Management enables agencies to enter and group the people and institutions that have an interest in the agency, both internally and externally, and provide them with information about the agency. It gives the agency the means to track and manage what information and communication was provided to each stakeholder.

A1.16 Payroll Payroll Software that supports the administration, calculation and payment of employee wages, bonuses, and deductions including tax. Note: - Payroll often is a module in an HR suite [and was previously A1.03.05 Payroll] but is now at level 2 in this framework it can be standalone, and also part of an ERP, or an FMIS. Narrower Term: Salary Management, Benefits, Awards Was: A1.03.05 Payroll


A2 Common Line of Business Applications These are standard business applications within government to support the outward facing functions for managing touch-points with customers, partners and anyone who interacts with government.

Note: The applications found in this domain can also be used as ICT services or application components. Many commercial applications may contain elements of applications listed here and specific software solutions may offer a mix of these in one suite.

(A2)Common Line of Business Applications

(A2.09)

Case Management

(A2.01)

Product and Service Management

(A2.02)

Marketing

(A2.03)

Customer Relationship Management

(A2.04)

Partner Relationship Management

(A2.05)

Customer Accounting

(A2.06)

Customer Service

(A2.07)

Emergency Management

(A2.08)

Grants Management

2018-02-09: Was 'A2.06.04 Case Management'. promoted to level 2 as case management has wider use than Customer Service.


The following table lists all the elements for A2 Common Line of Business Applications.


A2 Common Line of Business Applications

These are standard business applications within government to support the outward facing functions for managing touch-points with customers, partners and anyone who interacts with government. Note: The applications found in this domain can also be used as ICT services or application components. Many commercial applications may contain elements of applications listed here and specific software solutions may offer a mix of these in one suite.

A2.01 Product and Service Management Software and or services that facilitate the creation and maintenance of products and services. Narrower Term: Product Management, Service Management.

A2.01.01 Product and Service Lifecycle Management

These applications are used to manage the lifecycle of a product from idea through to retiring a product. Features include: managing product requirements, modelling products, providing detailed product specifications, introducing new products, managing existing products, retiring products, forecasting, and implement marketing and offer strategies. Narrower Term: Product Lifecycle Management, Service Lifecycle Management

A2.01.02 Product and Service Catalogue Management

Product and Service Catalogue Management is the ability to create and maintain products that can be offered to customers. More specifically, it is the ability to explicitly model the structure of a product, then create and centrally manage the instances (or catalogue) of products based upon that structure. Products are not always discreet, single items. A product can be a number of components associated together and sold as a single purchasable entity. Therefore the product may be comprised of multiple components, tangible or intangible, such as services, features, devices, etc., that are assembled together to form a single sellable entity. Some of the components within a product will be enabled by shared / common / reusable services (e.g., location finder). Some of the components within a product will be enabled by shared / common / reusable resources. These underlying services and resources may be managed by different parts of the organisation. Narrower Term: Product Catalogue Management, Service Catalogue Management

A2.01.03 Product and Service Performance Management

These applications are used to manage the performance of products and services. Features include: campaign tracking, revenue reporting, cost reporting, capacity analysis, cost management, inventory optimisation, and sourcing determination. Narrower Term: Product Performance Management, Service Performance Management

A2.02 Marketing Software and or services to facilitate marketing and promotion of products and services.

A2.02.01 Sales and Marketing Management Software and or services to manage promotions of a product or service and capture of new business.

A2.02.02 Brand Management Software and or services to support the application of a trade name to a product or service as well as developing an awareness for the name

A2.02.03 Marketing Surveys Software and or services to support surveys to collect useful information from an organisation's customers.

A2.02.04 Campaign Management Software and or services to manage the lifecycle of marketing campaigns. Ideally this should leverage a single consistent view of the customer data. It provides design, execution, analytics and refinement.

A2.03 Customer Relationship Management

Software and or services to support customer relationship management (CRM). Software used to plan, schedule, and control the activities between the customer and the enterprise, both before and after a product or service is offered.

A2.03.01 Customer Contact and Profile Management

Software and or services to provide a comprehensive view of all customer interactions, including calls, e-mail, correspondence and meetings; also provides for the maintenance of a customer’s account, business and personal information. It can automatically synchronize suitable appointment dates, times, and methods for customer contact.

A2.03.02 Customer Order and Registration Management

Software and or services to support customer order and registration that allows order creation and tracking.

A2.03.03 Customer Account Management Software and or services to support the retention and delivery of a service or product to an organisation's clients.


A2.03.04 Customer Self-Management Software and or services to support customer self-management that can include: - Browsing the product and services catalogue. - Viewing product and services eligibility. - Shopping cart driven order management. - Reporting problems and troubleshooting. - Setting preferences, alerts and notifications. - Access to guidelines and tutorials. - Access to Call centre agents. - Account management. - Self registration to online services. - Service requests management. - Service request submission. - Service request amendment. - Service request closure. Related term: Self service

A2.03.05 Customer Problem Management Software and or services to support customer problem management that allows problem qualification & reception.

A2.03.06 Customer Analytics Software and or services that supports the analysis of an agency's customers, customer experiences, as well as the scoring of third-party information as it relates to customers. This also includes handling comments and feedback from customers.

A2.04 Partner Relationship Management Software and or services that supports the effective collaboration between an organisation and its business partners, providers, particularly members of the distribution chain (e.g. channel and alliance partners, resellers, agents, brokers and dealers) and other third parties that support operations and service delivery to an organisation’s customers; includes performance evaluation of partners, if necessary. This becomes increasingly important as government products and services are delivered through non-agency channels.

A2.04.01 Partner Contract and SLA Management

Software and or services that support partner contract and SLA management including features such as: issue reception, collection, analysis, violation management, and reporting.

A2.04.02 Partner Account Management Software and or services that support the retention and delivery of a service or product to an agency's partners.

A2.04.03 Partner Contact and Profile Management

Software and or services that provides a comprehensive view of all partner interactions, including calls, e-mail, correspondence and meetings; also provides for the maintenance of a customer’s account, business and organisational information.

A2.04.04 Partner Problem Management Software and or services that support partner problem qualification & reception features such as: ID validation, reception of problems from various sources, problem triage, and access to a complete partner problem history database. It also includes problem lifecycle management, problem resolution, problem reporting.

A2.04.05 Partner Analytics Software and or services for the analysis of an agency's partners, partner collaboration, partner engagement, as well as the scoring of partner information. This also includes handling comments and feedback from partners.

A2.05 Customer Accounting Software and or services for financial interactions with the customers of Government, business and individuals.

A2.05.01 Customer Financial Account Management

Software and or services that support financial account management for customer financial transactions with the agency.

A2.05.02 Customer Invoicing and Statement Management

Software and or services that support the management of customer invoices and statements produced by the agency.

A2.05.03 Customer Collections Software and or services that is concerned with financial transactions which include receipts and payments from / to Customers.

A2.05.04 Customer Debts and Recovery Software and or services that handles customer debts and recovery.


A2.06 Customer Service Software and or services that supports activities associated with providing an agency's customers with information regarding the agency's service offerings and managing the interactions and relationships with those customers. These tools can also be used by partners involved in providing service to customers.

A2.06.01 Contact Centre / Help Desk Software and or services that support activities associated with providing an agency's customers with information regarding the agency’s service offerings and managing the interactions and relationships with those customers.

A2.06.02 Contact Centre Management Software and or services that support Contact Centre Management. Contact Centre Management handles telephone sales and/or service to the end customers. Application services include; contact centre workforce management (including virtual operators that may work outside the call centre), queue management (including call backs where customer choose to be called back rather than wait, and automatic call distributing queuing (ACDQ), quality monitoring, analysis, and reporting.

A2.06.03 Contact Centre Knowledge Base Software and or services that support a Contact Centre Knowledge base. This provides instant, reliable answers to agents, for example process guides, product guides, frequently asked questions, escalation etc. Includes; search, ability to collaborate with other departments, and reporting on knowledge base usage.

A2.06.05 Online Interactive Assistance Software and or services that provide an electronic interface for customers receive assistance from customer service personnel.

A2.06.06 Online Guidelines Software and or services that provide an electronic interface to educate and assist customers.

A2.06.07 Translation Software Software and or services that supports or enables translation functionality. This does not include software for other purposes that can be used in multiple languages. Also known as multi-lingual support.

A2.06.08 Payment Systems Software and or services that support the use of credit cards or electronic funds transfer for payment and collection of products or services. Examples: PayPal, cash, Bitcoin, etc. Also known as point of sale systems (POS).

A2.07 Emergency Management Software that supports delivery of emergency management services.

A2.07.01 Emergency Management Information System (EMIS)

Software that supports emergency management information collection and management. For continuity and inter-operability between emergency management stakeholders, EMIS supports an infrastructure that integrates emergency plans at all levels of government and non-government involvement for all four phases of emergencies. Common features of the software include Geographic Information Systems (GIS), weather and plume modelling, resource management, and Command, Control, and Communication (C3) functions. Related Term: Disaster Management

A2.07.02 Hospital Incident Command System (HICS)

A Hospital Incident Command System (HICS) is an incident command system (ICS) designed for hospitals and intended for use in both emergency and non-emergency situations. It provides hospitals of all sizes with tools needed to advance their emergency preparedness and response capability - both individually and as members of the broader response community.

A2.07.03 Emergency Communications System (ECS)

An Emergency Communication System (ECS) is any system (typically, computer-based) that is organised for the primary purpose of supporting one-way and two-way communication of emergency messages between both individuals and groups of individuals. These systems are commonly designed to integrate the cross-communication of messages between varieties of communication technologies, forming a unified communication system intended to optimize communications during emergencies.

A2.08 Grants Management Software that supports grants management, where a grant of money is made to an organisation or individual for a specific purpose.

A2.08.01 Grant Receipt of Proposals Portal for the receipt of grant proposals.

A2.08.02 Grant Administration Software that supports the administration and monitoring of grants.

A2.08.03 Grant Review Software that supports the review process for grants.

A2.08.04 Grant Announcement Portal that posts and publishes announcements of grants to be funded.

A2.09 Case Management Software and or services that support the management of the life cycle of a particular claim or investigation within an agency to include creating, routing, tracing, assignment and closing of a case as well as collaboration among case handlers. Note: The terms case management is fairly generic, and we can find specific instances of case management for example order management, problem management, grant management etc so Case Management was promoted to level 2. Was: A2.06.04 Case Management.


A3 End User Computing

The End User Computing application domain brings together the various applications and ICT services needed to support a range of end user computing devices, from traditional PC's through to smart phones and tablets and personalisation services.

The following table lists all the elements for A3 End User Computing.


A3 End User Computing The End User Computing application domain brings together the various applications and ICT services needed to support a range of end user computing devices, from traditional PC's through to smart phones and tablets and personalisation services.

A3.01 End User Configuration Management

Software and or services that controls the hardware and software environments, as well as documents of end users (individuals and or organisations). Note: Security aspects are covered under "Security Services".

A3.01.01 Application Compatibility Testing Tool to automate the analysis of applications to determine compatibility with device operating systems.

A3.01.02 Application Deployment Mechanism to install packaged applications to workstations and other end user devices running locally installed applications. See also "Packaging Tools".

A3.01.03 Application Discovery Application Discovery is a tool that can be used to discover which applications are being used within an agency. Discovery tools may be agent-less or require agents and may use a variety of means to discover applications.

A3.01.04 OS Deployment The OS Deployment tools are used to deploy (patched) operating system images. See also "Packaging Tools".

A3.01.05 Packaging Tools Tools or solution set for packaging applications for delivery to an end user device. See also" OS Deployment" and "Application Deployment".

A3.01.06 Patch Manager Tools to automatically remediate manage installation of and report on operating system and application software patches. The applicability of this functional component is mainly focussed on fat device desktop and fat device laptop.

A3.01.07 Persona Manager Persona Manager tools maintain information relevant to a particular user (settings, preferences, and configuration) and determine how it is managed across devices and contexts.

(A3)End User Computing

(A3.01)

End User Configuration Management

(A3.02)

End User Tools

(A3.03)

Mobile Applications

(A3.04)

Productivity Suite

(A3.05)

Graphics and Multimedia


A3.01.08 Policy Compliance Manager Policy Compliance Manager tools monitor configuration against policy for compliance and initiates action if the configuration does not comply with the relevant policy. Note: Policy Compliance Manager, Policy Manager and Security Configuration Manager are often, though not always, implemented using the same software technology.

A3.01.09 Policy Manager Tools to manage deployment and enforcement of policy on the configuration and settings of devices and their operating systems. NB: Policy Compliance Manager, Policy Manager and Security Configuration Manager are often, though not always, implemented using the same software technology.

A3.01.10 Security Configuration Manager Tools to manage, report on and enforce required security configuration of client devices. NB: Policy Compliance Manager, Policy Manager and Security Configuration Manager are often, though not always, implemented using the same software technology.

A3.01.11 Self Service Application Store A Self-Service App Store allows users to self-select, and automatically provision applications onto their devices. This may include workflow functionality to allow for line-management approval or to control expenditure, license consumption and financial approval.

A3.01.12 User Data Manager User Data Manager tools provide access to users? files regardless of their environment. This functional building block does NOT guarantee off-line access, but may deliver that as an additional feature.

A3.01.13 Virtualisation Compatibility Testing Tool to automate the analysis of applications to determine compatibility with application virtualisation. Note: these tools are often implemented in combination with Application Compatibility Testing.

A3.01.14 Virtual Desktop Manager Virtual Desktop Manager tools manage the allocation and configuration of virtual desktops and virtual desktop pools to PC's and other end user devices.

A3.01.15 Privacy and Policy Enforcement Management

Tools to manage, report on, and enforce required privacy and policy configuration of client devices.

A3.01.99 Other End User Configuration Management

Other End User Configuration Management tools.

A3.02 End User Tools End User Tools consists of all of the utility applications that are available for use by the users of the Standard Operating Environment (SOE). There will be a variance of the utilities required between devices. In addition, some operating systems deliver these capabilities as part of the operating system’s native capabilities. Therefore care needs to be taken not to merely provide a utility because it is in this list, but instead to ensure that these capabilities are delivered by the complete SOE while minimising the number of utilities delivered as separate applications. Note: Productivity, Mobile Applications, Unified Communications and Collaboration, and Visualisation have specific application areas and are not include here.

A3.02.01 Additional Language Support Software and or services that support additional languages. This gives the use the ability to enter, display and spell-check additional languages as required. Maori should be installed as a default.

A3.02.02 Audio Tools Audio Tools are required to adjust and tune audio components installed in the devices. There are some tools resident in the OS, but advanced functionality can be gained from using the native tools that are provided with the audio components.

A3.02.03 File Compression and Extraction File compression software and or services. File Compression is the capability to compress files for storage or transit and extract files that have been compressed. There are formats that are commonly used such as ZIP, which require an additional software component or could be supported natively in the Operating System being run.

A3.02.04 File Screen Saver An application that displays an image on and end user device display after a pre-set time to hide applications and the information they display when running on that device to minimise the opportunity for unauthorised access. Screen Savers include the ability to auto-lock a device.

A3.02.05 Display Tools Display Tools are required to attach additional monitors / projectors and to change resolution states etc. Some display tools are resident in the OS, but advanced functionality can be gained by using the native tools that are provided with the display adapter.

A3.02.06 Legacy Browser Support Legacy Browser Support services provide the ability to display web applications that require legacy browsers, for example some applications require Internet Explorer 6 proprietary extensions.


A3.02.07 Document Reader A document reader is software required to read documents such as PDF files. This is a basic tool that does not allow editing of the document. This software is subject to regular version updates which can be problematic for users and cause issues in locked down environments. Because of this, the software is a perfect candidate for Application Virtualisation technology.

A3.02.08 Power Management Tools Power Management Tools allow changes to be made to the power scheme on the device. This can reduce the energy consumption on the device or ensure power saving doesn't affect expected operation. As an example, users would turn off hibernation if they were going to be doing a presentation. Power settings have the potential to save an organisation a substantial amount of money, when the savings per device are multiplied by the number of devices installed.

A3.02.09 Runtime Environment Runtime Environments (also known as Development frameworks) such as a Java runtime environment or .NET are required to allow applications or applets based on those frameworks to execute. Incompatibility issues can arise when different versions of the frameworks are required on a single device. This can be resolved using Application Virtualisation Client and its associated backend technologies, as each virtual bubble forms an isolation barrier.

A3.02.10 Web Application Frameworks Web Application Frameworks are required to run web application components developed in that framework. Examples of these frameworks are Adobe Flash and Air or Microsoft Silverlight.

A3.02.11 Web Browser Web Browser provides the interface to all web based content, be it on the Internet or Intranet. Often the delivery of web applications is underestimated because of a perception that it’s simply browser based. Web applications often require additional applets or plug-ins for the application to work or to be displayed for the visually impaired. These factors need to be considered to ensure usability and security is not compromised.

A3.02.12 Secure Remote Access Solution providing secure access from outside the boundaries of the agency to a user’s end user computing environment. Enables authorised individuals to remotely access the user interface of a computing resource for the purpose of installation, configuration, auditing or process management.

A3.02.99 Other End User Tools Other end user tools without a defined application category.

A3.03 Mobile Applications Mobile applications are deployed on mobile devices such as smart phones and tablets.

A3.04 Productivity Suite Productivity Suite is the core suite of bundled applications that support the most commonly used office activities such as; Word processor, Spreadsheet, Email clients, Presentation software, Drawing tools, Publishing software, and Database application.

A3.04.01 Image Manipulation Software used to create or edit images. Includes: vector and raster drawings, colour manipulation, image filtering, etc.

A3.04.02 Email Clients Email Clients also known as Mail User Agents - MUA.

A3.04.03 Presentation Software used to display information, normally in the form of a slide show.

A3.04.04 Publishing Software used to publishing.

A3.04.05 Spreadsheet Software used to create, update and/or read a two-dimensional matrix of rows and columns.

A3.04.06 Word Processing Software used for the composition, editing, formatting and/or possibly printing of print material.

A3.04.07 Follow-me Printing A service for sending documents to a print queue that can be accessed by any networked printer when the user authenticates with that printer.

A3.04.99 Other Productivity Suite Other Productivity Suite software that does not have an existing application category.

A3.05 Graphics and Multimedia Software and or services that supports visualisation.

A3.05.01 Charting Software to develop graphical representation of data in which the data is represented by symbols such as bars, lines, slices, dots, size, etc.

A3.05.02 Computer Aided Design (CAD) Software that supports the use of computer technology for the process of design and design-documentation and includes software or environments which provide the user with input-tools for the purpose of streamlining design processes; drafting, documentation, and manufacturing processes.

A3.05.04 Idea Mapping Software that is used to create diagrams of relationships between concepts, ideas or other pieces of information.

A3.05.05 Multimedia Software to manage, develop and manipulate content from a combination of different content forms such as text, audio, still images, animation, video, or interactivity.

A3.05.06 Photographic Software that supports the capture, storage, and manipulation of photographic images.

A3.05.07 Video Editors Software that enables a person to manipulate animated or video visual images on a computer.


A3.05.99 Other Visualisation Applications Other visualisation software that does not have an existing application category.

A4 Data and Information Management In the Data and Information domain we have software and or services that support management of government data and information and the alignment with standards, quality initiatives, good practice accessibility, etc.

(A4)Data and Information Management

(A4.01)

Data and Information Architecture

(A4.03)

Data Governance

(A4.05)

Data Protection

(A4.06)

Database Management

(A4.07)

Additional Data and Information Services

(A4.08)

Geospatial Information System (GIS)

(A4.09)

Content Management System

(A4.10)

Web Content Management

GEA-NZ v3.2: "A4.02 Data and Information Interoperability" removed as it was duplicated in "A8.02 Data Interoperability".

GEA-NZ v3.2: "A4.04 Data Quality Management" moved to 'A4.03 Data Governance' as "A4.03.05 Data Quality Management"


The following table lists all the elements for A4 Data and Information Management.


A4 Data and Information Management

Software and or services that support management of government data and information and the alignment with standards, quality initiatives, good practice accessibility, etc. This includes the development, execution and supervision of plans, policies, programmes and practices that control, protect, deliver and enhance the value of data and information assets. Related Term: Data Management, Information Management, Information and Records Management, Data and Information Management Services [Previous name]. Narrower Term: Records Management

A4.01 Data and Information Architecture Software and or services that support data and information architecture which is composed of models, policies, rules or standards that govern which data is collected, and how it is stored, arranged, integrated, and put to use in data systems and in organisations. Data and Information is one of the architecture dimensions that form the pillars of an enterprise architecture or solution architecture. Related Term: Data Architecture, Information Architecture

A4.01.01 Data and Information Categorisation

Software and or services that supports the creation and maintenance of relationships between data entities, naming standards and categorisation and allows classification of data and information into specific layers or types to support an organisation.

A4.01.02 Data Modelling Software and or services to support data and information modelling to define and analyse data requirements needed to support the business. Related Term: Information Modelling, Data and Information Modelling [Previous Name].

A4.01.03 Data Representation Languages Software languages used for data representation, such as XML, JSOW, SDL, GSML and other markup languages.

A4.01.04 Metadata Management Software that supports the maintenance and administration of data that describes data.

A4.01.05 Metadata Extraction Software and or services that support metadata extraction. It includes: - Automatically extracts preservation-related metadata from digital files. - Output metadata in a standard format (XML) for use in preservation activities. Can be used for preservation data processes and activities, resource discovery and other. Was: A4.02.05 Metadata Extraction

A4.01.06 Records Linking / Association Software and or services that support the correlation between logical data and information sets. Was: A4.02.06 Records Linking / Association

A4.03 Data Governance Software and or services that supports data governance. Data governance encompasses the people, processes, and information technology required to create a consistent and proper handling of an organisation's data across the business enterprise. It is a set of processes that ensures that important data assets are formally managed throughout the enterprise. Data governance ensures that data can be trusted and that people can be made accountable for any adverse event that happens because of low data quality. It is about putting people in charge of fixing and preventing issues with data so that the enterprise can become more efficient. Data governance also describes an evolutionary process for a company, altering the company’s way of thinking and setting up the processes to handle information so that it may be utilised by the entire organisation. It’s about using technology when necessary in many forms to help aid the process. Related Term: Data and Records Governance [Previous Name] Narrower Term: Controlled Vocabulary

A4.03.01 Data Lifecycle Management Software and or services that support a policy-based approach to managing the flow of an information system's data throughout its life cycle: from creation and initial storage to the time when it becomes obsolete and is deleted.


A4.03.02 Master Data Management Software and or services that supports a set of processes and tools that consistently define and manage the non-transactional data entities of an organisation, which may include reference data. It has the objective of providing processes for collecting, aggregating, matching, consolidating, quality-assuring, and distributing such data throughout an organisation to ensure consistency and control in the ongoing maintenance and application use of this information. Narrower Terms: Data Catalogue, Data and Information Catalogue, Information Asset Catalogue, Information Asset Register

A4.03.05 Data Quality Management Software and or services to ensure that data are fit for their intended uses in operations, decision making and planning and to ensure internal consistency of the data. Narrower term: Parsing and Standardisation, Data Cleansing, Matching, Profiling, Monitoring, Data Enrichment. Was: A4.04

A4.03.06 Data Quality Assurance Software and or services that support data quality assurance. Data quality assurance is the process of profiling the data to discover inconsistencies and other anomalies in the data, as well as performing data cleansing activities (e.g. removing outliers, missing data interpolation) to improve the data quality. These activities can be undertaken as part of data warehousing or as part of the database administration of an existing piece of applications software. Was: A4.04.04

A4.05 Data Protection Software and or services that support data security and protection. Note: Other aspects of data security are covered under the application domain "Security Services".

A4.05.01 Data Access Levels Software and or services that support adding access levels to data entities, attributes and record level content.

A4.05.02 Data Archiving Software and or services that support data archiving. Data archiving is the process of moving data that is no longer actively used to a separate data storage device for long-term retention. Data archives consist of older data that is still important and necessary for future reference, as well as data that must be retained for regulatory compliance. Data archives are indexed and have search capabilities so that files and parts of files can be easily located and retrieved. Note: Data archives are often confused with data backups, which are copies of data. Data backups are used to restore data in case it is corrupted or destroyed. In contrast, data archives protect older information that is not needed for everyday operations but may occasionally need to be accessed.

A4.05.03 Data Erasure Software and or services that support data erasure (also called data clearing or data wiping) is a software-based method of overwriting the data that aims to completely destroy all electronic data residing on a hard disk drive or other digital media. Permanent data erasure goes beyond basic file deletion commands, which only remove direct pointers to the data disk sectors and make the data recovery possible with common software tools. Unlike degaussing and physical destruction, which render the storage media unusable, data erasure removes all information while leaving the disk operable, preserving IT assets and the environment. New flash memory-based media implementations, such as solid-state drives or USB flash drives can cause data erasure techniques to fail allowing remnant data to be recoverable. Related Term: Data Destruction.

A4.05.04 Data Masking Software and or services that support the masking of data entities at attribute and record level to support privacy of information such as a credit card number, passwords, and for the creating of test data.

A4.05.05 Data Replication Software and or services that support the replication of data so that data is not lost in the event of a failure of the storage hardware. This is related to but different from backup and restore.

A4.06 Database Management Software and or services that support database management.

A4.06.01 Database Management System (DBMS)

Database management systems (DBMSs) are computer software applications that interact with the user, other applications, and the database itself to capture and analyse data. A general-purpose DBMS is designed to allow the definition, creation, querying, update, and administration of databases. Note: Database Management System covers database, administration, tuning, backup, recovery, upgrades, etc.

A4.06.02 Database Administration Registering and monitoring users, enforcing data security, monitoring performance, maintaining data integrity, dealing with concurrency control, and recovering information if the system fails.


A4.06.03 Database Backup and Recovery Software and or services that creates copies of databases which may be used to restore the original after a data loss event or to restore and stabilize data sets to a consistent, desired state.

A4.06.04 Database Tuning Database maintenance includes software tools and or services to monitor, tune, upgrade, migrate and optimise databases. It also includes tablespace maintenance.

A4.07 Additional Data and Information Services

Software and or services that supports data and information services. Note: "Enterprise Content Management" is in the "Corporate Applications" domain. "Data Mining" and "Data Profiling" are covered in the "Business Intelligence (BI)" in area A1.

A4.07.02 Digital Rights Management Software and or services that support the claim and ownership of intellectual capital and artefacts belonging to an organisation.

A4.07.03 Digital Conversion Software that supports scanning and the interpretation into digital formats. Depending on the reason for an image being scanned there may be special requirements as to the quality of the image. For example scanning a tax invoice does not need to be high quality whereas LINZ scanning a map for a record of a property needs to have a very high quality image. Includes 3D scanning of objects.

A4.07.04 Enterprise Search Software and or services that support the search information within an enterprise (though the search function and its results may still be public). Enterprise search can be contrasted with web search, which applies search technology to documents on the open web, and desktop search, which applies search technology to the content on a single computer. Enterprise search systems index data and documents from a variety of sources such as: file systems, intranets, document management systems, e-mail, and databases. Many enterprise search systems integrate structured and unstructured data in their collections. Enterprise search systems also use access controls to enforce a security policy on their users.

A4.07.05 Optical Character Recognition (OCR)

Software that supports scanning and the interpretation of images into digital formats. Depending on the reason for an image being scanned there may be special requirements as to the quality of the image. For example scanning a tax invoice does not need to be high quality whereas LINZ scanning a map for a record of a property needs to have a very high quality image. Includes 3D scanning of objects.

A4.07.06 Data and Information Analytics Software and or services to support text, voice, video, sound analytics. This involves information retrieval, lexical analysis to study word frequency distributions, pattern recognition, tagging/annotation, information extraction, data mining techniques including link and association analysis, visualisation, and predictive analytics. The overarching goal is, essentially, to turn text, voice, video, sound into data for analysis, via application of natural language processing (NLP) and analytical methods. Narrower term: Web Analytics; the measurement of the behaviour of visitors to a website. Web traffic is measured to see the popularity of web sites and individual pages or sections within a site.

A4.07.07 Version Control Software and or services to support version control. Most commonly run as stand-alone applications, but revision control is also embedded in various types of software such as word processors and spreadsheets. Note: It is also covered by the "Content Control" application category within the "Content Management" application area and in various content management systems.

A4.07.99 Other Data and Information Services

Other Data and Information Services without a defined application category.

A4.08 Geospatial Information System (GIS)

Software and or services that supports geospatial information. - Information system dealing with information concerning phenomena associated with a location relative to the Earth. - Service that transforms, manages, or presents geographic information to users. Related term: Geographic Information System, Spatial Data Infrastructure, Spatial Knowledge Infrastructure. Was: Geospatial Information Source: AS/NZS ISO 19101.1:2015 Geographic information - Reference model - Part 1: Fundamentals ]

A4.08.01 Cartography Software that supports the creation of maps. Includes hydrography.

A4.08.02 Collection and Manipulation of Satellite and Aerial Photographs

Software which supports the modification or analysis of imagery information.


A4.08.03 Geometric Networks Software that supports modelling of common networks and infrastructures found in the real world. Water distribution, electrical lines, gas pipelines, telephone services, and water flow in a stream are all examples of resource flows that can be modelled and analysed using a geometric network.

A4.08.04 Geocoding (Forward Geocoding) Software that supports Geocoding. This is sometimes called forward geocoding and is the process of enriching a description of a location, most typically a postal address or place name, with geographic coordinates from spatial reference data such as building polygons, land parcels, street addresses, ZIP codes (postal codes) and so on. Geocoding facilitates spatial analysis using Geographic Information Systems and Enterprise Location Intelligence systems.

A4.08.05 Geospatial Data Analysis Supports the application of statistical analysis and other informational techniques to geographically based data. Also known as Geostatistics.

A4.08.06 Geospatial Data Collection Software that supports the collection or management of geospatial information. Includes hydrographic data collection

A4.08.07 Hydrological Modelling Software that supports Hydrologic modelling. They are primarily used for hydrologic prediction and for understanding hydrologic processes.

A4.08.08 Imagery Software that supports the collection of information via satellite and aerial photography.

A4.08.09 Reverse Geocoding Software that supports Reverse Geocoding. Reverse geocoding is the process of enriching geographic coordinates with a description of the location, most typically a postal address or place name.

A4.08.10 Spatial Data Infrastructure Software that supports linking online spatial data and allowing it to be discovered, accessed and used.

A4.08.11 Topological Modelling Software that supports modelling utilising the topological properties of spatial objects. Topology is one of the mechanisms to describe relationships between spatial objects. Thus, it is the basis for many spatial operations.

A4.08.12 Spatial Data Modelling Software that supports modelling of spatial data. This includes: - Vector data representation as discrete points, lines, and polygons. - Raster data representation of landscapes as a rectangular matrix of square cells. - Projections - Tiling. It supports the Geo Service Standards.

A4.09 Content Management System A content management system (CMS) is application software and or services that allow publishing, editing and modifying, organising, and deleting content. Content management systems are generally replacing the older Document Management Systems (DMS), and Enterprise Content Management (ECM) is in turn subsuming Content Management. Related Term: Records Management System (RMS), Document Management System (DMS), Enterprise Content Management System (ECMS).

A4.09.01 Content Categorisation Software and or services that support the categorisation of content, both electronic and physical, and artefacts using metadata for aggregation. Related Term: Auto Categorisation

A4.09.02 Content Control Software and or services that support the control of content and artefacts used by an organisation and its stakeholders. Content control is used to put in place defined processes around the development, publication and withdrawal/retirement of documents.

A4.09.03 Content Library On line repository of content, documents, letters, speeches, web sites, books, or articles to be shared.

A4.09.04 Content Publishing Software and or services that supports the collection, managing, and publishing of information in any form or medium, including intranet, internet, etc. When stored and accessed via computers, this information has come to be referred to, simply, as content or, to be precise, digital content. Digital content may take the form of text (such as electronic documents), multimedia files (such as audio or video files), or any other file type that follows a content lifecycle requiring management.


A4.09.05 Content Workflow Software and or services that supports routing documents (or pages) between users responsible for working on them. This is often used to implement a review and sign-off process for new or updated content. Workflow is the management of who exactly is working on a ContentElement or ContentTemplate, what exactly they are doing, and when. The workflow reporting system sends messages to others working on a page, with details of actions taken. Different workers can have assigned roles. Notification may be sent to the roles rather than the individuals. Typical roles are writers, copy editors, editors, illustrators, graphic artists, rights clearance managers, lawyers, (multilingual) localizers, and publishers. Note: This is specialised workflow software. Generic workflow software and services can be found in the ICT Service Components domain.

A4.10 Web Content Management Web Content Management is software and or services that provide website authoring, collaboration, and administration tools designed to allow users with little knowledge of web programming languages or mark-up languages to create and manage website content with relative ease. A robust Web Content Management System provides the foundation for collaboration, offering users the ability to manage documents and output for multiple author editing and participation. Note: Enterprise Content Management Systems may include Web Content Management but often this has been considered a specialist application alongside Content Management Systems so it has its own category in this taxonomy.

A4.10.01 Web Design and Maintenance Web design encompasses many different skills and disciplines in the production and maintenance of websites. The different areas of web design include web graphic design; interface design; authoring, including standardised code and proprietary software; user experience design; and search engine optimization. Often many individuals will work in teams covering different aspects of the design process, although some designers will cover them all.[1] The term web design is normally used to describe the design process relating to the front-end (client side) design of a website including writing mark up. Web design partially overlaps web engineering in the broader scope of web development. Web designers are expected to have an awareness of usability and if their role involves creating mark up then they are also expected to be up to date with web accessibility guidelines. Source: Wikipedia

A4.10.02 Website Presentation To be defined - definitions for Web based presentations tools which may not be what was intended here.


A5 Identity and Access Management These are the enterprise functions or corporate functions that are common to all organisations. These functions are performed by business organisations, government organisations, and other types of organisations.

The following table lists all the elements for A5 Identity and Access Management.


A5 Identity and Access Management Services

Software and services to support Identity and access management (IAM), identifying, controlling and auditing interactions with government assets. This enables the security discipline of authorised access to the right resources at the right times for the right reasons.

A5.01 Identity Governance and Accountability

Software and or services at which entities create, monitor, and enforce rules, guidelines, and requirements for executing the IDESG functional elements across communities or actors. Unlike the administration and operations layer, the governance and accountability layer is specifically intended to address cross entity efforts rather than enterprise or internal governance.

A5.01.01 Policy / Rule / Requirements Development

Software and or services for creating a trust framework including identifying or adopting rules, requirements, and policy for governing the use of identities and identity technology within a specific community.

A5.01.02 Identity Accreditation Software and or services for the evaluation, approval and formal recognition that an entity is capable of carrying out certification or assessment activities for a trust framework.

A5.01.03 Identity Certification Software and or services for the evaluation, approval and formal recognition that an entity is capable of carrying out certification or assessment activities for a trust framework of assessing, validating, and determining that a product or service provider meets the defined requirements of a trust framework.

A5.01.04 Identity Reporting Software and or services to support identity performance reporting; such as revocation lists, user accounts list, incidents, recovery, redress etc.

A5.01.05 Role / Persona Engineering & Modelling

Software and or services to support modelling of personas and roles within an organisation.

A5.01.06 Separation of Duties (SoD) Compliance

Software and or services to enforce separation of duties for tasks where additional fail safes are required or advisable to prevent loss due to fraud or mistake.

(A5)Identity and Access Management Services

(A5.01)

Identity Governance and Accountability

(A5.02)

Identity Administration and Operations

(A5.03)

Authentication Service

(A5.04)

Authorisation and Access Management

Service

(A5.05)

Directory Service

(A5.06)

Identity Functional Core Components

(A5.07)

Identity Interoperability(A5.99)

Other Identity Service


A5.01.07 Identity Conformance Software and or services to support the process of reviewing and collecting evidence of an entity’s conformance with enterprise rules, policies, and requirements.

A5.02 Identity Administration and Operations

Software and or services to administer and support the basic operations and functions that may occur in online identity-related interactions grouped into core operations. Not all elements will be invoked in every identity interaction, and some may be invoked multiple times. While logically some functions are likely to occur before or after others, there is no explicit order specified in the model.

A5.02.01 Role Management Software and or services providing centralised or federated role management function to a single set of organisations and services regardless of geographic location.

A5.02.02 Identity Workflow Design and Implementation

Software and or services to design and implement workflow solutions to Identity & Access Management requirements.

A5.02.03 Identity Provisioning Software and or services supporting the provisioning of approved identities and access controls such as the creation of accounts on target enterprise applications in response to a user profile.

A5.02.04 Identity Updates (Periodic & Event Based)

Software and or services by which an entity updates accounts, attributes, credentials, and other identity information to determine eligibility for an entitlement; may be periodic in nature or event based (e.g., marriage, end of subscription, etc.), including revocation.

A5.02.05 Identity Recovery Software and or services to support identity recovery; this includes the continuity of credentials, attributes, and other identity services following a security or privacy event (e.g., data breach, disruption of services, etc.) All ecosystem participants are responsible for executing recovery activities.

A5.02.06 Identity Redress Software and or service that support reconciliation of errors that occur during the operations and processes of an identity system. All ecosystem participants must execute redress activities.

A5.02.07 Identity Assurance Software and or services to determine, with some level of certainty, that a claim to a particular identity by some entity can be trusted to be the claimant's "true" identity.

A5.02.08 Identity Entitlement & Access Audit Software and or services to enable an organisation to certify users, and support the process of reviewing and collecting evidence of an entity’s conformance with the rules, policies, and requirements for a trust framework or community. This is essentially an audit of the entitlements that personnel hold to ensure they do not have entitlements that they should not hold.

A5.03 Authentication Service Software and or services used to confirm the identity of a user.

A5.03.01 Adaptive Authentication Software and or service that support a risk based approach to authentication where the complexity of the authentication "challenge" is determined by the risk of the transaction. Factors considered in determining the risk include the profile of the user, connection type, IP geolocation and keystroke dynamics)

A5.03.02 Authentication Brokerage Software and or service that support centralised responsibility for authenticating the consumer and issuing them with a credential that can be used to access services.

A5.03.03 Multi-factor Authentication Software and or service that supports multi-factor authentication that requires the presentation of two or more of the three authentication factors, being the knowledge factor (something the user "knows), the possession factor (something the user "has") and the inherence factor (something the user "is").

A5.03.04 Out of Band Authentication Software and or service that supports authentication performed over a network or channel separate from the primary network or channel - used in multi-factor authentication. An example of this is sending users a one-time password via their cell phone, which is required to complete the authentication process.

A5.03.05 Biometrics Software and or service that supports biometrics; biometric identifiers are the distinctive, measurable characteristics used to label and describe individuals. Biometric authentication is used as a form of identification and access control. It is also used to identify individuals in groups that are under surveillance. Biometric identifiers are often categorised as physiological versus behavioural characteristics. - Physiological characteristics are related to the shape of the body. Examples include, but are not limited to fingerprint, palm veins, face recognition, DNA, palm print, hand geometry, iris recognition, retina and odour/scent. - Behavioural characteristics are related to the pattern of behaviour of a person, including but not limited to typing rhythm, gait, and voice.


A5.04 Authorisation and Access Management Service

Software and or services to provide authorised access management to resources.

A5.04.01 Enterprise Single Sign On (SSO) Software and or services to store and transmit encrypted user credentials across local and network boundaries, including domain boundaries. SSO stores the credentials in the credential database. Because SSO provides a generic single sign on solution, middleware applications and custom adapters can take advantage of SSO to securely store and transmit user credentials across the environment. End users do not have to remember different credentials for different applications.

A5.04.02 Federation Service Software and or services to maintain the relationship between identity providers and service providers whereby authentication is performed by the identity provider and is then used by service providers to make authorisation decisions.

A5.04.03 Access Control Software and or services to support provisioning of user access rights based on their assumed roles or attributes.

A5.04.04 Web Access Management Software and or services to control access to web resources, providing authentication management, policy based authorisations, and reporting services.

A5.04.05 Web Single Sign On (SSO) Software and or services to support users to access resources over the internet using a single set of user credentials. The user provides a set of credentials to log onto different web sites that belong to different organisations.

A5.04.06 Delegation Service Software and or services to support a delegation service, such as where consent is provided for legal or financial liable transactional activities.

A5.05 Directory Service Software and or services that store, organize, and provide access to information held within a directory, which can be considered a map between objects and information about those objects, typically described as attributes. Attributes of objects can be made secure so that only users with the available permissions are able to access it. Examples of directory services include Active Directory, Open LDAP, e-Directory and other implementations of the X.500 ISO/IEC 9594 directory services standards.

A5.06 Identity Functional Core Components

Software and or services that provide the basic identity operations that may occur in online identity-related interactions grouped into core operations. Not all elements will be invoked in every identity interaction, and some may be invoked multiple times. While logically some functions are likely to occur before or after others, there is no explicit order specified in the model.

A5.06.01 Registration Components Components that support the process that establishes a digital identity for the purpose of issuing or associating a credential. Narrower Term: Identity Application, Registration Attribute Control, Registration Attribute Verification, Registration Decision.

A5.06.02 Credentialing Components Components that support the process to bind an established digital identity with a credential. Narrower Term: Credential Provisioning, Token Binding, Attribute Binding, Identity Revocation

A5.06.03 Authentication Components Components that support the process determining the validity of one or more credentials used to claim a digital identity. Narrower Term: Authentication Request, Credential Presentation, Credential Validation, Authentication Decision.

A5.06.04 Authorisation Components Components that support the process of granting or denying specific requests for access to resources. Narrower Term: Authorisation Request, Authorisation Attribute Control, Authorisation Attribute Verification, Authorisation Decision.

A5.06.05 Transaction Intermediation Processes and procedures that limit linkages between transactions and facilitate credential portability. Narrower Term: Identity Blinding, Identity Pseduonymisation, Transaction Consent.

A5.07 Identity Interoperability Software and services to support processes and procedures that limit linkages between transactions and facilitate credential portability. This allows entities in the identity ecosystem establish and maintain the ability to communicate and exchange identity data.

A5.07.01 Identity Mapping Software and or service to support the mapping of different identities on various platforms, user repositories and applications to a single identity. It can be used with a range of authentication mechanisms to allow one repository to authenticate the user and for this to be passed to another platform for authorisation even when the identities differ.

A5.07.02 Identity Credential Exchange Software and or service to support the process of facilitating technical (including semantic) interoperability to support credential portability between participants within a specific community or across the identity ecosystem.

A5.07.03 Identity Policy / Rule Exchange Software and or service to exchange policy and rules for governing the use of identities and identity technology.

A5.07.04 Identity Translation Software and or service by which one identity format is translated to another for consumption by different entities involved in a transaction.

A5.99 Other Identity Service Other identity service and or software without a specific application area or application category.


A6 Security Services The Security Services domain defines the methods of protecting information and information systems from unauthorised access, use, disclosure, disruption, modification or destruction in order to provide integrity, confidentiality and availability. That is, protecting the assets at rest and in-transit.

The following table lists all the elements for A6 Security Services.


A6 Security Services The Security Services domain defines the methods of protecting information and information systems from unauthorised access, use, disclosure, disruption, modification or destruction in order to provide integrity, confidentiality and availability. That is, protecting the assets at rest and in-transit.

A6.01 Encryption Services Software and or services that ensure network protection and information assurance through encryption and decryption. Defines the methods of protecting information and information systems from unauthorised access, use, disclosure, disruption, modification, or destruction in order to provide integrity, confidentiality and availability. Biometrics, two-factor identification, encryption, and technologies based on the NIST FIPS-140 standards are particular areas of focus.

A6.01.01 Crypto Key Management Software and or services that support Crypto Key Management (CKM) or Key Variable Management (KVM) which includes all of the activities involved in the handling of cryptographic keys during the entire life cycle of the keys, in accordance with an agreed security policy. These can be used in addition to certificates and digital signatures.

A6.01.02 Drive Encryption Encryption of data stored on local drives or encryption of the complete local drive for thick clients.

A6.01.03 Information Encryption Software and or services to protect the information that is exchanged across organisations networks, and/or externally with other organisations. Includes protection of information at rest, particularly in Cloud architecture. Includes products used to apply cryptographic protection to a data set, file or drive.

A6.01.04 Network Encryption Software and or services used to apply crypto services at the network transfer layer.

A6.01.05 Removable media encryption Software that provides device encryption for portable storage devices.

A6.02 Network Security Services Software and or services to support security requirements in and across ICT networks. Note: Network Encryption is covered under the Encryption Services.

A6.02.01 Infrastructure Guard Connect networks of different security policy and usage areas to control traffic flow in-between the networks following a set of predefined rules for Infrastructure Services.

(A6)Security Services

(A6.01)

Encryption Services

(A6.02)

Network Security Services

(A6.03)

Public Key Infrastructure (PKI) Services

(A6.04)

Security Controls

(A6.05)

Digital Forensics

(A6.06)

Enterprise Security Management


A6.02.03 Network Access Control Software and or services that provides the configuration of devices connecting to the network based on endpoint security (such as OS patch level, antivirus updates, host IPS, etc.) user and system authentication and network security enforcement. The NAC will protect the network by preventing non-compliant clients from accessing the network at the IP-level. In case of non-compliance a remote user will be redirected to a network quarantine segment where the client can be updated to the level of required compliancy. Includes VLAN assignment.

A6.03 Public Key Infrastructure (PKI) Services

Software and or services that manage Public Key Infrastructure (PKI) that includes policies and procedures needed to create, manage, distribute, use, store, and revoke digital certificates.

A6.03.01 Digital Certificate Management Software and or services to manage and use certificates to secure access to information. Narrower term: Client Authentication (Personal Certificates), Digital Certificate Revocation, Digital Certificate Issuing, Digital Certificate Authentication.

A6.03.02 Digital Signature Management Software and or services that support Digital Signature Management that specifies a digital signature algorithm (DSA) appropriate for applications requiring a digital, rather than written, signature. The DSA authenticates the integrity of the signed data and the identity of the signatory. The DSA may also be used to prove that data was actually signed by the generator of the signature. Digital signatures can provide non-repudiation, meaning that the signer cannot successfully claim they did not sign a message, while also claiming their private key remains secret; further, some non-repudiation schemes offer a time stamp for the digital signature, so that even if the private key is exposed, the signature is valid. Narrower term: Document Signing, Time Stamping Service, Transaction Signing

A6.03.05 Key Generation Software and or services to generate keys.

A6.04 Security Controls Software that supports security controls.

A6.04.01 Application Whitelisting Software and or services to only allow approved applications to run on user’s device.

A6.04.02 Content Security Control Software used to control information content received or sent via web, email or other means, between networks, organisations, or domains/zones (especially over the Internet). Includes content filtering and application of censorship or classification rules on material (files, documents).

A6.04.03 Decommissioning and Disposal Software and or services to support system decommissioning, media sanitisation destruction and disposal.

A6.04.04 Device Port Manager Controls read & write access to external ports & portable storage devices (USB devices at a minimum).

A6.04.05 Perimeter Protection Software and or service to securely control network access to and/or from a device, or between network zones/domains includes host firewalls, gateways, data diodes, cross domain solutions.

A6.04.06 Physical Access Security Services Software to regulate entry to facilities, turnstiles, gates, campuses, doors, equipment rooms, racks, server and network devices, and cabling infrastructure, etc.

A6.04.07 Radio Spectrum Security Controls Software to or services that protect information and assets implying RF spectrum devices such as mobile phone jammers, electronic counter measures (ECM) equipment, remote controlled improvised explosive devices (RCIED).

A6.04.08 Virus Protection Software used to prevent, detect, and remediate infection or self-replicating programs that run and spread by modifying other programs, files or operating systems of government computing assets. Anti-virus Tools provide protection against viruses and other threats at the device level. Common components that are included are real time, scheduled and manual scans.

A6.04.99 Other Security Controls Other security control software and or services that do not have a specific application category.

A6.05 Digital Forensics Software or services that support the practice of gathering, retaining, and analysing computer-related data for investigative purposes in a manner that maintains the integrity of the data.

A6.05.01 Computer Forensics Software and or services that support computer forensics. Computer forensics explains the current state of a digital artefact; such as a computer system, storage medium or electronic document. The discipline usually covers computers, embedded systems (digital devices with rudimentary computing power and on-board memory) and static memory (such as USB pen drives). Computer forensics can deal with a broad range of information; from logs (such as internet history) through to the actual files on the drive.


A6.05.02 Mobile Device Forensics Software and or services that support mobile device forensics. Mobile device forensics is a sub-branch of digital forensics relating to recovery of digital evidence or data from a mobile device. It differs from Computer forensics in that a mobile device will have an inbuilt communication system and proprietary storage mechanisms. Mobile devices are also useful for providing location information; either from inbuilt gps/location tracking or via cell site logs, which track the devices within their range.

A6.05.03 Network Forensics Software and or services that support network forensics. Network forensics involves monitoring and analysis of computer network traffic, both local and WAN/internet, for the purposes of information gathering, evidence collection, or intrusion detection.

A6.05.04 Forensic Data Analysis Software and or services that support forensic data analysis. Forensic data analysis examines structured data with the aim to discover and analyse patterns of fraudulent activities resulting from financial crime.

A6.05.05 Database Forensics Software and or services that support database forensics. Database forensics is a branch of digital forensics relating to the forensic study of databases and their metadata. Investigations use database contents, log files and in-RAM data to build a timeline or recover relevant information.

A6.06 Enterprise Security Management Software and or services that supports security management for an organisation.

A6.06.01 Intrusion Prevention Software and or service to prevent unauthorised access to a government network or information system.

A6.06.02 Intrusion Detection Software products that gather and analyse information from various areas within a computer or a network to identify possible security breaches, which include both intrusions (attacks from outside the organisations) and misuse (attacks from within the organisations.) Products that monitor network and/or system activities for malicious activities or policy violations and produces reports to a Management Station. Some services may attempt to stop an intrusion attempt but this is neither required nor expected of a monitoring system. Intrusion detection and prevention services are primarily focused on identifying possible incidents, logging information about them, and reporting attempts. In addition, organisations use them for other purposes, such as identifying problems with security policies, documenting existing threats, and deterring individuals from violating security policies.

A6.06.03 Security Audit Trail and Capture Software that supports the set of capabilities to support the identification and monitoring of activities within an application, system, or network.

A6.06.04 Security Configuration Manager Software and or services to manage, report on, and enforce required security configuration of client devices. Also known as audit logging, where it describes the set of capabilities to support the identification and monitoring of activities within an application, system, or network.

A6.06.05 Security Incident Management Software that supports the set of capabilities to provide active response and remediation to a security incident that has allowed unauthorised access to a government information system. Covers the detection, reporting, and resolution management of information security incidents.

A6.06.06 Security Intelligence and Analysis Software and or services that support security intelligence and analysis.

A6.06.07 Security Metrics Software and or services to support the key performance indicators measuring effective security management such as event detection, incidents, and vulnerabilities addressed.

A6.06.08 Security Reporting Software and or services to support reporting across incidents, intrusions, threats etc. in order to track conformance of security services against organisational security and privacy policy.


A7 ICT Components, Services and Tools The ICT Components, Services and Tools domain defines the software and services for operational management and maintenance of applications, ICT components and services.

The following table lists all the elements for A7 ICT Components, Services and Tools.


A7 ICT Components, Services and Tools

Software and services for operational management and maintenance of applications, ICT components and services.

A7.01 Business Process Management Tools

Software and or services that allows organisations to abstract business process from technology infrastructure and support the managerial approach through enabling technology, bridging organisational and technology silos.

A7.01.01 Business Activity Monitoring (BAM) Business activity monitoring (BAM) is Software and or services that aids in monitoring of business activities, as those activities are implemented in computer systems. One of the most visible features of BAM solutions is the presentation of information on dashboards that contain key performance indicators (KPIs) used to provide assurance and visibility of activity and performance. This information is used by technical and business operations to provide visibility, measurement, and assurance of key business activities. It is also exploited by event correlation to detect and warn of impending problems. Although BAM systems usually use a computer dashboard display to present data, BAM is distinct from the dashboards used by business intelligence (BI) insofar as events are processed in real-time or near real-time and pushed to the dashboard in BAM systems, whereas BI dashboards refresh at predetermined intervals by polling or querying databases. Depending on the refresh interval selected, BAM and BI dashboards can be similar or vary widely. Note: Some BAM solutions additionally provide trouble notification functions, which allow them to interact automatically with the trouble ticket system. For example, whole groups of people can be sent e-mails, voice or text messages, according to the nature of the problem. Automated problem solving, where feasible, can correct and restart failed processes.

(A7)ICT Components, Services and Tools

(A7.01)

Business Process Management Tools

(A7.02)

ICT Components(A7.03)

ICT Development Environment and Tools

(A7.04)

ICT Management Tools

(A7.05)

Cloud Services

(A7.07)

Business Rules Management ToolsGEA-NZ v3.2: 'A7.06 Server Configuration Types' removed and created as 'I1.04 Server Configuration Types'


A7.01.02 Business Process Modelling and Simulation

Process modelling tools provide business users with the ability to model their business processes, implement and execute those models, and refine the models based on as-executed data. As a result, business process modelling tools can provide transparency into business processes, as well as the centralisation of corporate business process models and execution metrics. Process Modelling and simulation functionality allows for pre-execution ‘what-if’ modelling and simulation. Post-execution optimisation is available based on the analysis of actual as-performed metrics.

A7.01.03 Business Process Engine (BPE) A business process engine (BPE) is a software framework that enables the execution and maintenance of process workflows. It provides business process interaction and communication between different data/process sources spread across one or more IT applications and services. BPE automates linking processes and their activities in an enterprise IT environment.

A7.01.04 Business Process Monitoring Business process monitoring tools provide real-time scrutiny of an activity or set of activities that have been set up to accomplish a specific organisational goal. As part of a larger business process management initiative, business process monitoring enables an organisation to measure and analyse process performance to identify critical process problems pro-actively, using data to make decisions that will improve the speed, quality and efficiency of business processes.

A7.01.05 Workflow Engine A workflow engine is a software application that defines a process, the rules governing process decisions, and routes information. It is a key component in workflow technology and typically makes use of a database server. A workflow engine manages and monitors the state of activities in a workflow, such as the processing and approval of a loan application form, and determines which new activity to transition to according to defined processes (workflows). The actions may be anything from saving an application form in a document management system to sending a reminder e-mail to users or escalating overdue items to management. A workflow engine facilitates the flow of information, tasks, and events. Workflow engines may also be referred to as a Workflow Orchestration Engines. Workflow engines mainly have three functions: - Verification of the current status: Check whether the command is valid in executing a task. - Determine the authority of users: Check if the current user is permitted to execute the task. - Executing condition script: After passing the previous two steps, workflow engine begins to evaluate condition script in which two processes are carried out, if the condition is true, workflow engine execute the task, and if execution successfully complete, it returns the success, if not, it reports the error to trigger and roll back the change. A workflow engine is a core technique for task allocation software application, such as BPM in which the workflow engine allocates task to different executors with communicating data among participants. A workflow engine can execute any arbitrary sequence of steps, for example, a healthcare data analysis.

A7.02 ICT Components ICT Components that can be used to make new business applications and services or is used in business processes.

A7.02.01 Alerts Components that generate alerts based upon settings or rules.

A7.02.02 Inbound Correspondence Component

Components to support externally initiated communication between an organisation and its stakeholders.

A7.02.03 Notifications Component that sends a notification based upon an alert or rules.

A7.02.04 Outbound Correspondence Component

Components to support internally initiated communication between an organisation and its stakeholders.

A7.02.05 Personalisation Personalisation allows a user or customer to change preferences about user interfaces / portals in terms of the way that data is displayed, levels of detail, and even language.

A7.02.06 Rating Engine Component that rates atomic events or transactions based on upon rules applied to data associated with the event or transaction. Rates can be event or transaction specific, for example each lookup of a database cost $x.xx, or that can use customer specific rates, so that each lookup of a database, for customer xyz cost $x.xx.

A7.02.07 Storefront / Shopping Cart Component to support the online equivalent of the supermarket cart, where orders and merchandise are placed.

A7.02.08 Subscriptions Allow users to subscribe and unsubscribe to a service.


A7.02.99 Other ICT Components Any other ICT Components for which there no applicable application category. Note: Components may be found in a number of the application areas.

A7.03 ICT Development Environment and Tools

Software and or services that forms development environments and related tools.

A7.03.01 Development Frameworks Development frameworks such as a Java runtime environment or .NET are required to allow applications or applets based on those frameworks to execute. Incompatibility issues can arise when different versions of the frameworks are required on a single device. This can be resolved using Application Virtualisation Client and its associated backend technologies, as each virtual bubble forms an isolation barrier.

A7.03.02 Development Resource Libraries A collection of resources used to develop software which may include pre-written code and subroutines, classes, values or type specifications.

A7.03.03 Forms Management Software and or services that support the creation, modification, and usage of physical or electronic documents used to capture information within the business cycle.

A7.03.04 Integrated Development Environment

Software and or services that provides comprehensive facilities to computer programmers for software development.

A7.03.05 Mash-up Editor Software and or services that uses and combines data, presentation or functionality from two or more sources to create new services. The main characteristics of the mash-up are combination, visualisation, and aggregation.

A7.03.06 Software Configuration Management

Software to track and control changes in the software including the establishment of baselines and revision control.

A7.03.07 Software Development Kit Software development tools that allow for the creation of applications for a certain software package, software framework, hardware platform, computer system, video game console, operating system, or similar platform.

A7.03.08 Testing Tools Software and or services that support testing of infrastructure, software, and services against requirements. Narrower Term: Security Testing Tools, Test Automation Tools.

A7.03.09 User Innovation Toolkit Software toolkit based on the idea that manufacturers possess the knowledge of the solution possibilities, while the users possess the knowledge about needs.

A7.03.10 Validation Tools Software tools that check web pages for accessibility and syntactical correctness of code.

A7.03.11 CASE Tools Computer-aided software engineering (CASE) is the domain of software tools used to design and implement applications. CASE tools are similar to and were partly inspired by Computer Aided Design (CAD) tools used to design hardware products. CASE tools are used to develop software that is high-quality, defect-free, and maintainable.

A7.03.99 Other Development Environment and Tools

Any other development environment or tools without a suitable application category.

A7.04 ICT Management Tools ICT Management tools support the day to day operations and management of ICT. It includes tools enabling the ICT support organisation to quickly resolve or escalate issues and problems, improve root cause isolation, and provide higher levels of business user satisfaction. Using this business view, IT support organisations manage incidents, problems and service requests throughout their life cycles at a more efficient and effective rate.

A7.04.01 Fault Management Software and or services that detects, isolates, and corrects malfunctions in a telecommunications network and compensates for environmental changes. This includes maintaining and examining error logs, accepting and acting on error detection notifications, tracing and identifying faults, carrying out sequences of diagnostics tests, correcting faults, reporting error conditions, and localizing and tracing faults by examining and manipulating database information.


A7.04.02 ICT Configuration Management Database (CMDB)

A configuration management database (CMDB) is a repository that acts as a data warehouse for information technology (IT) organisations. Its contents are intended to hold a collection of IT assets that are commonly referred to as configuration items (CI), as well as descriptive relationships between such assets. When populated, the repository becomes a means of understanding how critical assets such as information systems are composed, what their upstream sources or dependencies are, and what their downstream targets are. CMDBs are used to keep track of the state of different things that are normally referred to as assets, such as products, systems, software, facilities, and people as they exist at specific points in time, as well as the relationships between such assets. The maintenance of such state related information allows for things like the reconstruction of such assets, at any point in their existence, as well as for things such as impact analysis, in the cases of root cause analysis or change management.

A7.04.03 ICT Definitive Media Library (DML) A Definitive Media Library (DML) is a secure Information Technology repository in which an organisation's definitive, authorised versions of software media are stored and protected. Before an organisation releases any new or changed application software into its operational environment, any such software should be fully tested and quality assured. The Definitive Media Library provides the storage area for software objects ready for deployment and should only contain master copies of controlled software media Configuration Items (CIs) that have passed appropriate quality assurance checks, typically including both procured and bespoke application and gold build source code and executables. In the context of the ITIL best practice framework, the term Definitive Media Library supersedes the term Definitive Software Library referred to prior to version ITIL v3. In conjunction with the Configuration Management Database (CMDB), it effectively provides the DNA of the data centre i.e. all application and builds software media connected to the CMDB record of installation and configuration. The Definitive Media Library (DML) is a primary component of an organisation's release and provisioning framework and service continuity plan.

A7.04.04 Monitoring Software and or services that continuously records performance, capacity use, throughput of computer hardware or software and provides notification about deviations from normal. Note: This includes utilities that are deployed down to the infrastructure level to monitor hardware performance and generate log files etc.

A7.04.05 Software Asset Management Software and or services that supports license management. Software asset management (SAM) is a business practice that involves managing and optimizing the purchase, deployment, maintenance, utilisation, and disposal of software applications within an organisation. The goals of SAM are to reduce information technology (IT) costs and limit business and legal risk related to the ownership and use of software, while maximizing IT responsiveness and end-user productivity. Note: A software license manager is different from a software asset management tool, which end-user organisations employ to manage the software they have licensed from many software vendors.

A7.04.06 Software Distribution Software and or services that supports distribution of software, propagation, installation and upgrade of written computer programs, applications and components.

A7.04.07 Software License Manager A software license manager is a software management tool used by Independent software vendors or by end-user organisations to control where and how software products are able to run. License managers protect software vendors from losses due to software piracy and enable end-user organisations to comply with software license agreements. License managers enable software vendors to offer a wide range of usage-centric software licensing models, such as product activation, trial licenses, subscription licenses, feature-based licenses, and floating licensing from the same software package they provide to all users. Note: A software license manager is different from a software asset management tool, which end-user organisations employ to manage the software they have licensed from many software vendors.

A7.04.08 ICT Diagnostic Tools Diagnostic tools to examine the state and configuration of ICT infrastructure, network, and software applications.

A7.04.09 Network Management Tools Tools that pertain to the operation, administration, maintenance, and provisioning of networked systems. Network management is essential to command and control practices and is generally carried out of a network operations centre.

A7.04.10 ICT Service Level Management ICT Service Level Management (SLM) is software and or services that manage ICT service levels in accordance with the ITIL processes. This includes Service Level Agreements (SLA's), underpinning contracts, and monitoring and reporting on service levels.

A7.04.11 ICT Capacity Management Software and or services that support the process of capacity management.

A7.04.12 Service Desk Software and or services that support the operation and processes of a service desk. Note: Service Desk software and services may be provided in some cases by A1.06.06 Service Centre.


A7.04.13 Server Management Software and services that support the management of physical and virtual servers.

A7.04.14 Application Portfolio Management Application portfolio management (APM) is a framework for managing enterprise IT software applications and software-based services. APM provides managers with an inventory of the company's software applications and metrics to illustrate the business benefits of each application. An APM system uses a scoring algorithm for generating reports about the value of each application and the health of the IT infrastructure as a whole. By gathering metrics like an application's age, how often it's used, the cost it takes to maintain it and its interrelationships with other applications, a manager can use more than just an educated guess to decide whether or not a particular application should be kept, updated, retired or replaced. Source: WhatIs.com Related Term: Investment Portfolio Management, Project Portfolio Management.

A7.04.99 Other ICT Management Tools Any other ICT Management Tools that do not have an application category.

A7.05 Cloud Services The Cloud Services area contains a range of ICT services that are provided externally to the agency. They are large groups of remote servers networked to allow the centralised data storage, and online access to computer services or resources. Cloud computing services can support various "X as a Service" models such SaaS, PaaS, IaaS. Software as Service (SaaS) is a software licensing and delivery model in which software is licensed on a subscription basis and is centrally hosted. It is sometimes referred to as "on-demand software". SaaS is typically accessed by users using a thin client via a web browser. SaaS has become a common delivery model for many business applications, for example SaaS is available for many of the application and ICT service in this taxonomy. Source: GEA Related Term: Cloud Computing Services, Narrower Terms: Software as a Service (SaaS), Platform as a Service (PaaS), Infrastructure as a Service. Excludes: Type of Cloud [See GEA-NZ Infrastructure Reference Taxonomy]

A7.05.04 Software as a Service (SaaS) Software as a service (SaaS) is a software licensing and delivery model in which software is licensed on a subscription basis and is centrally hosted. It is sometimes referred to as "on-demand software". SaaS is typically accessed by users using a thin client via a web browser. SaaS has become a common delivery model for many business applications, including office & messaging software, payroll processing software, DBMS software, management software, CAD software, development software, accounting, collaboration, customer relationship management (CRM), enterprise resource planning (ERP), invoicing, human resource management (HRM), enterprise content management (ECM) and service desk management. Note: A New Zealand Government Common Capability is called Enterprise Content Management as a Service (ECMS) and is an example of SaaS.

A7.05.05 Unified Communications as a Service (UCaaS)

In the UCaaS model, multi-platform communications over the network are packaged by the service provider. The services could be in different devices, such as computers and mobile devices. Services may include IP telephony, unified messaging, video conferencing and mobile extension etc.

A7.07 Business Rules Management Tools Software and or services that allows organisations to abstract and execute business rules from technology infrastructure and support the managerial approach through enabling technology, bridging organisational and technology silos.

A7.07.01 Business Rules Management System (BRMS)

A BRMS or Business Rule Management System is a software system used to define, deploy, execute, monitor and maintain the variety and complexity of decision logic that is used by operational systems within an organisation or enterprise. This logic, also referred to as business rules, includes policies, requirements, and conditional statements that are used to determine the tactical actions that take place in applications and systems. A BRMS includes, at minimum: - A repository, allowing decision logic to be externalised from core application code. - Tools, allowing both technical developers and business experts to define and manage decision logic. - A runtime environment, allowing applications to invoke decision logic managed within the BRMS and executes it using a business rules engine.


A7.07.02 Business Rules Engine A business rules engine is a software system that executes one or more business rules in a runtime production environment. The rules might come from legal regulation ("An employee can be fired for any reason or no reason but not for an illegal reason"), company policy ("All customers that spend more than $100 at one time will receive a 10% discount"), or other sources. A business rule system enables these company policies and other operational decisions to be defined, tested, executed and maintained separately from application code. Rule engines typically support rules, facts, priority (score), mutual exclusion, preconditions, and other functions.


A8 System Integration System integration is defined in information technology as the process of linking together different computing systems and software applications physically or functionally, to act as a coordinated whole. System integration involves integrating existing often disparate systems and is also about adding value to the system, capabilities that are possible because of interactions between subsystems.

The following table lists all the elements for A8 System Integration.


A8 System Integration System integration is defined in information technology as the process of linking together different computing systems and software applications physically or functionally, to act as a coordinated whole. System integration involves integrating existing often disparate systems and is also about adding value to the system, capabilities that are possible because of interactions between subsystems. Source: Wikipedia Narrower Terms: Enterprise Service Bus (ESB), Enterprise Application Integration (EAI), Middleware. Was: Interfaces and Integration

A8.02 Data Interoperability Data Interoperability defines the software and or services for sharing data and services across disparate systems and vendors. Related Terms: Enterprise Application Integration (EAI), Enterprise Service Bus (ESB), Middleware.

A8.02.01 Data Structure Dictionary This service holds the data definition, structure, and metadata and mapping rules used by data transformation to map incoming messages to the required destination services or software. Related Terms: Data Transformation

A8.02.02 Data Transformation Data transformation is the process of converting data or information from one format to another, usually from the format of a source system into the required format of a new destination system. Source: Techopedia Related Terms: Data Structure Dictionary, Extract Transform Load (ETL), Data Mediation, Mediation System Narrower Terms: Data Mapping

(A8)System Integration

(A8.02)

Data Interoperability

(A8.03)

Interface

(A8.04)

Gateways

(A8.07)

Enterprise Application Integration (EAI)

(A8.06)

Enterprise Service Bus (ESB)

(A8.05)

Service Oriented Architecture (SOA)

GEA-NZ v3.2: Removed 'A8.01 Integration' as it was effectively duplicating 'A8 System Integration'


A8.02.03 Extract Transform and Load (ETL) Software that supports the extraction of data from a data source, the manipulation and change of data to a different format and the population of data destination with the transformed data. Narrower Terms: Data Mapping

A8.02.04 Data Mapping Software that supports the process of creating data element mappings between two distinct data models. Data mapping is used as a first step for a wide variety of data integration tasks.

A8.03 Interface Software or services supporting the communicating, transporting and exchanging information through a common dialog or method. Delivery Channels provide the information to reach the intended destination, whereas Interfaces allow the interaction to occur based on a predetermined framework.

A8.03.01 Service Discovery Software or services supporting the method in which applications, systems or web services are registered and discovered. For example: Universal Description, Discovery and Integration (UDDI) are a platform-independent, Extensible Markup Language (XML)-based registry by which businesses worldwide can list themselves on the Internet, and a mechanism to register and locate web service applications. UDDI is an open industry initiative, sponsored by the Organisation for the Advancement of Structured Information Standards (OASIS), for enabling businesses to publish service listings and discover each other, and to define how the services or software applications interact over the Internet.

A8.03.02 Service Description / Interface Software or services supporting the method for publishing the way in which web services or applications can be used. For example: The Web Services Description Language (WSDL) is an XML-based interface definition language that is used for describing the functionality offered by a web service. The acronym is also used for any specific WSDL description of a web service (also referred to as a WSDL file), which provides a machine-readable description of how the service can be called, what parameters it expects, and what data structures it returns.

A8.03.03 API Software components that use an application programming interface (API) to communicate with each other. May include specifications for routines, data structures, object classes, and variables.

A8.03.05 RESTful APIs RESTful APIs do not require XML-based Web service protocols (SOAP and WSDL) to support their interfaces as they use HTTP. Representational State Transfer (REST) is a style of software architecture for distributed hypermedia systems such as the World Wide Web. Unlike SOAP-based Web services, there is no "official" standard for RESTful Web APIs. This is because REST is an architectural style, while SOAP is a protocol. REST is not a standard in itself, but RESTful implementations make use of standards, such as HTTP, URI, JSON, and XML.

A8.03.06 Web API A Web API is a development in Web services where emphasis has been moving to simpler representational state transfer (REST) based communications. RESTful APIs do not require XML-based Web service protocols (SOAP and WSDL) to support their interfaces.

A8.03.07 Web Services (WS-*) A Web service is a method of communication between two electronic devices over a network. It is a software function provided at a network address over the Web with the service always on as in the concept of utility computing. ‘WS-‘is a prefix used to indicate specifications associated with Web Services and there exist many WS* standards including WS-Addressing, WS-Discovery, WS-Federation, WS-Policy, WS-Security, and WS-Trust, WS-SecureConversation, WS-Federation, WS-Authorisation, WS-Privacy, WS-Test.

A8.03.99 Other Application Interfaces Other application interfaces.

A8.04 Gateways Software and or services used for information-layer gateways and automated electronic interfaces between networks or systems. Does not extend to boundary protection devices. Provides the various gateways that are used to provide automated electronic interfaces with external organisations or parties, and internally between communities of interest or network domains. Narrower Terms: Business to Business Gateway (B2B), Business to Government Gateway (B2G), Citizen [or Customer] to Government Gateway (C2G) Government to Government Gateway (G2G),

A8.04.02 Command and Control Software and or services that provides system-system gateway interaction for the exchange of C2 critical information, such as Battle Management System 'tracks', obstacles, events, items of interest. Typical standard here would be the Multilateral Interoperability Programme (MIP) JC3IEDM (STANAG 2252).

A8.04.03 Formal Messaging Software and or services that provides system-system gateway interaction for official, mission critical messaging services that typically have attributes such as non-repudiation, full-traceability (audit tracking), guaranteed delivery timelines.


A8.04.04 Informal Messaging Software and or services that provide system-system gateway interaction for email services. This may just be an enterprise application, such as Microsoft Exchange, or an external providers own services.

A8.04.05 Remote Access Software and or services that provides system-system gateway functionality to manage user remote-access to the organisations networks or systems. Typically web-based using VPN protocol and thin-client delivery.

A8.04.06 SMS/MMS Software and or services that provides system-system gateway interaction for SMS or MMS messaging services.

A8.04.07 Web Access Software and or services that provides system-system gateway functionality to manage web-based access.

A8.04.08 Managed File Transfer (MFT) Managed file transfer ("MFT") refers to a software or a service that manages the secure transfer of data from one computer to another through a network (e.g., the Internet). MFT software is marketed to corporate enterprises as an alternative to using ad-hoc file transfer solutions, such as FTP, HTTP and others. Typically, MFT offers a higher level of security and control than FTP. Features include reporting (e.g., notification of successful file transfers), non-repudiation, auditability, global visibility, automation of file transfer-related activities and processes, end-to-end security, and performance metrics/monitoring. MFT applications are available as both on-premises licensed software packages and software-as-a-service ("SaaS"). Some are specially designed for enterprise use while others are for sale to individual consumers. A few enterprise-focused SaaS MFT providers also manage the additions of new trading partners, which can free up a lot of IT (Information Technology) resources. Source: Wikipedia Related term: File Transfer Gateway, File Transfer Protocol (FTP) Gateway, FTP Server, File Exchange Gateway, Secure File Transfer Gateway.

A8.04.99 Other Gateways Software and or services that provides other gateway types. For example: - Intelligence; provides system-system gateway interaction for exchange of intelligence-led information. Typical standard here would be the MAJIIC data model.

A8.05 Service Oriented Architecture (SOA)

In SOA compliant systems/services, provides the application functionality to manage SOA-based integration, including the Services Registry. Was A8.01.01 Services Integration

A8.06 Enterprise Service Bus (ESB) Enterprise Service Bus (ESB) is an integration method in which a specialized subsystem is dedicated to communication between other subsystems. This allows cutting the number of connections (interfaces) to only one per subsystem which will connect directly to the ESB. The ESB is capable of translating the interface into another interface. This allows cutting the costs of integration and provides extreme flexibility. With systems integrated using this method, it is possible to completely replace one subsystem with another subsystem which provides similar functionality but exports different interfaces, all this completely transparent for the rest of the subsystems. The only action required is to implement the new interface between the ESB and the new subsystem. Source: Wikipedia Related term: Enterprise Application Integration (EAI), Service Oriented Architecture (SOA), Middleware, Narrower Terms: Data Interoperability, Interface. Was: A8.01.02

A8.07 Enterprise Application Integration (EAI)

Support the redesigning of disparate information systems into one system that uses a common set of data structures and rules. Was: A8.01.03 Enterprise Application Integration (EAI)

A8.07.01 Broker Refers to software used to 'broker' interfaces; typically with legacy systems that are not SOA compliant. This includes integration with various protocol or software specific adapters. Also includes mapping of data as it passes from the source system to the destination system(s). Was A8.01.03.01

A8.07.02 Adapter Refers to a protocol or software specific interface, typically for integration to a legacy system that is not SOA-enabled. Examples of adapters include API wrapper, FTP, Database, Message queuing, Siebel adapter.


Documents

GEA-NZ v3.2 Application and Software Services Reference ... · Version 3.2 of the Application and Software Services Reference Taxonomy document [split out from the v3.1 Application