Architecture / Architecture Operating Models / Roles
01 · Mandate
Roles and responsibilities
Separate roles by decision altitude and scope, then connect them through shared artefacts, governance and hand-offs.
The three-role model
flowchart TB
subgraph EA[Enterprise Architecture]
direction TB
BA["Business Architecture<br/><small>Strategy · processes · capabilities</small>"]
subgraph ISA[Information Systems Architecture]
direction TB
IS["Applications · data · integration"]
subgraph TA[Technology Architecture]
T["Infrastructure · platforms"]
end
end
end
BA --> ISA
IS --> TA
classDef business fill:#dce9ff,stroke:#3569b7,color:#172226,stroke-width:2px
classDef systems fill:#d8f6e7,stroke:#22845b,color:#172226,stroke-width:2px
classDef technology fill:#ecebea,stroke:#6a6a6a,color:#172226,stroke-width:2px
class BA business
class IS systems
class T technologyWorkbook source · SFIA 9
SFIA 9 alignment
Responsibility levels, validated skill codes and level definitions.
Levels and skill codes validated against SFIA 9 (sfia-online.org, Sept 2026). Level names: 4 Enable; 5 Ensure, advise; 6 Initiate, influence; 7 Set strategy, inspire, mobilise.
| Role | SFIA Responsibility Level | Key Responsibilities | Relevant Skills | Level Notes |
|---|---|---|---|---|
| Enterprise Architect | Level 6 - Initiate, influence | Develops and maintains enterprise-wide architecture. Ensures alignment with business strategy and technology direction. | STPL (Enterprise and business architecture), ITSP (Strategic planning), METL (Methods and tools), RLMT (Stakeholder relationship management) | Level 7 (Set strategy, inspire, mobilise) applies to a Chief / Head of Enterprise Architecture. STPL is defined at Levels 5–7 only. |
| Solutions Architect | Level 5-6 - Ensure, advise / Initiate, influence | Translates business and architectural requirements into solution designs. Guides delivery of technical solutions. | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools), TECH (Specialist advice) | Level 5 for single-project scope; Level 6 for programme or multi-solution scope. ARCH is defined at Levels 4–6. |
| Operational Architect | Level 4-5 - Enable / Ensure, advise | Ensures operational requirements are considered in architecture and design. Supports infrastructure readiness and operational excellence. | DESN (Systems design), IFDN (Infrastructure design), METL (Methods and tools), ITOP (Infrastructure operations) | Level 4 for single-platform scope; Level 5 for estate-wide operational architecture. ITOP is defined at Levels 1–5. |
| SFIA Skill Code | Definition (SFIA 9) | Levels Defined | ||
| STPL (Enterprise and business architecture) | Aligning an organisation's technology strategy with its business mission, strategy and processes and documenting this using architectural models. | 5–7 | ||
| ITSP (Strategic planning) | Creating and maintaining organisational-level strategies to align overall business plans, actions and resources with high-level business objectives. | 4–7 | ||
| ARCH (Solution architecture) | Developing and communicating a multi-dimensional solution architecture to deliver agreed business outcomes. | 4–6 | ||
| DESN (Systems design) | Designing systems to meet specified requirements and agreed systems architectures. | 2–6 | ||
| IFDN (Infrastructure design) | Designing technology infrastructure to meet business requirements, ensuring scalability, reliability, security and alignment with strategic objectives. | 2–6 | ||
| ITOP (Infrastructure operations) | Provisioning, deploying, configuring, operating and optimising technology infrastructure across physical, virtual and cloud-based environments. | 1–5 | ||
| METL (Methods and tools) | Leading the adoption, management and optimisation of methods and tools, ensuring effective use and alignment with organisational objectives. | 2–6 | ||
| EMRG (Emerging technology monitoring) | Identifying and assessing new and emerging technologies, products, services, methods and techniques. | 4–6 | ||
| RLMT (Stakeholder relationship management) | Systematically analysing, managing and influencing stakeholder relationships to achieve mutually beneficial outcomes through structured engagement. | 4–7 | ||
| TECH (Specialist advice) | Providing authoritative, professional advice and direction in a specialist area. | 4–6 | ||
| GOVN (Governance) | Defining and operating frameworks for decision-making, risk management, stakeholder relationships and compliance with organisational and regulatory obligations. | 6–7 | ||
| REQM (Requirements definition and management) | Managing requirements through the entire delivery and operational lifecycle. | 2–6 | ||
| ITMG (Technology service management) | Managing the provision of technology-based services to meet defined organisational needs. | 5–7 | ||
| CHMG (Change control) | Assessing risks associated with proposed changes and ensuring changes to products, services or systems are controlled and coordinated. | 2–6 | ||
| CFMG (Configuration management) | Planning, identifying, controlling, accounting for and auditing of configuration items (CIs) and their interrelationships. | 2–6 | ||
| AVMT (Availability management) | Ensuring services deliver agreed levels of availability to meet the current and future needs of the business. | 3–6 | ||
| CPMG (Capacity management) | Ensuring service components have the capacity and performance to meet current and planned business needs. | 2–6 | ||
| COPL (Continuity management) | Developing, implementing and testing a business continuity framework. | 2–6 | ||
| USUP (Incident management) | Coordinating responses to a diverse range of incidents to minimise negative impacts and quickly restore services. | 1–6 | ||
| PBMG (Problem management) | Managing the lifecycle of all problems that have occurred or could occur in delivering a service. | 2–5 | ||
| SCAD (Security operations) | Managing and administering security measures, using tools and intelligence to protect assets, ensuring compliance and operational integrity. | 1–6 | ||
| NFTS (Non-functional testing) | Evaluating performance, security, scalability and other non-functional qualities against requirements or expected standards. | 1–6 | ||
| ETDL (Learning delivery) | Transferring knowledge, developing skills and changing behaviours using a range of techniques, resources and media. | 2–5 | ||
| SFIA 9 Level | Essence (summary) | |||
| Level 4 - Enable | Performs diverse, complex activities; supports and guides others; works autonomously under general direction. | |||
| Level 5 - Ensure, advise | Provides authoritative guidance in their field; accountable for significant work outcomes. | |||
| Level 6 - Initiate, influence | Has significant organisational influence; shapes policy and strategy; demonstrates leadership. | |||
| Level 7 - Set strategy, inspire, mobilise | Operates at the highest organisational level; sets strategy and direction across the organisation. |
Workbook source · EA
Enterprise Architect activity model
Enterprise-scoped responsibilities, activities, artefacts and collaborations.
Artefact columns show the information the EA contributes or requires, scaled by project size. Risk overrides size: a small-value change touching critical capabilities, core platforms or novel technology adopts the next band up. Artefacts may live inside existing governance documents rather than as standalone deliverables.
| Through Life Stage | Value Stream Activity | Role | Description | SFIA Responsibility Level | Relevant Skills | Activities | Example Artefacts - Small (<£250k, low risk) | Example Artefacts - Medium (£250k–£2m, moderate risk) | Example Artefacts - Large (>£2m, high risk or novel) |
|---|---|---|---|---|---|---|---|---|---|
| Planning | Service Strategy Development | Enterprise Architect | Establishes architecture as a core component of the organisations strategic direction for new services. This involves integrating architecture within the service’s strategic planning, aligning architecture goals with broader business objectives, and proactively identifying and planning for potential risks at the enterprise level. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Integrate architecture objectives into the service’s strategic plans. • Collaborate with business and IT leaders to ensure alignment of architecture with organisational goals. • Conduct risk assessments to identify enterprise-wide threats and vulnerabilities. • Develop strategies for risk mitigation and crisis management. • Evaluate and select architectural technologies and suppliers. | • Strategic alignment confirmation at gate | • Strategic alignment assessment for the initiative | • Target-state impact assessment • Capability roadmap updates • Executive briefing |
| Planning | Assessment | Enterprise Architect | Conducts a comprehensive architecture assessment of the current IT landscape to anticipate and plan for the architecture needs of new services. This includes evaluating existing architecture frameworks and their adequacy for supporting upcoming service transformations at an enterprise scale. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Perform thorough architecture audits of existing IT infrastructure, applications, and data. • Map out current architecture capabilities and identify areas requiring enhancement or upgrades. • Assess compatibility of existing architecture measures with new service requirements. • Project future architecture needs based on anticipated service expansions or changes. | • Current-state context provided from repository | • Capability gap assessment for the affected domain | • Enterprise current-state analysis • Capability maturity assessment • Portfolio impact view |
| Planning | Governance Planning | Enterprise Architect | Instrumental in crafting governance models that incorporate robust architecture measures. This stage focuses on developing enterprise-wide policies that standardise architecture practices across all services and ensuring compliance with both internal standards and external regulations. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop and refine enterprise-wide architecture governance frameworks. • Establish comprehensive architecture policies and compliance requirements. • Define clear architecture roles and responsibilities across all levels of the organisation. • Ensure alignment of architecture governance with global standards and regulations. • Create mechanisms for ongoing governance reviews and updates. | • Gate applicability decision recorded | • Governance route and assurance plan for the initiative | • Programme architecture governance framework • Design authority terms and decision-rights map |
| Planning | Security and Compliance Planning | Enterprise Architect | Develops an enterprise-wide architecture and compliance plan that outlines required architecture measures across the organisation. This strategic framework sets the standard for architecture practices in new and existing services, ensuring consistent application of architecture policies. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop detailed architecture and compliance plans covering all aspects of service and data protection. • Standardise architecture protocols across the enterprise to ensure uniform application. • Plan for continuous monitoring and auditing to ensure compliance and architecture standards are met. • Integrate compliance with international and industry-specific regulations. • Facilitate cross-departmental collaborations to align architecture and compliance efforts. | • Applicable standards list issued | • Compliance obligations assessment (with security architecture input) | • Enterprise compliance strategy mapping for the programme |
| Planning | Architecture Design | Enterprise Architect | Ensures that architecture principles are embedded at the foundation of service architecture planning. They guide the integration of architecture into architectural designs across the enterprise, ensuring scalability, data protection, and alignment with long-term strategic goals. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Guide the design of architectural service architectures, ensuring robust protection mechanisms are in place. • Advocate for the incorporation of advanced architecture technologies • Collaborate with solution architects to embed architecture into all technology designs. • Ensure scalability and flexibility of architecture measures to adapt to changing threats. • Validate architectural designs against architecture best practices and standards. | • Approved pattern/reference architecture issued | • Target architecture guidance with pattern applicability | • Enterprise architecture blueprint for the programme • Domain model updates |
| Planning | Migration Planning | Enterprise Architect | Develops strategies for the architectural migration of data and systems within the enterprise framework, ensuring that transitions adhere to stringent architecture protocols and that all migration plans reflect the overarching architecture posture of the organisation. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Design comprehensive migration plans that prioritise architecture and minimise risk. • Establish protocols for architectural data handling and system decommissioning. • Ensure compliance during migrations, including data protection laws and regulations. • Monitor and adjust architecture measures during the migration to respond to any issues. • Document all migration processes with a focus on architecture aspects. | • Migration standards reference | • Enterprise migration guidance (sequencing, dependency principles) | • Enterprise migration strategy • Cross-domain dependency analysis |
| Planning | Cost Management Planning | Enterprise Architect | Oversees the financial aspects of implementing architecture measures, ensuring investments in architecture are forecasted, justified, and aligned with the organisation’s strategic financial planning. This includes optimising spend on architecture technologies and services at the enterprise level. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Oversee the budgeting for architecture initiatives, ensuring appropriate allocation of resources. • Conduct cost-benefit analysis of proposed architecture technologies and measures. • Align architecture spending with long-term strategic priorities and risk management frameworks. • Advocate for investments in architecture as essential to organisational resilience. • Monitor and report on the ROI of architecture expenditures to executive management. | • Benchmark cost ratios provided | • Investment guidance with reuse opportunities | • Investment strategy input • Portfolio cost-value analysis • Options paper for boards |
| Planning | Training and Change Management Planning | Enterprise Architect | Leads the development of enterprise-wide architecture training programs and change management strategies. This stage is about embedding a culture of architecture awareness throughout the organisation and managing the impact of architecture changes on business processes and compliance requirements. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop comprehensive architecture training and awareness programs tailored to various organisational roles. • Create change management strategies that incorporate architecture from the outset. • Ensure effective communication of architecture policies and changes to all stakeholders. • Lead workshops and seminars to encourage a architecture-first mindset among employees. • Evaluate the effectiveness of training and change management efforts and adjust as necessary. | • Capability content pointer (existing material) | • Capability requirements input for the programme | • Enterprise capability development plan input • Operating model change assessment |
| Design | Requirements Gathering | Enterprise Architect | Ensures that architecture is deeply integrated into the service requirements from the very start. This involves collaborating with stakeholders to align architecture needs with business objectives, translating these into concrete architecture requirements that support both compliance and operational goals. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Collaborate with stakeholders to define architecture requirements based on business needs and objectives. • Ensure that all regulatory and compliance requirements are identified and integrated into the service requirements. • Advocate for architecture to be considered a primary requirement, not just an afterthought. | • Baseline requirements issued from enterprise catalogue | • Tailored requirements set with rationale | • Enterprise requirements catalogue extension • Traceability mapping to business objectives |
| Design | Architecture Planning | Enterprise Architect | Influences the planning of service architecture to embed architecture as a fundamental component. The Enterprise architecture Architect ensures that the selected service models and technologies are inherently architectural, advocating for architectures that support both efficient service delivery and robust architecture. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Participate in selecting the service model (internal, single supplier, multi-supplier, hybrid) to ensure that chosen models align with architecture best practices. • Guide the choice and orchestration of technology services from a architecture perspective, ensuring architectural integration and data handling across components. | • Pattern conformance confirmation | • Options guidance with enterprise fit assessment | • Enterprise options appraisal with strategic scoring • Enterprise-level ADRs |
| Design | High and Detailed Design | Enterprise Architect | Guides the development of high and detailed designs, ensuring they incorporate advanced architecture measures. This involves specifying encryption protocols, architectural data handling practices, and access controls, setting the standard for architecture within the service architecture. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Ensure high and detailed designs incorporate strong architecture measures like data encryption, architectural APIs, and robust access controls. • Review and approve all design documents for architecture efficacy and compliance with established architecture standards. | • Design spot-check at gate | • Design review with standards conformance findings | • Enterprise design assurance report • Cross-domain interface review |
| Design | Security Design | Enterprise Architect | Leads the architecture design process, ensuring that all aspects of the service are protected against potential threats. This includes designing comprehensive architecture frameworks that incorporate preventative, detective, and responsive measures, aligned with industry standards and regulatory requirements. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Design comprehensive architecture measures such as encryption standards, firewall configurations, and identity and access management (IAM) solutions and develop reusable patterns for project teams to implement. • Ensure designs comply with relevant architecture regulations and standards, providing a architectural foundation for the entire service. | • Security pattern reference confirmed (with security architecture) | • Joint design review with security architecture | • Enterprise design integration evidence with security architecture |
| Design | Scalability and Reliability Design | Enterprise Architect | Ensures that scalability and reliability designs include robust architecture measures to handle varying loads and potential threats effectively. This involves integrating architecture considerations into redundancy, load balancing, and autoscaling strategies to maintain service integrity under all conditions. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Advise on designing for scalability and reliability with a focus on maintaining architecture at scale. • Participate in defining strategies for load balancing, redundancy, and failover capabilities that do not compromise architecture measures. | • Scale guardrails reference | • Enterprise resilience requirements input | • Enterprise resilience review • Systemic failure-mode analysis across domains |
| Design | Cost Optimisation | Enterprise Architect | Optimises architecture investments by integrating cost-effective solutions that do not compromise on architecture. The Enterprise architecture Architect evaluates and recommends technologies and practices that provide the best return on investment while maintaining strict architecture standards. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Assist in identifying cost-effective architecture solutions that maximise resource utilisation without sacrificing architecture. • Evaluate and recommend architecture technologies and practices that provide the best ROI while maintaining rigorous architecture standards. | • Reuse directive (shared platform X) | • Shared-capability options assessment | • Enterprise cost-value optimisation paper • Shared services roadmap update |
| Design | Design Review and Validation | Enterprise Architect | Conducts thorough reviews and validations of the service design to ensure architecture measures meet all specified requirements. This critical oversight confirms that the service is not only compliant with architecture policies but also prepared to handle evolving threats effectively. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Lead architecture-specific design reviews and validation processes to ensure that the design meets all specified architecture requirements and best practices. • Coordinate with various stakeholders to ensure that architecture considerations are understood and implemented correctly. | • Gate decision record | • Design authority minutes with conditions tracked | • Formal enterprise assurance report • Independent review oversight |
| Design | Documentation | Enterprise Architect | Oversees the documentation of all architecture-related design decisions and architectures. The architecture Architect ensures that these documents are comprehensive and maintained up-to-date, serving as essential references for troubleshooting, maintenance, and future audits. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Ensure that all architecture designs and decisions are thoroughly documented, providing a clear reference for future maintenance, troubleshooting, and audits. • Advocate for the creation of architecture documentation that is detailed, up-to-date, and accessible to all relevant parties for ongoing reference and training. | • Repository links verified at gate | • Repository updates validated for the initiative | • Enterprise documentation set updated (models, patterns, decisions) |
| Development | Idea Generation and Requirements | Enterprise Architect | Ensuring that architecture is foundational to new initiatives. They oversee the development of a centralised repository of architecture requirements and standards that projects must adhere to, ensuring alignment with regulatory and strategic goals. By conducting enterprise-wide risk assessments and providing targeted workshops, the EA ensures that architecture considerations are seamlessly integrated into project charters and business cases. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop and maintain a centralised repository of architecture requirements and standards that all projects must adhere to, ensuring consistency and compliance from the outset. • Provide strategic oversight on the integration of architecture into business cases and project charters. • Organise workshops and training sessions to educate project teams on identifying and documenting architecture requirements aligned with enterprise-level strategies. • Lead architecture risk assessments at the enterprise level to prioritise architecture needs across multiple projects. | • Standards repository reference issued | • Central repository updates for the initiative | • Enterprise requirements framework maintenance • Standards gap analysis |
| Development | Design and Architecture | Enterprise Architect | Establishes and maintains a blueprint for enterprise-wide architecture, serving as a guideline for all project designs. They lead cross-project review boards to ensure consistent application of architecture principles while promoting architectural innovation. Additionally, the EA benchmarks and advocates for the integration of emerging technologies that enhance architecture resilience, ensuring these innovations align with long-term organisational objectives. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop and maintain a centralised repository of architecture requirements and standards that all projects must adhere to, ensuring consistency and compliance from the outset. • Provide strategic oversight on the integration of architecture into business cases and project charters. • Organise workshops and training sessions to educate project teams on identifying and documenting architecture requirements aligned with enterprise-level strategies. • Lead architecture risk assessments at the enterprise level to prioritise architecture needs across multiple projects. | • Blueprint conformance check | • Blueprint alignment review with managed deviations | • Enterprise blueprint updates • Cross-programme consistency review |
| Development | Development and Coding | Enterprise Architect | Implements a unified architectural software development lifecycle framework across the organisation. They work closely with development teams to integrate architectural coding practices within modern methodologies such as Agile and DevOps. By organising code review sessions and architecture hackathons, the EA cultivates a proactive architecture culture and ensures that development teams have access to a curated library of architectural coding resources, thereby accelerating the adoption of architectural practices. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Advise on the selection of operational technologies and infrastructure that enhance architecture and resilience. • Participate in defining operational architecture that includes robust recovery and backup solutions. • Evaluate and recommend architectural configurations for operational environments, focusing on long-term sustainability and ease of management. • Ensure architectural plans include provisions for architecture patches and updates. | • Engineering standards reference issued | • Engineering standards conformance assessment | • Enterprise engineering standards updates • Toolchain strategy |
| Development | Testing and Quality Assurance | Enterprise Architect | Standardises architecture testing protocols, including automation frameworks that integrate into continuous testing environments. They provide strategic oversight on the prioritisation and remediation of architecture defects, ensuring that all projects adhere to rigorous architecture benchmarks. The EA also oversees the maintenance of a dynamic threat model, which evolves in response to emerging threats and project developments, ensuring continuous protection. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Standardise advanced architecture testing techniques, such as fuzzing and ethical hacking, across organisations . • Develop architecture test automation frameworks that can be integrated into continuous testing environments. • Provide guidance on handling and prioritising the remediation of architecture defects found during testing. • Oversee the creation and maintenance of a dynamic threat model that adapts as new threats emerge and projects evolve. | • Quality standards reference issued | • Quality approach conformance review | • Enterprise quality framework • Assurance depth scheme by risk tier |
| Development | Deployment and Release Management | Enterprise Architect | Ensures that architectural release management protocols are standardised across projects, including comprehensive guidelines for containerisation and cloud deployments. They conduct post-deployment audits to confirm adherence to architecture designs and establish performance benchmarks to assess the impact of architecture measures on system operations, thereby ensuring that deployments enhance, rather than inhibit, system functionality. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Standardise architectural release management protocols, including rollback procedures and emergency response strategies, across all projects. • Develop architecture guidelines for containerisation and cloud deployments that all projects should follow. • Conduct post-deployment architecture audits to ensure compliance with the designed architecture. • Establish architecture performance benchmarks for new deployments to measure the impact of architecture on overall system performance. | • Release standards reference | • Release approach review for the programme | • Enterprise release standards • Delivery pipeline reference architecture |
| Development | Monitoring and Performance Optimisation | Enterprise Architect | Development of architecture-specific performance management tools, defining key architecture performance indicators that align with overarching business objectives. They spearhead the implementation of adaptive architecture measures based on real-time data, optimising architecture responsiveness and system resilience. Regular architecture performance reviews enable the EA to anticipate potential issues and strategically plan for enhancements. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Lead the development of architecture-specific performance management tools and dashboards for real-time monitoring across the enterprise. • Define key architecture performance indicators (KPIs) that align with business objectives for all projects. • Coordinate the implementation of adaptive architecture measures based on monitoring insights to enhance system resilience. • Facilitate regular architecture performance reviews to identify trends, anticipate potential issues, and plan strategic enhancements. | • KPI set reference provided | • KPI definitions aligned to enterprise metrics | • Enterprise metrics framework • Executive dashboard specification |
| Development | Feedback and Continuous Improvement | Enterprise Architect | Establishes a centralised feedback mechanism to capture and analyse architecture-specific insights from across the project lifecycle. This feedback informs continuous updates to the enterprise architecture strategy, ensuring it remains relevant and effective in addressing real-world challenges. By championing initiatives that drive architecture improvements and encourage innovation, the EA ensures that organisations architecture practices are continuously refined and advanced. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Implement a centralised feedback mechanism to gather architecture feedback from across all stages of project lifecycles. • Analyse feedback data to derive actionable insights that inform enterprise architecture policy updates and project guidelines. • Regularly update the enterprise architecture strategy based on real-world application and feedback to maintain relevance and effectiveness. • Champion continuous improvement initiatives that drive better architecture practices and encourage innovation in addressing architecture challenges. | • Feedback routed to standards backlog | • Feedback analysis with standards update proposals | • Enterprise improvement reporting • Lessons integration into standards |
| Testing | Test Planning and Strategy | Enterprise Architect | Orchestrates the development of a unified testing strategy, embedding architecture across all project phases. This strategy standardises architecture testing protocols across organisations and ensures each project adheres to the same high standards and methodologies. By incorporating regulatory and compliance requirements, the EA ensures architecture measures are consistent and compliant across various sectors. This strategic oversight aligns architecture practices with evolving business objectives effectively. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop an enterprise-wide testing strategy that integrates architecture at every phase, ensuring consistency across all projects. • Establish architecture testing standards, methodologies, and frameworks that all projects must adhere to, creating a uniform approach. • Identify and incorporate regulatory and compliance requirements into the testing strategy. • Facilitate cross-departmental collaborations to align architecture testing strategies with business objectives and technology advancements. | • Test strategy standards reference | • Strategy review against enterprise assurance requirements | • Enterprise testing strategy • Assurance matrix by risk tier |
| Testing | Test Environment Setup | Enterprise Architect | Establishes baseline architecture configurations to maintain integrity and architecture controls across all environments. They implement stringent access controls and continuous monitoring to safeguard these environments from unauthorised access and potential breaches. Regular architecture audits ensure that any vulnerabilities or misconfigurations are promptly identified and corrected, maintaining the integrity of the testing processes. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Define baseline architecture configurations for all test environments across organisations to maintain control over data integrity and architecture. • Ensure the proper segregation of test environments from production networks to safeguard operational data. • Implement robust access controls and monitoring protocols for test environments to prevent unauthorized access and potential data leaks. • Regularly audit the architecture of test environments to detect and rectify vulnerabilities or misconfigurations promptly. | • Environment standards reference | • Environment conformance confirmation | • Enterprise environment standards published and maintained |
| Testing | Test Case Design and Improvement | Enterprise Architect | Guides the development of architecture test cases, ensuring coverage of anticipated architecture scenarios. They promote the creation of a centralised repository of reusable test cases, enhancing efficiency and consistency in architecture testing across projects. Periodic reviews and updates of test cases keep organisations abreast of emerging threats and technological changes, ensuring that testing remains robust and relevant. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Guide the development and standardisation of architecture test cases that comprehensively cover expected threats and vulnerabilities. • Introduce a repository of reusable architecture test cases to facilitate efficient test planning and execution across multiple projects. • Periodically review and update architecture test cases in response to new threat intelligence and technological changes. • Encourage the use of advanced simulation tools and techniques to create realistic architecture scenarios for testing. | • Scenario library reference | • Coverage review against enterprise scenarios | • Enterprise scenario library maintenance |
| Testing | Test Execution | Enterprise Architect | Monitors the adherence to predefined architecture protocols and timelines. They provide expert analysis of complex test results, particularly in simulations that involve sophisticated architecture scenarios. The EA also coordinates realistic incident response simulations to rigorously evaluate the effectiveness of organisations architecture measures, ensuring that test documentation is meticulous and thorough. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Monitor the execution of architecture tests to ensure they are carried out as per the defined protocols and within the set timelines. • Provide expertise in interpreting test results, particularly in complex architecture testing scenarios. • Coordinate incident response simulations during testing to evaluate the effectiveness of existing architecture measures. • Ensure comprehensive documentation of test activities and outcomes for future reference and audits. | • Escalation point for significant findings | • Oversight review of significant findings | • Portfolio test outcome analysis • Systemic findings report |
| Testing | Test Data Management | Enterprise Architect | Oversees the management of sensitive test data, implementing policies that enforce data protection standards such as encryption and anonymisation. They ensure that data handling practices comply with legal and regulatory requirements and that all personnel involved in testing are trained in these practices. Regular audits of test data management procedures ensure ongoing compliance and architecture. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Oversee the development and enforcement of policies for handling sensitive test data, including encryption, anonymisation, and architectural storage. • Establish protocols for the architectural disposal of test data that is no longer required. • Audit test data management practices regularly to ensure compliance with architecture policies and data protection laws. • Train testing teams on best practices for handling and protecting test data to prevent data breaches. | • Data policy reference issued | • Policy conformance confirmation | • Enterprise test data policy maintenance |
| Testing | Test Automation | Enterprise Architect | Advocates for the integration of scalable automated architecture testing tools within the CI/CD pipelines. They ensure that these tools are properly evaluated and updated to meet the dynamic needs of the organisation. This automation not only improves the efficiency of testing activities but also ensures that architecture testing evolves in line with technological advancements and new architecture challenges. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Promote the integration of automated architecture testing tools that are scalable and adaptable to different project needs. • Oversee the implementation of continuous integration and continuous deployment (CI/CD) pipelines that include automated architecture scans. • Evaluate and approve new automation tools and technologies that can enhance the effectiveness of architecture testing. • Ensure that automated tests are regularly reviewed and updated to adapt to new architecture challenges and business requirements. | • Approved tooling reference | • Automation approach review vs enterprise toolchain | • Enterprise automation standards • Tool rationalisation decisions |
| Testing | Performance Testing | Enterprise Architect | Ensures that architecture implementations do not adversely affect system performance. They work closely with performance teams to include architecture stress tests, analysing how architecture features perform under extreme conditions. This collaborative effort helps identify any architecture vulnerabilities that emerge under stress, providing critical insights for strengthening system defences. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Integrate architecture considerations into performance testing to ensure that architecture features do not adversely affect system performance. • Collaborate with performance testing teams to incorporate architecture stress tests under peak load conditions. • Analyse performance test results to identify potential architecture weaknesses exposed under stress and provide recommendations for reinforcement. | • Performance guardrails reference | • Performance findings review with direction | • Enterprise performance engineering analysis informing standards |
| Testing | Defect Tracking and Management | Enterprise Architect | Standardises the process of tracking and managing architecture defects across the organisation. They ensure that defects are prioritised based on their severity and impact, facilitating rapid and effective resolutions. Regular reviews of outstanding defects help refine response strategies and prevent similar issues in future projects. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Standardise defect tracking systems and ensure that architecture defects are classified, tracked, and managed with high priority. • Develop protocols for rapid response and resolution of critical architecture defects discovered during testing. • encourage a feedback loop between project teams and architecture architects to enhance the defect resolution process based on past incidents and challenges. • Facilitate regular reviews of unresolved architecture defects to assess risk and determine necessary actions. | • Classification standard reference | • Escalation conformance check | • Portfolio defect trend analysis • Systemic remediation direction |
| Testing | Continuous Improvement | Enterprise Architect | Analyses architecture testing outcomes and post-deployment performance to identify areas for enhancement. They organise regular review sessions to discuss testing successes and areas needing improvement, encourage ing a culture of continuous learning and adaptation. The EA ensures that architecture testing practices are not static but evolve to meet the changing landscape of threats and business needs. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Lead the analysis of testing and post-deployment data to drive continuous improvement in architecture testing practices. • Organise regular review sessions with project teams to discuss successes and areas of improvement in architecture testing. • Stay updated with the latest architecture testing methodologies and tools to ensure the organisations testing practices remain state-of-the-art. • Advocate for ongoing training and development opportunities for testing teams to enhance their architecture knowledge and skills. | • Lessons routed to standards backlog | • Improvement review with standards updates | • Enterprise assurance effectiveness review |
| Deployment | Provisioning and Configuration | Enterprise Architect | Ensures that all systems are provisioned and configured to meet the architecture standards set by organisations . The EA develops and enforces configuration management policies to provide uniformity and efficiency across different environments. They oversee the deployment of servers, storage, and network capabilities, making sure that each component is configured to optimise architecture and operational performance from the outset. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop configuration management policies that ensure all deployed systems meet architecture requirements from the outset. • Oversee the provisioning process of servers, storage, and networking equipment to ensure they are aligned with architecture best practices. • Implement robust architecture configurations, including firewall settings, encryption standards, and architectural network protocols. • Establish guidelines for configuration changes to maintain architecture integrity across the system lifecycle. | • Baseline standard reference | • Baseline conformance oversight | • Enterprise configuration policy • Platform baselines published |
| Deployment | Monitoring and Incident Management | Enterprise Architect | Responsible for implementing monitoring systems across organisations to oversee the performance, availability, and architecture of services. They establish key performance indicators (KPIs) for architecture monitoring and proactive incident management. The EA ensures that monitoring systems are capable of detecting and responding to architecture incidents swiftly, thereby minimising potential disruptions and enhancing the overall architecture posture. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Design monitoring systems to detect, alert, and respond to architecture incidents in real time. • Develop incident response procedures and KPIs to evaluate the effectiveness and timeliness of responses to architecture threats. • Train operational teams in incident detection and response techniques, ensuring rapid and effective handling of potential breaches. • Continuously review and enhance monitoring tools and practices to adapt to new architecture challenges and technological advancements. | • Monitoring standards reference | • Monitoring design conformance review | • Enterprise observability reference architecture • Major-incident framework input |
| Deployment | Performance Optimisation | Enterprise Architect | Uses monitoring data to optimise the performance of services across organisations . They adjust resource allocation, refine configurations, and employ advanced caching technologies to enhance service responsiveness and scalability. The EA ensures that performance optimisation efforts do not compromise architecture, balancing efficiency with robust architecture measures. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Analyse performance data to identify bottlenecks and areas where architecture measures might impact system efficiency. • Optimise resource allocation and system configurations to balance architecture with performance and scalability. • Implement advanced caching techniques and load balancing strategies to improve service response times without compromising architecture. | • Optimisation guardrails reference | • Optimisation decisions review for architectural impact | • Cross-service optimisation analysis informing platform strategy |
| Deployment | Backup and Disaster Recovery | Enterprise Architect | Defines and oversees the implementation of backup and recovery procedures to ensure data integrity and availability across all services. They ensure that backup strategies are in alignment with business continuity requirements and are capable of restoring services quickly in the event of a disaster. The EA regularly reviews and updates these strategies to adapt to new business needs and technological advancements. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Create and maintain a comprehensive disaster recovery plan that includes regular backups, failover procedures, and recovery tests. • Automate backup processes to ensure data integrity and minimise the risk of data loss in any disaster scenario. • Conduct regular disaster recovery drills to ensure all teams are prepared and recovery processes are effective and timely. • Update and refine backup and disaster recovery protocols to reflect changes in technology and business requirements. | • Resilience standards reference | • DR approach conformance review | • Enterprise resilience strategy contribution • Recovery standards |
| Deployment | Security Management | Enterprise Architect | Enforces strict architecture measures across all deployment phases. They assure access control policies, encryption standards, and regularly updates architecture procedures to protect against new threats. The EA conducts frequent architecture audits to ensure compliance with both internal architecture policies and external regulations. By continuously monitoring for threats and vulnerabilities, the EA maintains a architectural deployment environment. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Regularly update architecture policies and procedures to incorporate the latest architecture trends, technologies, and regulatory requirements. • Enforce rigorous access control measures to safeguard sensitive data and systems from unauthorized access. • Schedule and conduct regular architecture audits and vulnerability assessments to identify and address potential architecture gaps. • Collaborate with compliance teams to ensure all deployments meet industry standards and regulatory requirements. | • Policy set reference (with security architecture) | • Management arrangements conformance review | • Enterprise policy updates coordinated with security architecture |
| Deployment | Patch and Configuration Management | Enterprise Architect | Ensures that all services are maintained with the latest architecture patches and configurations. They oversee regular updates to enhance service reliability and architecture, ensuring that these updates are implemented without disrupting service continuity. The EA’s management of patching processes is important for maintaining high architecture and operational standards. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Oversee a scheduled patch management program that ensures all systems are protected against known vulnerabilities. • Implement change management processes that ensure all configuration changes are reviewed for architecture implications before implementation. • Maintain an audit trail of all patches and configuration changes to provide accountability and facilitate post-implementation reviews. | • Lifecycle policy reference | • Lifecycle programme conformance oversight | • Enterprise lifecycle management policy maintenance |
| Deployment | Capacity Planning and Scaling | Enterprise Architect | Monitor service demand and analyse usage trends to forecast future resource needs, planning capacity adjustments to handle growth efficiently. The EA ensures that scalability measures are architectural and cost-effective, optimizing resource utilisation without exposing organisations to increased architecture risks. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Systematically analyse current and projected service demand to plan resource scaling that accommodates growth without sacrificing architecture. • Develop scalable architecture architectures that ensure architecture measures expand effectively with system growth. • Collaborate with finance and business units to budget for scaling resources in a cost-effective manner that adheres to architecture requirements. | • Scaling guardrails reference | • Capacity approach review | • Enterprise capacity analysis informing platform investment |
| Deployment | Continuous Improvement | Enterprise Architect | Commit to the ongoing refinement gather feedback from monitoring systems, incident reports, and user interactions to refine deployment strategies and enhance architecture measures. The EA leads initiatives to resolve issues, optimise performance, and adapt deployment practices to meet evolving needs, ensuring organisations deployments remain state-of-the-art and securely aligned with business objectives. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Encourage a culture that values continuous improvement in architecture practices through regular feedback loops and performance reviews. • Lead cross-functional teams in identifying, implementing, and evaluating improvements in the architecture deployment process. • Utilise insights from monitoring, incidents, and operational feedback to drive strategic changes that enhance architecture measures and deployment efficiency. | • Lessons routed to enterprise backlog | • Lessons review with standards implications | • Enterprise improvement portfolio reporting |
| Transition | Knowledge Transfer and Training | Enterprise Architect | Oversees comprehensive architecture training and knowledge transfer during the transition to ensure operational teams are prepared to manage the architecture. This includes ensuring that systems adhere to enterprise-level architecture requirements. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture), RLMT (Stakeholder relationship management), ETDL (Learning delivery) | • Ensure that all architecture-related tools and procedures are understood by operational staff. • Lead workshops for operational teams to cover incident response protocols, monitoring systems, and new architecture controls. • Ensure the alignment of training with the enterprise architecture. | • Handover standards reference | • Handover completeness oversight | • Enterprise transition standards • Readiness framework maintenance |
| Transition | Incident Response Preparation | Enterprise Architect | Prepares incident response frameworks at an enterprise level, ensuring that all services and systems transitioned into operation have robust incident detection and management protocols integrated. This is done with a focus on enterprise-wide threats. | Level 6 - Initiate, influence | SCAD (Security operations), USUP (Incident management) | • Review incident response plans for enterprise services. • Ensure SIEM systems are properly configured for new services. • Conduct risk assessments to anticipate incident scenarios that may arise post-transition. | • Enterprise process linkage confirmed | • Readiness review against enterprise processes | • Enterprise resilience framework updates |
| Transition | Monitoring Enablement | Enterprise Architect | Ensures that architecture monitoring systems are activated and integrated within the broader enterprise monitoring environment, with a focus on scalability and alignment with overarching enterprise architecture goals. | Level 6 - Initiate, influence | METL (Methods and tools), EMRG (Emerging technology monitoring) | • Enable enterprise-wide visibility of systems during the transition. • Configure advanced detection capabilities and thresholds in the SIEM. • Align monitoring systems with long-term enterprise objectives, focusing on adaptability to new and evolving threats. | • Onboarding standard reference | • Enablement conformance confirmation | • Enterprise observability strategy updates |
| Transition | Operational Handover | Enterprise Architect | Oversees the architectural handover of services from the project team to the operational team. This includes verifying that all architecture configurations, documentation, and tools are transferred without any gaps, ensuring continued enterprise-level architecture alignment. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture), CHMG (Change control), SCAD (Security operations) | • Review the handover of architecture responsibilities to ensure completeness. • Conduct a final enterprise-level audit of architecture policies and procedures. • Ensure that operational teams have the resources and documentation needed to maintain architecture at the enterprise level. | • Gate sign-off record | • Enterprise-level handover completeness review | • Formal acceptance oversight with benefits tracking initiation |
| Transition | Post-Deployment Security Testing | Enterprise Architect | Validates the architecture of newly deployed services by conducting final architecture tests to ensure no new vulnerabilities have been introduced. Emphasis is on adherence to enterprise-wide architecture standards. | Level 6 - Initiate, influence | NFTS (Non-functional testing), COPL (Continuity management) | • Coordinate and conduct enterprise-level architecture tests post-deployment. • Validate that the architecture controls in place meet enterprise architecture requirements. • Ensure that the system functions securely under operational conditions. | • Validation results noted at gate (with security architecture) | • Post-deployment assurance review record | • Enterprise validation oversight with risk acceptance routing |
| Operation | Environment Provisioning | Enterprise Architect | Oversees the creation and configuration of virtual and physical environments to ensure they comply with enterprise-wide architecture standards. They play a crucial role in defining architecture protocols for the provisioning of resources, such as machines, devices, and storage, ensuring these protocols enhance architecture and reduce potential vulnerabilities from the outset. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop and enforce architecture standards for the provisioning of all operational environments, ensuring alignment with enterprise-wide architecture policies. • Oversee the architectural setup of infrastructure, including virtual machines, devices, and network configurations, to mitigate potential architecture risks. • Establish procedures for architectural resource allocation that ensure all environments are consistent and compliant with requirements. | • Provisioning standards reference | • Standards conformance oversight | • Enterprise provisioning standards with compliance reporting |
| Operation | Release Packaging | Enterprise Architect | Ensures that deployment artifacts are created with architecture in mind, including rigorous version control and traceability of all components. They define the standards for bundling code and configurations that ensure architectural and traceable releases, facilitating efficient and architectural deployment processes. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Oversee the creation of deployment artifacts, ensuring that all release packages adhere to strict architecture and version control guidelines. • Implement traceability measures for all configurations and code changes to facilitate architecture audits and compliance checks. • Ensure that release packages are securely stored and managed to prevent unauthorized access. | • Release standards reference | • Integrity standards conformance review | • Enterprise software delivery standards maintenance |
| Operation | Configuration Management | Enterprise Architect | Managing and overseeing the configuration of environments and integration across the organisation. They establish and maintain architecture guidelines for configuration management that all operational projects must follow, ensuring consistency and compliance with architecture best practices across all deployments. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Define and maintain architecture policies for managing configurations, environment-specific settings, and external integrations across all operational platforms. • Ensure that configuration changes follow a controlled and documented process to maintain architecture integrity. • Regularly audit configuration management practices to ensure they meet architecture standards and address new threats. | • Configuration policy reference | • Compliance oversight reporting | • Enterprise configuration policy • Estate compliance analytics |
| Operation | Deployment Automation | Enterprise Architect | Designs and implements automation strategies for deployments to ensure consistent, repeatable, and error-free deployment pipelines. They incorporate architecture measures into the automation tools and processes, enhancing the integrity and reliability of automated deployments across different environments. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Design and implement architectural deployment automation processes that enhance consistency, repeatability, and efficiency across deployments. • Integrate architecture assessments into the automation pipelines to detect vulnerabilities before they impact production environments. • Monitor automated deployment processes to ensure they operate under the defined architecture parameters. | • Automation standards reference | • Automation design review | • Enterprise automation standards • Platform engineering strategy input |
| Operation | Deployment Verification | Enterprise Architect | Ensures that both functional and non-functional testing includes comprehensive architecture checks. They set predefined acceptance criteria that include stringent architecture validation to ensure that new deployments perform securely as intended before going live. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Establish architecture testing protocols as part of deployment verification to ensure all new systems meet organisations architecture standards. • Oversee the execution of architecture validation tests to confirm that deployments are architectural and compliant with predefined acceptance criteria. • Analyse results from deployment tests to identify and address architecture vulnerabilities promptly. | • Verification protocol reference | • Protocol conformance review | • Enterprise verification standards maintenance |
| Operation | Rollback and Recovery | Enterprise Architect | Plans and tests rollback and recovery procedures to ensure they are effective and minimise downtime. They oversee the implementation of disaster recovery plans that allow quick restoration of services to a known good state, ensuring business continuity and data integrity. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Plan and test rollback procedures and disaster recovery plans to ensure they can be executed swiftly and effectively in the event of a architecture breach or deployment failure. • Ensure that recovery strategies are capable of restoring services to their last known architectural state, minimising downtime and preserving data integrity. • Regularly review and update disaster recovery and rollback protocols to adapt to new business needs and technology changes. | • Recovery standards reference | • Recovery capability review | • Enterprise recovery standards including cross-service dependencies |
| Operation | Monitoring and Performance Optimisation | Enterprise Architect | Establishes monitoring procedures that not only track the performance and functionality of services but also oversee their architecture posture continuously. They utilize data from these monitoring activities to optimise performance without compromising architecture, ensuring organisations operations adapt to varying conditions efficiently. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Set up comprehensive architecture monitoring systems that continuously evaluate the architecture posture of operational services. • Utilise monitoring data to optimise service performance without compromising on architecture measures. • Develop strategies for performance tuning that enhance service responsiveness and scalability while maintaining architecture integrity. | • Metrics feed to enterprise dashboard confirmed | • Service health review within portfolio reporting | • Portfolio health reporting • Cross-domain performance analysis |
| Operation | Defect Tracking and Management | Enterprise Architect | Develops systems for tracking and managing defects throughout operational processes. They ensure that all architecture-related defects are prioritised based on their impact, coordinated efficiently with development teams, and resolved swiftly to maintain high service quality and architecture standards. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Implement a centralised defect tracking system that prioritizes architecture issues and coordinates their resolution efficiently. • Oversee the defect management process, ensuring timely updates and patches are applied to mitigate risks associated with identified vulnerabilities. • Facilitate communication between operational teams and development teams to ensure seamless resolution of architecture defects. | • Severity standards reference | • Escalation oversight for significant issues | • Portfolio defect analytics • Architectural root-cause directives |
| Maintenance | Monitoring and Alerting | Enterprise Architect | Orchestrates the establishment of unified monitoring protocols that are applied across all operational environments within organisations . They integrate state-of-the-art detection tools and data analytics to proactively identify architecture threats, ensuring real-time alerting and swift mitigation. By automating responses to common architecture events, the EA enhances the speed and accuracy of the organisations architecture operations, providing stakeholders with real-time architecture dashboards for immediate visibility and action. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Design and implement uniform monitoring processes across all operational environments to detect, analyse, and alert on architecture threats consistently. • Utilise cutting-edge detection technologies and data analytics to proactively identify and address potential architecture issues before they become critical. • Automate responses to common architecture events to reduce human error and response time, ensuring swift action is taken to mitigate risks. • Maintain real-time architecture dashboards that provide up-to-date visibility of architecture statuses across organisations to relevant stakeholders. | • Standards reference | • Effectiveness oversight review | • Enterprise observability strategy refresh • Coverage gap analysis |
| Maintenance | Incident and Problem Management | Enterprise Architect | Centralises the incident reporting mechanisms, ensuring that all architecture incidents are managed consistently and efficiently across departments. They continuously enhance organisations incident response processes by integrating lessons learned from recent architecture incidents. Comprehensive recovery plans are developed and maintained, detailing actionable steps for effective recovery and ensuring business continuity in the face of architecture challenges. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Establish a centralised platform for reporting and managing architecture incidents to ensure consistency in handling and response strategies across various departments. • Regularly review and enhance incident response processes to incorporate lessons learned from recent incidents, improving both speed and effectiveness. • Create and maintain comprehensive recovery plans that detail actions to be taken during and after a architecture incident, ensuring business continuity. | • Escalation framework reference | • Significant incident review participation | • Enterprise incident trend analysis • Architectural lessons directives |
| Maintenance | Patch and Update Management | Enterprise Architect | Manages a coordinated patching schedule to ensure all systems across organisations are updated timely, minimising potential architecture vulnerabilities and operational disruptions. Post-update, they conduct thorough vulnerability assessments to confirm the architecture integrity of the systems. Additionally, the EA leads educational initiatives on the importance of patch compliance, emphasising its critical role in maintaining organisations architecture and operational integrity. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Manage a coordinated patching schedule across organisations to ensure timely updates and minimise disruptions. • Perform vulnerability assessments after updates to verify that new or unforeseen vulnerabilities have not been introduced. • Educate and inform all operational teams about the importance of patch compliance to architecture and operational integrity. | • Lifecycle policy reference | • Lifecycle posture oversight for the domain | • Enterprise lifecycle posture reporting • Policy threshold reviews |
| Maintenance | Performance Optimisation | Enterprise Architect | Ensures that architecture measures align with system performance objectives, identifying any negative impacts and addressing them proactively. They regularly optimise architecture configurations to boost system efficiency without compromising architecture and facilitate cross-functional reviews with IT, operations, and architecture teams to maintain a balanced approach to performance optimisation and architecture. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Ensure that architecture measures are aligned with system performance goals, identifying and addressing any negative impacts. • Periodically optimise architecture configurations to enhance system efficiency without compromising architecture. • Facilitate regular performance reviews with IT, operations, and architecture teams to ensure a balanced approach to performance and architecture. | • Guardrails reference | • Performance review oversight | • Enterprise standards updates from performance findings |
| Maintenance | Capacity Planning and Scaling | Enterprise Architect | Embeds architecture risk assessments into the capacity planning processes, ensuring that increases in system capacity do not inadvertently introduce architecture risks. They provide expert guidance on architectural infrastructure expansion and resource allocation, continuously monitoring the impact of scaling activities on organisations architecture posture to make necessary adjustments. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Embed architecture risk assessments into the capacity planning process to ensure new capacity additions do not introduce vulnerabilities. • Provide expert advice on architectural infrastructure expansion and resource allocation, keeping architecture as a primary consideration. • Continuously monitor how changes in system capacity impact the overall architecture posture, adjusting architecture strategies accordingly. | • Capacity risk note if flagged | • Capacity risk review | • Enterprise capacity assessment integrated into planning |
| Maintenance | User Feedback and Enhancements | Enterprise Architect | Obtains and analyses user feedback focused specifically on architecture, using this input to drive improvements in architecture practices. They prioritise the implementation of architecture enhancements based on this feedback, enhancing user trust and satisfaction. They encourage user participation in architecture testing processes to ensure that architecture measures are both effective and aligned with user needs. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Actively solicit and analyse user feedback focused on architecture aspects, using this data to drive improvements in architecture practices. • Prioritise the implementation of architecture enhancements based on direct insights and requests from users to enhance user trust and satisfaction. • Encourage user participation in architecture testing and validation processes to gather feedback and enhance architecture measures. | • Feedback routed to backlog | • Feedback trend review | • Enterprise experience analysis informing principles |
| Maintenance | Continual Improvement and Innovation | Enterprise Architect | Leads initiatives to explore and integrate new architecture technologies and methodologies. They organise interdepartmental workshops and seminars to encourage a culture of knowledge sharing and continuous learning in architecture best practices. Staying abreast of industry trends, the EA ensures that organisations architecture practices are not only current but also forward-thinking, keeping organisations agile and well-prepared for future architecture challenges | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Spearhead initiatives to explore new architecture technologies and methodologies that could enhance organisational architecture capabilities. • Organise workshops and roadshows to share knowledge and best practices in architecture across different departments. • Stay abreast of and implement industry-wide architecture trends and innovations to keep organisations architecture practices up-to-date and effective. | • Items routed to enterprise backlog | • Domain improvement plan review | • Enterprise improvement programme with adoption decisions |
| Optimisation | Performance Analysis and Benchmarking | Enterprise Architect | Analyses performance across the portfolio — capability health, application fitness, platform utilisation — benchmarking against targets and peers, and directing systemic improvement where individual projects cannot. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Aggregate capability and application health metrics into a portfolio performance view. • Benchmark domains against business targets, industry reference points and architectural fitness criteria. • Identify systemic weaknesses spanning projects and commission targeted improvement. • Report portfolio health and trends to executive governance. | • Domain metrics reviewed in portfolio dashboard | • Domain benchmarking review with improvement directives | • Portfolio performance report • Capability health assessment • Executive review pack |
| Optimisation | Cost and Value Optimisation | Enterprise Architect | Optimises enterprise technology investment — application rationalisation, platform consolidation, enterprise agreements — redirecting spend from duplication and low-value assets to strategic capability. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Maintain a portfolio view of technology spend mapped to capability and business value. • Direct application rationalisation using structured disposition analysis (e.g. tolerate/invest/migrate/eliminate). • Shape enterprise licensing and sourcing strategy for strategic platforms. • Present costed investment options to boards for explicit trade-off decisions. | • Duplication flag for shared-platform reuse | • Capability overlap assessment across units | • Application rationalisation analysis (disposition per asset) • Investment optimisation strategy • Enterprise agreement case |
| Optimisation | Process Improvement and Automation | Enterprise Architect | Improves enterprise architecture processes — governance cycle times, repository quality, decision throughput — and sets direction for automation of architecture and delivery processes across the organisation. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Streamline architecture governance using throughput and cycle-time evidence. • Improve repository and model quality so architecture information is current and trusted. • Define the enterprise approach to process automation and reusable delivery accelerators. • Measure governance friction and act on trends. | • Governance friction metrics reviewed | • Governance improvement plan (cycle times, decision throughput) | • Enterprise process automation strategy • Repository quality programme • Governance redesign proposal |
| Optimisation | Technology Refresh and Rationalisation | Enterprise Architect | Owns the strategic health of the enterprise technology estate — the technology roadmap, end-of-life exposure across domains, and rationalisation onto strategic platforms. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Maintain the enterprise technology roadmap with lifecycle exposure by domain. • Direct consolidation of overlapping platforms and products onto the strategic set. • Set refresh priorities based on risk, cost and capability gain. • Update reference architectures and standards to reflect the strategic technology set. | • Roadmap lifecycle entries updated | • Domain refresh priorities with sequencing | • Enterprise technology roadmap refresh • Platform consolidation case • Updated reference architectures |
| Optimisation | Control and Configuration Tuning | Enterprise Architect | Sets enterprise standards and guardrails for optimisation activity across domains — ensuring local tuning stays within architectural intent, and harvesting recurring lessons into updated standards and patterns. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Define guardrails for local optimisation and configuration change requiring design-authority approval. • Review aggregated tuning and optimisation activity for patterns indicating standards weaknesses. • Ensure optimisation does not silently erode architectural qualities (resilience, interoperability, security). • Fold recurring lessons into updated standards, patterns and reference architectures. | • Optimisation guardrails reference issued | • Aggregated optimisation review with standards implications | • Enterprise optimisation policy • Standards and pattern updates from harvested lessons |
| Optimisation | Capability Enhancement and Innovation | Enterprise Architect | Directs the enterprise innovation agenda — scanning emerging technology, governing pilots across domains, and deciding which proven capabilities become enterprise standards. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Maintain an enterprise technology radar aligned to business strategy. • Govern the portfolio of innovation pilots, avoiding duplicated experiments across domains. • Evaluate pilot outcomes and decide enterprise adoption, updating the capability roadmap. • Brief leadership on strategic implications of emerging technology. | • Technology radar entry updates | • Pilot governance record with evaluation criteria | • Technology radar publication • Pilot portfolio review • Enterprise adoption decisions |
| Retirement | Identification and Assessment | Enterprise Architect | The EA begins the retirement process by conducting thorough assessments of systems, applications, or resources that are candidates for decommissioning. This evaluation focuses on identifying obsolescence, architecture risks, or interoperability issues that may affect the broader enterprise environment. The EA takes into account factors such as underutilisation, elevated maintenance costs, and the potential architecture vulnerabilities of outdated technologies. The goal is to ensure that retiring these assets does not expose organisations to undue risk. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Conduct thorough assessments of existing systems, applications, and resources to identify those that are obsolete, underutilised, or pose elevated architecture risks. • Analyse the impact of potential decommissioning on interconnected systems, data flows, and overall enterprise architecture. • Evaluate the financial implications, including maintenance costs and potential savings, associated with retiring specific systems. • Identify legal and compliance implications of decommissioning, especially related to data retention and privacy requirements. | • Rationalisation candidate list entry | • Retirement assessment review with dependency check | • Portfolio rationalisation analysis • Enterprise dependency assessment |
| Retirement | Planning and Strategy | Enterprise Architect | Once potential retirement candidates are identified, the EA develops a strategic plan for the decommissioning process. This plan includes a detailed risk assessment, outlining potential architecture challenges and mitigation strategies to ensure that the transition is managed securely and efficiently. The EA works closely with IT, compliance, and business units to create a roadmap that aligns with enterprise architecture policies and operational needs, scheduling the decommissioning to minimise disruption to ongoing services. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop decommissioning plans that detail risk assessments, mitigation strategies, and contingency plans. • Collaborate with stakeholders across IT, compliance, legal, and business units to ensure alignment with organisational goals and compliance requirements. • Establish clear schedules and timelines for decommissioning processes, including migration and data destruction phases, to minimise operational disruption. • Define architecture protocols for each phase of the decommissioning process to maintain data integrity and architecture. | • Decommissioning standards reference | • Plan review against enterprise standards | • Enterprise decommissioning strategy • Obligations mapping |
| Retirement | Data Migration and Archiving | Enterprise Architect | The EA oversees the migration and archiving of data from systems slated for decommissioning. They ensure that the data transfer process adheres to strict data integrity and architecture processes. The EA implements data sanitisation standards to prevent any possibility of data leakage and ensures compliance with legal standards for data handling and storage. Their focus is on maintaining the confidentiality and integrity of data throughout its transition to new systems or archival solutions. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Supervise the migration of data from outdated systems to more architectural, modern environments, ensuring that data integrity and architecture are preserved. • Implement rigorous data sanitisation processes for all decommissioned hardware to prevent unauthorised data retrieval. • Coordinate with data storage and compliance teams to ensure all data archiving methods meet current legal standards and organisational policies. • Conduct thorough validations post-migration to ensure all data has been accurately transferred and securely archived. | • Data disposition policy reference | • Disposition plan conformance review | • Enterprise data disposition standards • Archive architecture guidance |
| Retirement | Decommissioning and Resource Cleanup | Enterprise Architect | As systems are physically decommissioned, the EA ensures that all components are securely shut down and that storage devices are either thoroughly wiped or securely destroyed, according to data destruction policies. They oversee the revocation of all associated permissions and ensure that the entire process is documented in detail, confirming that no residual data remains accessible. The EA also manages the recycling or disposal of hardware in an environmentally responsible and architectural manner. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Oversee the physical and architectural decommissioning of hardware, ensuring that all data is irretrievably destroyed if not migrated. • Manage the detailed inventory of all decommissioned assets, maintaining records of asset disposal or repurposing. • Ensure that environmental standards for electronic waste disposal are strictly followed. • Terminate all associated services, contracts, and agreements related to decommissioned systems, ensuring that no residual operational ties remain. | • Disposal standards reference | • Evidence oversight review | • Enterprise disposal standards with assurance sampling |
| Retirement | Communication and User Transition | Enterprise Architect | Effective communication is vital during the decommissioning process. The EA coordinates with communications teams to ensure all stakeholders are well-informed about the changes. They provide comprehensive guidance and support to users transitioning to new systems, facilitating workshops and training sessions to address architecture procedures and operational changes. The EA's communication strategy aims to minimise confusion and disruption, ensuring a seamless transition for all involved. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Develop communication strategies to keep all affected stakeholders informed throughout the decommissioning process. • Provide guidance and support for users transitioning to new systems, including architecture training and documentation on new procedures. • Collect and address feedback from users throughout the transition, making adjustments to improve the process and resolve any issues promptly. | • Comms template reference | • Communication review for completeness | • Enterprise transition communication standards |
| Retirement | Review and Documentation | Enterprise Architect | Following the decommissioning, the EA conducts a detailed review to evaluate the effectiveness of the entire process. This review helps identify any areas for improvement in handling future decommissioning. They update all relevant documentation to reflect the changes made, including architecture policies and operational guidelines. This documentation serves as a crucial record of the transition, detailing the rationale for decommissioning decisions and the methods used to architectural and archive data. | Level 6 - Initiate, influence | STPL (Enterprise and business architecture) | • Conduct detailed reviews after each decommissioning phase to evaluate its success and the effectiveness of the implemented architecture measures. • Document every aspect of the decommissioning process, from initial assessment to final cleanup, ensuring a thorough record for compliance and auditing purposes. • Update the organisations architecture policies, system documentation, and operational guidelines to reflect the changes made through the decommissioning. | • Lessons routed to repository | • Review with repository updates confirmed | • Enterprise closure report • Repository and model updates |
Workbook source · SA
Solutions Architect activity model
Solution-scoped responsibilities from options through transition.
Artefact columns show the information a project should produce, scaled by project size. Risk overrides size: a small-value change touching critical services, complex integrations or novel technology adopts the next band up. Artefacts may live inside existing project documents rather than as standalone deliverables.
| Through Life Stage | Value Stream Activity | Role | Description | SFIA Responsibility Level | Relevant Skills | Activities | Example Artefacts - Small (<£250k, low risk) | Example Artefacts - Medium (£250k–£2m, moderate risk) | Example Artefacts - Large (>£2m, high risk or novel) |
|---|---|---|---|---|---|---|---|---|---|
| Planning | Service Strategy Development | Solutions Architect | Translates overarching technology solution goals into specific project deliverables, ensuring each project aligns with the strategic solution framework. The Solution Architect collaborates with stakeholders to integrate solution into the service's strategic planning from inception, ensuring robust defences are a foundational aspect of the project's design. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Translate overarching technology solution strategies into detailed project-specific solution requirements and benchmarks. • Incorporate enterprise-level solution goals into project scope and objectives. • Engage with enterprise architects to ensure the alignment of project technologies and methodologies with strategic solution directives. • Advocate for the inclusion of solution considerations in project feasibility studies and service design sessions. | • Solution vision note in project brief | • Solution strategy statement in PID • Feasibility view on strategic options | • Solution strategy paper with target-state alignment • Programme-level solution roadmap |
| Planning | Assessment | Solutions Architect | Conducts thorough solution assessments tailored to the project's scope and technological landscape, ensuring all solution risks are identified early. This proactive evaluation helps shape the project's solution posture by aligning it with enterprise-level benchmarks and preparing for potential threats. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Execute detailed solution risk assessments for projects in alignment with enterprise-wide risk management frameworks. • Review and adapt technology solution assessments to address project-specific contexts and challenges. • Collaborate with technology solution teams to update and refine solution assessments based on project developments. • Prepare comprehensive reports that evaluate the solution posture of the project against enterprise standards. | • Current-state note (systems affected, constraints) | • Current-state assessment with capability gaps • RAID entries | • Full current-state analysis • Gap analysis against target architecture • Feasibility study |
| Planning | Governance Planning | Solutions Architect | Develops and enforces a solution governance model that complies with enterprise standards but is customised for project-specific needs. This role ensures that solution responsibilities are clearly defined within the project, enhancing accountability and ensuring consistent adherence to solution policies. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Implement and monitor solution governance as per the frameworks set by the technology solution architecture. • Ensure strict adherence to technology solution policies throughout the project lifecycle. • Develop project-specific solution governance documentation in consultation with technology solution architects. • Establish clear communication channels for reporting solution issues that align with enterprise governance structures. | • Governance route note (which gates apply) | • Project architecture governance plan (gates, reviews, RACI) | • Programme design governance framework • Design authority engagement plan |
| Planning | Security and Compliance Planning | Solutions Architect | Designs a detailed solution and technical requirements compliance plan for the project, aligning with technology solution policies and regulatory demands. The Project solution Architect ensures that these plans are practical, executable, and embedded throughout the project lifecycle, from initial design through final delivery. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Design and refine project-level solution plans to ensure they are fully compliant with enterprise-wide solution policies. • Integrate technical requirements compliance requirements from external and internal standards into the project execution plans. • Schedule, coordinate, and lead regular solution audits, ensuring continuous adherence to technical requirements compliance standards. • Develop and maintain an incident response strategy that aligns with enterprise standards. | • Compliance applicability checklist | • Compliance plan for the solution (with security architect input) | • Full compliance and assurance plan • Regulatory impact assessment |
| Planning | Architecture Design | Solutions Architect | Leads the integration of solution into the project's architecture, ensuring all technical designs incorporate necessary solution controls and mechanisms. This involves close collaboration with technical architects to build solution into the fabric of the project, from data handling to software deployment. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Create detailed solution designs that integrate technology solution requirements with project needs. • Collaborate with enterprise architects to ensure project architectures are scalable, secure, and compliant. • Perform technical design reviews to ensure that solution is embedded in system architecture. | • Solution outline / sketch with pattern reference | • Solution architecture section in HLD • Integration context diagram | • Solution architecture document • Logical and physical models • Integration architecture |
| Planning | Migration Planning | Solutions Architect | Oversees the secure migration of data and systems, ensuring alignment with solution best practices defined at the enterprise level. The Project solution Architect plans and monitors these transitions to mitigate risks and ensure continuity of solution standards throughout the migration process. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Coordinate with enterprise architects to ensure secure migration strategies are robust and comply with standards. • Oversee the secure integration of new systems and data migrations, ensuring minimal risk and disruption. • Develop solution protocols for data handling and system decommissioning during project transitions. • Monitor migration activities to enforce solution measures and adjust plans as needed based on real-time findings. | • Migration approach note (method, sequence) | • Migration plan (waves, rollback, data approach) | • Migration strategy and detailed runbook • Migration risk assessment • Cutover plan |
| Planning | Cost Management Planning | Solutions Architect | Carefully plans and manages the project's solution budget, aligning expenditures with enterprise financial strategies and solution priorities. This involves justifying solution investments by demonstrating their importance in mitigating risks and enhancing the project's value. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Develop detailed budget proposals for solution measures within projects, ensuring alignment with enterprise financial guidelines. • Manage project-level solution expenditures, providing regular financial reports to enterprise architects and stakeholders. • Assess the financial impact of solution decisions, optimising resource allocation to maximise solution ROI. • Advocate for necessary solution funding based on project-specific risks and requirements. | • Solution cost estimate lines in budget | • Costed options (build/buy/reuse) with recommendation | • Investment appraisal with TCO model • Whole-life cost analysis |
| Planning | Training and Change Management Planning | Solutions Architect | Develops and implements solution training and change management strategies tailored to the project's needs. The Project solution Architect ensures all team members understand their solution roles and responsibilities, promoting a culture of solution awareness and technical requirements compliance throughout the project lifecycle. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Design and implement comprehensive solution training programs for project teams based on enterprise standards. • Coordinate with technology solution teams to ensure consistent solution messaging and training across projects. • Manage change processes related to solution, ensuring that all project stakeholders understand and adhere to updated solution practices. • Evaluate and respond to the effectiveness of solution training and change initiatives, adapting strategies to meet project needs. | • User impact note in change comms | • Training and adoption outline for affected teams | • Training and change management plan • Adoption metrics definition |
| Design | Requirements Gathering | Solutions Architect | Actively engages in the initial stages of project design to ensure that solution requirements are accurately captured and integrated. The Solution Architect collaborates with stakeholders to identify specific solution needs, aligning them with the project objectives and ensuring these requirements are clearly documented and actionable. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Work closely with business analysts and project stakeholders to identify and document detailed solution requirements specific to the project. • Analyse business objectives and solution needs to ensure all relevant considerations are captured within project scope. • Analyse regulatory requirements and industry standards to integrate technical requirements compliance into the project from the outset. • Develop solution use cases and threat models that guide the solution design process. | • Requirements list with acceptance criteria | • Requirements catalogue with MoSCoW and traceability to objectives | • Requirements specification • Full traceability matrix • Non-functional requirements baseline |
| Design | Architecture Planning | Solutions Architect | Participates in the architecture planning process, injecting solution expertise to guide the selection of secure service models and technologies. This role ensures that solution is considered in every architectural decision, facilitating the design of a robust service infrastructure that prioritises solution without compromising on functionality. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Participate in architectural decisions, ensuring solution considerations are integrated into service models and technological choices. • Provide expertise on secure network architectures, data protection methods, and application solution standards. • Assist in the selection of technologies and platforms that meet both performance and solution requirements. • Advocate for solution-by-design principles, ensuring they are foundational to the architectural planning process. | • Option note with recommendation | • Options paper with evaluation criteria and scoring | • Formal options appraisal • Architecture decision records for significant choices |
| Design | High and Detailed Design | Solutions Architect | Works closely with the design team to embed comprehensive solution measures throughout the high level and detailed design phases. By specifying essential solution controls like encryption, secure channels, and robust authentication mechanisms, the Solution Architect establishes a secure foundation for the entire project lifecycle. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Develop and implement detailed solution design elements that incorporate best practices like encryption, firewalls, and intrusion detection. • Collaborate with the design team to embed solution at every layer of the infrastructure, from the network to the application level. • Conduct peer reviews of solution designs to validate robustness and adherence to technical specifications. • Document all solution design configurations, providing a clear guide for developers and engineers. | • HLD (lightweight, pattern-based) | • HLD and LLD for affected components • Interface specifications | • Full HLD/LLD set • Data design • Infrastructure design • Interface control documents |
| Design | Security Design | Solutions Architect | Leads the development of the project solution architecture, designing layers of protection that safeguard against a broad spectrum of risks. This includes the integration of advanced solution technologies and adherence to best practice solution protocols to create a resilient and compliant service environment. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Lead the creation of a comprehensive solution architecture, ensuring it encompasses all aspects of the project‚Äö√Ñ√¥s technical and operational scope. • Design and specify solution controls, authentication protocols, and access management systems to protect data and applications. • Integrate solution monitoring tools and incident response mechanisms into the project design. • Validate solution models against established benchmarks and project requirements. | • Security requirements incorporated (with security architecture input) | • Security design section co-produced with security architect | • Security architecture integration evidence across the design set |
| Design | Scalability and Reliability Design | Solutions Architect | Ensures that designs for scalability and reliability incorporate strong solution measures that adapt to changing load conditions and potential threats. The Solution Architect advises on implementing scalable solution solutions that maintain protection and performance even under peak demands. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Ensure that solution designs incorporate flexible scaling options that do not compromise solution as system demand increases. • Advise on the implementation of failover mechanisms and redundancy to maintain solution during potential system failures. • Plan for solution capacity management to handle increases in usage or data flow securely. • Review scalability plans to ensure they meet solution standards across all potential operational scenarios. | • Scaling and availability note in HLD | • Scalability and resilience design with NFR targets | • Resilience architecture (failure modes, recovery design) • Performance model |
| Design | Cost Optimisation | Solutions Architect | Identifies and implements cost-effective solution solutions during the design phase, ensuring that the project maximises solution ROI. This involves balancing budget constraints with the need for effective solution, advocating for investments in technologies that provide long-term solution benefits. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Evaluate the cost implications of solution choices, aiming to optimise the balance between expense and effective protection. • Recommend solution solutions that offer the best value for money without compromising on critical solution needs. • Participate in budget discussions to justify solution expenditures based on risk assessments and potential impact. • Monitor and report on the efficiency of solution investments throughout the design phase. | • Reuse decision note | • Cost comparison of design options | • Cost-optimisation analysis agreed at design authority |
| Design | Design Review and Validation | Solutions Architect | Conducts rigorous solution reviews and validations of the project design to ensure it meets all specified solution requirements and aligns with broader technical requirements compliance standards. This critical evaluation helps to refine the solution posture of the project before moving into deployment. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Conduct comprehensive solution validations to ensure that all design elements meet required solution standards before project implementation. • Organise and lead solution review sessions with project stakeholders to discuss and address potential solution issues. • Adjust solution strategies based on feedback from design reviews to enhance project resilience and technical requirements compliance. • Ensure that final designs incorporate all necessary solution modifications and approvals before moving forward. | • Peer review comments and closure | • Design review record with findings and actions | • Formal design assurance report • Independent review response |
| Design | Documentation | Solutions Architect | Manages the meticulous documentation of solution design decisions and the architectural rationale. The Solution Architect ensures that all solution aspects of the project are well-documented, facilitating future reference, technical requirements compliance audits, and ongoing project governance. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Oversee the documentation process for all solution-related designs and decisions, ensuring clarity and accessibility for future reference. • Maintain detailed records of solution configurations, standards, and guidelines used in the project. • Prepare and update solution documentation to reflect changes and updates during the project lifecycle. • Provide training materials based on the solution documentation to educate the project team and relevant stakeholders on solution protocols and procedures. | • Updated HLD and decision log | • Design documentation set in repository | • Complete design pack with as-designed baseline |
| Development | Idea Generation and Requirements | Solutions Architect | Engages from the initial phases of project conception, ensuring that solution considerations are integrated from the beginning. They work closely with project managers and stakeholders to accurately identify and document detailed solution requirements tailored to the project's specific needs. The SA ensures that these solution specifications align with broader organisation standards while addressing the unique aspects of the project. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Collaborate with project managers to identify and integrate solution requirements early in the project lifecycle. • Conduct initial risk assessments to inform solution needs and document specific solution requirements. • Ensure that solution requirements are clearly defined, documented, and aligned with both project goals and highways solution policies. | • Acceptance criteria on user stories | • Requirements refinement log • Definition of done | • Requirements baseline under change control • Epic-level design assessments |
| Development | Design and Architecture | Solutions Architect | Embedding solution into the technical designs of the project. They collaborate with project architects to ensure that all designs reflect best solution practices, from data encryption to secure network configurations. The SA reviews architectural proposals, ensuring they provide robust defence mechanisms against potential threats and comply with relevant regulations. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Work closely with architects to incorporate solution measures into the project's design, ensuring architectures are robust against potential threats. • Review and approve solution aspects of architectural designs, ensuring technical requirements compliance with solution best practices and regulatory requirements. • Advocate for the inclusion of advanced solution technologies and solutions during architectural planning. | • Design guidance notes to developers | • Component design notes • Deviation log | • Per-increment design updates under governance • Maintained solution model |
| Development | Development and Coding | Solutions Architect | Implements solution measures within the coding practices. They ensure the adoption of secure coding standards, oversee code reviews, and integrate solution testing tools directly into the development process. The SA conducts regular solution audits to identify and rectify vulnerabilities early, ensuring the codebase remains secure throughout the project lifecycle. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Implement and enforce secure coding guidelines across development teams. • Oversee the integration of solution testing tools within the development process, such as static and dynamic code analysis. • Conduct regular solution code reviews and audits to identify and mitigate vulnerabilities. • Facilitate solution-focused training sessions for developers to enhance solution awareness and skills. | • Coding standards reference • Repo structure guidance | • Development standards tailored to stack • Code review checklist | • Engineering standards pack • Technical debt register with remediation plan |
| Development | Testing and Quality Assurance | Solutions Architect | Oversees the integration of comprehensive solution testing within the project's QA processes. They ensure that penetration tests, solution audits, and vulnerability assessments are conducted rigorously. The SA works closely with QA teams to prioritise the remediation of solution issues, verifying that all solution defects are addressed before the software is deployed. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Develop and oversee a comprehensive solution testing strategy, incorporating penetration testing, vulnerability assessments, and solution audits. • Collaborate with QA teams to ensure that solution testing is thorough and integrated into all stages of QA. • Prioritise and manage the remediation of solution issues discovered during testing. • Validate solution measures and controls before final project sign-off. | • Test approach note | • Test plan with environments and data approach | • Test strategy • NFR test specifications • Defect management approach |
| Development | Deployment and Release Management | Solutions Architect | Ensures that secure deployment practices are meticulously followed during the release management process. They oversee the secure configuration of environments and manage the deployment pipelines to safeguard against solution breaches. The SA actively participates in the release process, validating solution implementations and ensuring that the deployment meets all predefined solution criteria. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Monitor and manage the secure configuration of project deployments. • Ensure that CI/CD pipelines incorporate appropriate solution checks and balances. • Supervise and validate solution implementations during deployment to ensure technical requirements compliance with defined solution standards. • Coordinate with operations teams to ensure smooth and secure release processes. | • Deployment checklist in release notes | • Release plan with pipeline gate definitions | • Release management framework for the programme • Deployment architecture |
| Development | Monitoring and Performance Optimisation | Solutions Architect | Post-deployment, the SA sets up and manages solution monitoring tools to continuously oversee the performance and integrity of the application. They track solution metrics to identify any operational issues and swiftly implement optimisations to enhance solution and system performance. The SA ensures that the application responds effectively to both user demands and potential solution threats. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Set up and manage solution monitoring tools to continuously track the application's performance and solution posture. • Analyse solution and performance data to identify and address operational solution issues. • Recommend and implement solution enhancements and performance optimisations based on real-time monitoring insights. • Ensure that monitoring systems are calibrated and maintained to detect emerging threats and vulnerabilities effectively. | • Monitoring wishlist (metrics, alerts) | • Monitoring requirements specification | • Observability design (metrics, logs, traces, dashboards) |
| Development | Feedback and Continuous Improvement | Solutions Architect | Utilises feedback from users, IT support, and monitoring systems to drive the continuous improvement of solution practices within the project. They analyse this feedback to identify trends and areas for enhancement, incorporating these insights into the ongoing development and refinement of the project. The SA promotes an iterative development process, ensuring that the project adapts to evolving solution needs and user requirements. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Establish a feedback loop with users, IT support, and other stakeholders to gather solution-related feedback. • Analyse feedback to identify common solution issues and trends, using this data to drive improvements in the project. • Lead iterative development cycles to incorporate new solution features and enhancements based on user and operational feedback. • Regularly update solution practices and protocols to adapt to new threats and changes in the project environment. | • Retro actions logged | • Improvement backlog with owners | • Continuous improvement report with trend analysis |
| Testing | Test Planning and Strategy | Solutions Architect | Developing and refining the testing strategy for specific projects. They ensure that the solution aspects of the testing strategy align with both the project's objectives and organisation broader solution policies. By collaborating closely with project managers, the SA identifies critical solution tests needed to validate the project's resilience against threats, ensuring a thorough understanding and planning of solution testing requirements. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Collaborate with project stakeholders to define solution objectives and requirements for testing. • Develop a detailed solution testing strategy that aligns with the overall project delivery timeline. • Identify key solution risks and vulnerabilities to be addressed during testing. • Ensure integration of solution testing with other test planning activities. | • Test scope note in project plan | • Test plan (scope, methods, environments, exit criteria) | • Test strategy including NFR and integration test approach |
| Testing | Test Environment Setup | Solutions Architect | Ensures that environments are securely configured and isolated from production networks. They oversee the implementation of solution controls within these environments to prevent data leaks and unauthorised access. The SA also works to maintain the integrity of the test environments, ensuring that they accurately emulate the production environment for reliable solution testing. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Design and oversee the setup of secure test environments that mimic production settings. • Implement and maintain robust access controls and solution measures in all test environments. • Ensure proper segregation of test environments from production and other environments. • Regularly audit and update solution configurations to prevent unauthorized access and data leaks. | • Environment request with configuration note | • Environment specification and readiness confirmation | • Environment architecture • Production-parity assessment |
| Testing | Test Case Design and Improvement | Solutions Architect | Designing and improving test cases that specifically address the solution needs of the project. They ensure that each test case comprehensively covers potential solution vulnerabilities and exploits. The SA regularly reviews and updates test cases to include new and emerging threats, ensuring the project remains protected against the latest solution challenges. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Develop comprehensive solution test cases that cover all identified risks and regulatory technical requirements compliance requirements. • Continuously review and update test cases to incorporate new threats and vulnerabilities. • Collaborate with software developers and QA teams to ensure that solution test cases are integrated into the overall test plan. • Utilise solution scenarios and use cases to enhance the realism and effectiveness of test cases. | • Test cases for critical paths | • Test case library mapped to requirements | • Traceability: requirement → test case → result • Automated regression suite design |
| Testing | Test Execution | Solutions Architect | Oversees the running of solution-specific tests, ensuring they are executed as planned and within specified parameters. They closely monitor the execution process to identify any deviations or unexpected results. The SA analyses the outcomes of solution tests to verify that solution measures within the project are effective and to identify areas needing enhancement. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Supervise the execution of solution tests to ensure they are performed as per the strategy and timelines. • Monitor test executions for solution incidents and ensure immediate response to detected issues. • Analyse test results for solution implications and document all findings for review. • Coordinate with QA and development teams to address any solution issues identified during testing. | • Test results with defects raised | • Test execution report with evidence | • Formal test report with quality statement and release recommendation |
| Testing | Test Data Management | Solutions Architect | Manages the solution aspects of test data within the scope of the project to ensure its integrity and confidentiality. They establish protocols for the creation, use, and disposal of test data, especially when handling sensitive or personal data. The SA ensures technical requirements compliance with data protection laws and regulations, thereby safeguarding the test data from potential solution breaches. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Establish protocols for handling, storage, and disposal of sensitive test data. • Ensure encryption and proper solution measures are applied to test data to prevent breaches. • Manage test data lifecycle to comply with data protection laws and best practices. • Audit test data usage and solution periodically to ensure technical requirements compliance and identify any lapses. | • Test data note (source, refresh) | • Test data management plan | • Test data strategy with masking and lifecycle controls |
| Testing | Test Automation | Solutions Architect | Promotes the use of automated solution testing tools to enhance the efficiency and coverage of tests. They ensure that automated tools are properly integrated into the testing process, providing consistency across tests and reducing the potential for human error. The SA regularly evaluates the effectiveness of automated testing tools and updates them to adapt to new solution requirements. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Implement and manage automated solution testing tools and frameworks. • Ensure test automation includes a variety of solution tests, such as static code analysis and dynamic scanning. • Regularly review and calibrate automated testing tools to maintain their effectiveness and accuracy. • Advocate for the integration of solution automation in the CI/CD pipeline. | • Automated tests in pipeline | • Automation coverage matrix | • Test automation framework description • Coverage reporting |
| Testing | Performance Testing | Solutions Architect | Integrates solution considerations into performance testing, assessing how solution measures impact the performance of the system under various loads. They ensure that performance tests do not compromise solution protocols and that the system remains stable and secure even under stress conditions. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Integrate solution assessments into performance testing to evaluate the impact of solution measures on system performance. • Plan and execute stress tests to assess system resilience and solution under high load. • Analyse performance test results to identify solution performance issues and bottlenecks. • Collaborate with performance engineers to ensure that solution optimisations do not adversely affect performance. | • Performance smoke test results | • Performance test scenarios and results vs NFRs | • Performance test report with capacity model validation |
| Testing | Defect Tracking and Management | Solutions Architect | Manages the tracking and resolution of solution defects discovered during testing. They prioritise defects based on their potential impact on project solution and coordinate with development teams to ensure timely and effective fixes. The SA maintains detailed records of solution defects to facilitate analysis and prevent recurrence in future projects. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Track and prioritise solution defects based on their severity and impact on the project. • Manage the lifecycle of solution defects from detection to resolution. • Facilitate communication between developers, testers, and solution teams to ensure effective defect resolution. • Review closed solution defects to ensure thorough remediation and prevent recurrence. | • Defects logged with severity | • Defect triage log with SLAs | • Defect trend and root-cause analysis • Escape analysis |
| Testing | Continuous Improvement | Solutions Architect | Uses feedback from the testing phase to continuously improve solution measures within the project. They analyse testing results to identify trends and patterns in solution vulnerabilities, using this information to refine solution strategies. The SA fosters a culture of continuous solution improvement, ensuring that solution practices are constantly evolving to meet the project's needs and external threats. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Analyse feedback from solution testing phases to identify trends and areas for improvement. • Lead post-project reviews focusing on solution outcomes to derive lessons learned. • Update solution testing strategies and practices based on project experiences and industry developments. • Promote a culture of continuous solution enhancement across project teams. | • Retro actions on testing | • Testing improvement plan | • Quality effectiveness review feeding test strategy |
| Deployment | Provisioning and Configuration | Solutions Architect | Oversees the provisioning and secure configuration of new systems as part of the project's deployment phase. They collaborate closely with IT operations to ensure that servers, storage, and network resources are set up according to the specific solution standards developed during the design phase. The SA ensures each component is securely configured before the system goes live, establishing a strong solution foundation from the outset. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Work closely with IT operations to ensure that all new deployments are provisioned according to the project-specific solution requirements and design specifications. • Oversee the secure configuration of servers, storage, and network resources, ensuring they adhere to the solution architecture defined during the project design phase. • Validate solution settings and configurations before the system goes live to prevent potential solution vulnerabilities from the start. | • Build checklist against baseline | • Configuration baseline document • IaC validation results | • Platform build standard • Environment compliance evidence |
| Deployment | Monitoring and Incident Management | Solutions Architect | Designs and implements tailored monitoring strategies that are specifically aligned with the solution needs of the project. They develop detailed incident response plans that define the procedures and roles for handling solution incidents. Additionally, the SA conducts training sessions for the operational teams, equipping them with the necessary skills and knowledge to manage and respond to solution alerts effectively. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Design and implement monitoring strategies that align with the specific solution needs of the new service or application, ensuring all critical components are monitored for solution threats. • Establish incident response plans specific to the new deployment, detailing roles, responsibilities, and procedures for addressing potential solution incidents. • Train project-specific operational staff on how to respond to solution alerts and incidents according to the predefined incident management process. | • Alert routing note | • Monitoring and alerting design • Escalation matrix | • Operations handover pack (dashboards, runbook links, thresholds) |
| Deployment | Performance Optimisation | Solutions Architect | Monitors the impact of solution measures on the performance of new deployments, ensuring that these do not detract from the user experience or system efficiency. They work collaboratively with system administrators to fine-tune solution configurations, optimising the balance between solution and performance to ensure that the new service operates optimally. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Monitor the performance impacts of solution measures post-deployment to ensure they do not adversely affect the user experience or system efficiency. • Collaborate with system administrators to tune solution settings, optimising configurations to balance solution with performance. • Adjust solution practices based on real-world performance data to ensure optimal operation of the new service. | • Post-go-live performance check | • Performance assessment with tuning actions | • Optimisation report with re-baselined NFRs |
| Deployment | Backup and Disaster Recovery | Solutions Architect | Ensures that robust backup and disaster recovery plans are in place and thoroughly tested before any new service is launched. They work with IT operations to establish offsite backups and automated recovery processes that comply with the project's risk management strategies. By conducting pre-launch recovery drills, the SA verifies the effectiveness of these plans, making necessary adjustments to guarantee rapid recovery and continuity. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Ensure that backup and disaster recovery plans are in place and tested before deployment, aligning them with the project's risk management strategy. • Coordinate with the IT operations team to set up offsite storage solutions and automated backup schedules that meet the project's business continuity requirements. • Conduct pre-launch disaster recovery drills to verify the effectiveness of recovery procedures and adjust as necessary. | • Backup schedule and restore test note | • Backup/DR plan for the solution | • DR runbook with test evidence • RTO/RPO validation |
| Deployment | Security Management | Solutions Architect | Implements and oversees the solution controls and measures designed during the project phase. This includes managing access controls, applying encryption protocols, and deploying solution monitoring tools. The SA regularly reviews and adjusts these measures based on initial monitoring data and feedback to ensure the deployment remains secure and compliant with organisation and regulatory standards. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Implement solution controls and measures designed during the project phase, including access controls, encryption, and solution monitoring tools. • Regularly review and adjust solution configurations and policies based on findings from initial monitoring and feedback from early users. • Coordinate with the technology solution team to ensure that the project's solution management practices align with Highways standards and technical requirements compliance requirements. | • Access model applied (with security input) | • Operational security arrangements documented | • Security management integration evidence for the service |
| Deployment | Patch and Configuration Management | Solutions Architect | Manages the initial rollout of patches and system updates, ensuring they are implemented securely and effectively. They oversee the integration of these updates into regular maintenance schedules, maintaining continuous protection against new vulnerabilities. All changes and updates are meticulously documented to support audit processes and ongoing configuration management. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Manage the initial rollout of patches and updates for the new deployment, ensuring they are applied in a controlled and secure manner. • Oversee the integration of patch management processes into the service's regular maintenance routines, ensuring continuous protection against vulnerabilities. • Document all changes and updates for audit purposes and ongoing configuration management. | • Patch responsibility note | • Patch and update plan for components | • Lifecycle management plan with SLA matrix |
| Deployment | Capacity Planning and Scaling | Solutions Architect | Monitors usage to verify that the capacity meets actual demand and plans for future scaling. They ensure that scalability considerations include maintaining robust solution as the service grows, providing strategic guidance on resource allocation to handle increased loads securely. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Monitor the initial usage patterns of the new service to assess if the capacity planning done during the project phase meets the actual demand. • Plan for future scaling based on early usage data and predicted growth, ensuring that solution scalability is maintained as the service expands. • Provide input on adjusting resource allocation to handle increased load without compromising solution. | • Capacity note vs expected demand | • Capacity plan with scaling thresholds | • Capacity model with demand forecast and scaling design |
| Deployment | Continuous Improvement | Solutions Architect | Gathers and analyses feedback from the deployment phase to identify any solution issues or areas for improvement. They lead post-deployment reviews to refine solution strategies based on real-world performance and operational feedback. This continuous improvement process helps the SA enhance solution practices for future deployments, ensuring lessons learned are integrated into subsequent project delivery cycles. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Collect and analyse feedback from the deployment phase to identify any solution-related issues or potential improvements. • Initiate post-deployment solution reviews to refine deployment strategies and enhance solution measures based on real-world observations and operational feedback. • Drive continuous improvement in solution practices by incorporating lessons learned into future project delivery phases. | • Post-deployment review actions | • Deployment lessons report | • Formal PIR with benefits and improvement actions |
| Transition | Knowledge Transfer and Training | Solutions Architect | Ensures that project-specific solution knowledge, tools, and processes are transferred effectively to the operational teams, with a focus on how solution controls support the system’s business requirements. | Level 5 - Ensure, advise | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Conduct training sessions on solution controls designed during the project. • Facilitate knowledge transfer on how solution mechanisms map to the project’s functional requirements. • Provide documentation detailing solution implementation and its integration within the system. | • Handover walkthrough record | • Solution handover pack • Training session records | • Knowledge transfer plan with evidence • Support model documentation |
| Transition | Incident Response Preparation | Solutions Architect | Prepares incident response documentation tailored to the specific solution being delivered, ensuring operational teams can respond effectively to solution incidents related to the project. | Level 5 - Ensure, advise | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Document incident response protocols relevant to the project. • Ensure project-specific monitoring rules are created and tested in line with expected system behaviours. • Collaborate with operational solution teams to prepare for potential incident scenarios. | • Escalation contacts and known-issue list | • Support playbook for the service | • Tested support and escalation procedures • Major incident integration |
| Transition | Monitoring Enablement | Solutions Architect | Configures monitoring tools specific to the project, ensuring that solution controls and events are properly logged and aligned with the overall solution design. Focus is on ensuring coverage of all critical components designed during project delivery. | Level 5 - Ensure, advise | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Work with operational teams to configure project-specific monitoring. • Ensure critical solution events and log sources are integrated into the monitoring platform. • Validate that all solution controls within the solution are monitored and alerting as designed. | • Monitoring live confirmation | • Monitoring enablement checklist with alert tests | • Observability acceptance evidence with dashboard suite |
| Transition | Operational Handover | Solutions Architect | Facilitates the secure handover of the project to the operational team, ensuring that all solution configurations and controls are documented, and that operational teams understand how to manage the solution features. | Level 5 - Ensure, advise | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Create a detailed solution handover document, covering all configurations and controls. • Ensure operational teams understand the solution architecture implemented within the project. • Conduct final checks to confirm that all solution elements are functioning as intended. | • Handover checklist signed | • Handover document (configuration, exceptions, known risks) | • Formal service acceptance with acceptance criteria evidence |
| Transition | Post-Deployment Security Testing | Solutions Architect | Oversees post-deployment solution testing specific to the project, ensuring that all solution controls are functioning as designed. Focus is on validating that no solution regressions or gaps exist after deployment. | Level 5 - Ensure, advise | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Conduct solution validation tests based on the project’s solution architecture. • Ensure that post-deployment tests cover all implemented solution features. • Collaborate with operational solution teams to address any issues found during testing. | • Post-go-live checks recorded (with security input) | • Post-deployment validation report | • Independent post-implementation assessment |
| Operation | Environment Provisioning | Solutions Architect | Ensures that all environments created for new deployments are configured securely according to the specific solution designs formulated during the project's planning stages. The SA collaborates with IT operations to set up these environments, applying project-specific solution controls and measures to safeguard resources, devices, and dependencies crucial to the project's success. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Ensure that all environments provisioned for project deployments comply with the specific solution requirements defined during the project's design phase. • Collaborate closely with IT operations to establish secure and isolated environments that are optimised for the project's needs without impacting existing services. • Implement project-specific solution controls that are tailored to the resources, devices, and dependencies required for the project. | • Provisioning checklist result | • Environment compliance report | • Provisioning standards with compliance monitoring |
| Operation | Release Packaging | Solutions Architect | Responsible for the solution of deployment artifacts, ensuring that all code bundles and configurations are securely packaged and verified. They enforce strict version control and solution checks throughout the packaging process, guaranteeing that all release artifacts meet the established solution criteria before they are deployed. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Manage the solution aspects of creating deployment artifacts for the project, ensuring robust version control and adherence to solution protocols. • Ensure the integrity and solution of code bundles and configurations throughout the release packaging process. • Validate that all deployment artifacts are compliant with solution requirements before they are approved for release. | • Versioned artefact records | • Release packaging procedure with integrity checks | • Release engineering standards with provenance evidence |
| Operation | Configuration Management | Solutions Architect | Oversees the secure setup and integration of system settings, software configurations, and network parameters that align with the project's solution requirements. They maintain meticulous documentation and version control for all configuration changes to ensure traceability and adherence to solution standards. This includes managing external integrations and ensuring that any third-party services or APIs comply with the project's solution processes. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Oversee the configuration of systems, software, and network settings specific to the project, ensuring that all settings meet stringent solution specifications. • Document all configuration changes and maintain version control to ensure traceability and technical requirements compliance with project solution standards. • Work with the development and operations teams to manage external integrations securely, ensuring that all third-party connections are vetted and secure. | • CMDB entries updated | • Drift report and remediation log | • Configuration management plan with drift analytics |
| Operation | Deployment Automation | Solutions Architect | Designs secure automation processes for deploying new systems, integrating rigorous solution validations into the automation pipelines. This ensures that deployments are not only efficient but also free from solution vulnerabilities. They monitor these automated deployments closely, addressing any solution concerns immediately to maintain the integrity of the deployment process. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Design and implement secure automation strategies for project deployment to minimise manual errors and ensure consistent execution of solution practices. • Integrate solution checks and validations into automated deployment processes, ensuring deployments are both efficient and secure. • Monitor automated deployments for solution issues and ensure any anomalies are addressed immediately. | • Pipeline configuration records | • Automation review record | • Deployment automation design with rollback and audit |
| Operation | Deployment Verification | Solutions Architect | Conducts comprehensive solution testing during the deployment verification stage to validate that new systems meet both functional and solution specifications set forth by the project requirements. They ensure all deployments pass these solution assessments before going live, overseeing any necessary modifications to meet predefined solution acceptance criteria. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Conduct thorough solution assessments as part of the deployment verification to ensure that new deployments adhere to project-specific and highways solution standards. • Validate the solution and functionality of new systems against predetermined acceptance criteria and project requirements. • Oversee the resolution of any solution issues discovered during deployment verification before the final release. | • Smoke test record | • Verification report vs acceptance criteria | • V&V report with sign-offs |
| Operation | Rollback and Recovery | Solutions Architect | Develops and tests specific rollback and recovery procedures for each project, ensuring that these mechanisms can quickly restore services to a secure state in case of deployment failures. They regularly update and refine these recovery strategies based on new insights and operational feedback to enhance disaster recovery capabilities. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Develop and test rollback procedures specifically for the project, ensuring quick recovery capabilities in case of deployment failures. • Establish project-specific disaster recovery plans that include solution considerations to protect data and maintain service continuity. • Continuously update and refine recovery strategies based on lessons learned from testing and actual incident responses. | • Rollback steps in runbook | • Tested rollback procedure | • Recovery playbook with test evidence |
| Operation | Monitoring and Performance Optimisation | Solutions Architect | Sets up tailored monitoring tools to continually assess the performance and solution of the services. They analyse performance data to understand the impact of solution measures on system operations and collaborate with operational teams to fine-tune systems for optimal performance without compromising solution. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Set up and customise monitoring tools to track the performance and solution of newly deployed services, ensuring they align with the project's objectives. • Analyse performance data to identify any impact of solution measures on service performance and user experience. • Work with the operational teams to optimise system performance without compromising the solution integrity of the project. | • Alert review notes | • Monitoring effectiveness review with tuning records | • Observability coverage assessment • Optimisation roadmap |
| Operation | Defect Tracking and Management | Solutions Architect | Identifying, prioritising, and resolving solution defects found during operations. They work closely with development and operations teams to ensure swift and effective resolution of issues, maintaining a log of all defects and their resolutions for future reference and continuous solution improvement. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Track and manage defects identified during project operations, prioritising solution-related issues for immediate resolution. • Coordinate with developers and operational teams to ensure rapid and secure defect resolution. • Maintain documentation of all defects and resolutions to facilitate ongoing solution assessments and audits. | • Defects prioritised in backlog | • Defect management report with SLAs | • Trend and root-cause analysis with systemic fixes |
| Maintenance | Monitoring and Alerting | Solutions Architect | Responsible for ensuring that the monitoring systems implemented during the project phase are specifically tuned to detect vulnerabilities and threats that could affect the newly delivered systems. They collaborate with operational teams to fine-tune these systems, ensuring that alerts are both actionable and accurate, minimising false positives while swiftly identifying true solution threats. The SA also ensures that the monitoring tools are up to date with the latest detection capabilities to handle evolving solution challenges. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Tailor monitoring systems to specifically watch for solution issues related to new systems or technologies introduced during project delivery. • Improve alert mechanisms to accurately identify and respond to real solution threats, reducing false positives and ensuring that true threats are addressed promptly. • Regularly update solution monitoring tools with the latest threat detection capabilities to handle new and evolving solution challenges. | • Alert tuning notes | • Monitoring review with updated alert catalogue | • Observability improvement backlog with coverage analysis |
| Maintenance | Incident and Problem Management | Solutions Architect | Works closely with the incident response teams to ensure that any solution incidents related to the newly implemented systems are managed according to the project-specific solution processes. They provide expert advice on resolving incidents that involve complex system interactions or new technologies introduced during the project. The SA also reviews and updates the incident management protocols to incorporate learnings from recent incidents, continuously refining response strategies. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Provide leadership in managing solution incidents that involve newly implemented systems, ensuring responses are swift and effective. • Regularly review and refine incident management protocols to integrate lessons learned from recent solution incidents. • Work closely with operational and solution teams to ensure a coordinated response to incidents, leveraging project-specific knowledge to address issues effectively. | • Incident notes and fixes | • Post-incident reviews with actions | • Problem records with architectural root causes and design updates |
| Maintenance | Patch and Update Management | Solutions Architect | Oversees the application of patches and updates specifically for the systems and components introduced during the project delivery. They ensure that these updates do not compromise the custom configurations and solution measures put in place. The SA works closely with vendors and internal teams to test patches in controlled environments before deployment to avoid introducing new vulnerabilities. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Manage the application of patches and updates for new systems, ensuring compatibility with existing configurations and maintaining solution integrity. • Test patches in controlled environments to validate their effectiveness and ensure they do not introduce new vulnerabilities. • Work with software and hardware vendors to understand the impact of patches and coordinate their deployment across project-delivered systems. | • Update log for components | • Update compliance report with deferral records | • Lifecycle posture report with dependency risk analysis |
| Maintenance | Performance Optimisation | Solutions Architect | Monitors the performance impact of solution measures implemented during the project phase, ensuring they do not adversely affect the system's efficiency. They are involved in tuning and optimising these measures to maintain an optimal balance between solution and performance. The SA also assesses the system's load handling capabilities to recommend performance improvements without compromising solution. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Monitor and assess how solution configurations impact the performance of new systems and adjust settings to optimise both solution and system efficiency. • Suggest and implement changes to improve the performance of solution measures without compromising solution. • Conduct load testing to evaluate the impact of solution measures on system performance under various conditions and scale solutions as needed. | • Tuning change records | • Performance review with actions | • Optimisation study with re-baselined NFRs |
| Maintenance | Capacity Planning and Scaling | Solutions Architect | Evaluates how well the solution architecture scales with increased system demands. They ensure that any expansions or upgrades maintain the integrity of the solution measures implemented during the project phase. The SA also advises on potential solution implications of scaling operations and integrates additional solution controls if needed. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Ensure that solution measures scale adequately with the system's growth, maintaining robust solution during capacity expansions. • Provide expertise on how to scale solution architectures safely and effectively, incorporating new solution technologies if necessary. • Continuously monitor and adjust the scalability of solution controls to ensure they remain effective as operational demands increase. | • Capacity check note | • Capacity forecast with headroom analysis | • Capacity model update with scaling validation |
| Maintenance | User Feedback and Enhancements | Solutions Architect | Incorporates solution-related user feedback into the maintenance cycle, using insights from end-users to identify areas where solution can be enhanced. They prioritise solution enhancements that address specific issues reported by users and collaborate with development teams to ensure these enhancements are implemented effectively. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Actively gather and integrate user feedback related to solution into the maintenance cycle, identifying areas for enhancement. • Focus on implementing solution improvements that directly address user-reported issues, enhancing user trust and satisfaction. • Work with development teams to ensure user-requested solution enhancements are implemented accurately and effectively. | • User feedback log | • Enhancement proposals with impact assessment | • Enhancement business case with prioritised roadmap |
| Maintenance | Continual Improvement and Innovation | Solutions Architect | Drives continuous improvement initiatives for solution within the scope of the delivered projects. They keep abreast of the latest solution technologies and practices that could benefit the project's solution stance. The SA leads efforts to pilot new solution technologies within the project's framework, ensuring that the project stays at the forefront of solution innovations. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Drive initiatives for continuous improvement of solution practices within the project scope, ensuring alignment with the latest solution trends and innovations. • Explore and test new solution technologies and methods that could enhance the project's solution framework, ensuring the project remains at the cutting edge. • Develop an environment where continuous solution improvement is prioritised, encouraging innovation and adaptation to emerging solution challenges. | • Improvement actions in service review | • Solution improvement plan | • Innovation assessment with pilot results |
| Optimisation | Performance Analysis and Benchmarking | Solutions Architect | Reviews how the delivered solution performs in live use against its NFRs and design assumptions - throughput, latency, availability, user experience - and converts the evidence into design adjustments. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Review operational performance metrics for the solution against agreed NFRs and design assumptions. • Benchmark performance against baseline measurements taken at go-live and comparable services. • Diagnose bottlenecks and under-performing components, distinguishing design issues from operational ones. • Propose and design proportionate performance improvements with predicted effect. | • Performance summary in service review | • Performance review vs NFRs with improvement backlog | • Performance analysis report • Re-baselined NFRs • Design change proposals |
| Optimisation | Cost and Value Optimisation | Solutions Architect | Optimises the running cost of the solution - right-sizing infrastructure, rationalising licences, exploiting consumption pricing - while protecting the service levels the business has agreed. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Analyse consumption and utilisation data to identify over-provisioned or idle resources. • Right-size compute, storage and licence allocations against observed demand. • Evaluate pricing-model options (reserved capacity, consumption tiers) for solution components. • Present cost-reduction options with explicit service-level impact for owner decision. | • Right-sizing quick wins list | • Cost optimisation proposal with service-level impact | • TCO optimisation case • Pricing-model analysis • Consolidation design |
| Optimisation | Process Improvement and Automation | Solutions Architect | Streamlines the delivery and operational processes around the solution - infrastructure-as-code coverage, pipeline improvements, self-service provisioning - reducing manual effort and error rates. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Identify manual, error-prone processes in the solution’s delivery and operation. • Extend infrastructure-as-code and pipeline automation coverage for the solution. • Design self-service capabilities where they reduce toil without losing control. • Measure cycle-time and error-rate improvements from automation. | • Automation quick wins (IaC gaps, manual steps) | • Automation design with cycle-time metrics | • Automation roadmap • Self-service design • Benefits tracking |
| Optimisation | Technology Refresh and Rationalisation | Solutions Architect | Tracks solution components for end-of-support exposure and rationalisation opportunities, planning upgrades and consolidations before they become unplanned work or risk. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Track end-of-support and end-of-life dates for solution components, frameworks and dependencies. • Assess upgrade and consolidation options, preferring strategic platforms endorsed by enterprise architecture. • Design upgrade paths that maintain service continuity and integration compatibility. • Update solution documentation to reflect refreshed components. | • End-of-support register entries | • Refresh options assessment | • Refresh business case • Upgrade design and migration plan |
| Optimisation | Control and Configuration Tuning | Solutions Architect | Tunes solution configuration - caching, scaling policies, resilience settings, integration parameters - based on operational evidence, improving efficiency and stability without destabilising the design. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Analyse operational data to identify configuration settings that constrain performance or stability. • Tune scaling policies, resource limits, caching and integration parameters with documented rationale. • Validate tuning changes against NFRs and regression-test critical paths. • Baseline tuned configurations under change control. | • Tuning change log with rationale | • Tuning review report vs NFRs | • Configuration optimisation study • Baselined settings under change control |
| Optimisation | Capability Enhancement and Innovation | Solutions Architect | Builds on operational lessons to enhance the solution - adopting improved platform services, refactoring pain points, piloting new capabilities - with evidence gathered before commitment. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Identify enhancement opportunities from operational evidence, user feedback and platform evolution. • Propose and design pilots for enhanced capabilities (e.g. managed services replacing self-hosted components). • Evaluate pilots against agreed success criteria, including cost and operational impact. • Recommend adoption or rejection, feeding lessons back to enterprise patterns. | • Enhancement suggestions in service review | • Capability pilot proposal (e.g. managed service adoption) | • Enhancement design with pilot evaluation • Pattern feedback to EA |
| Retirement | Identification and Assessment | Solutions Architect | The Solution Architect begins the retirement process by conducting a thorough evaluation of the systems, applications, or resources identified for decommissioning. This evaluation focuses on assessing the solution architectures in place to determine their adequacy against current standards. The SA identifies any solution risks associated with the retirement, such as potential data leakage or vulnerabilities that might be exposed during the decommissioning process. They also ensure that all actions comply with regulatory and technical requirements compliance requirements, particularly concerning data protection and privacy. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Review and evaluate the solution configurations, access controls, and data protection mechanisms of systems identified for retirement to ensure no vulnerabilities are overlooked. • Map out all system dependencies to understand the broader impact of decommissioning on the network and other interconnected systems. • Conduct a full technical requirements compliance audit to identify all regulatory and legal obligations associated with the retirement of each system, including UK GDPR, or other relevant standards. • Perform a detailed solution risk analysis to identify potential threats and vulnerabilities that could arise during the retirement process. | • Retirement candidate note | • Retirement assessment (usage, dependencies, contracts) | • Decommissioning assessment • Dependency map • Data and integration inventory |
| Retirement | Planning and Strategy | Solutions Architect | In the planning and strategy phase, the SA develops detailed and secure decommissioning plans, incorporating robust risk assessments and mitigation strategies. These plans outline how to handle data migration, sanitisation, and the secure disposal of hardware, ensuring that solution considerations are integrated throughout the process. Coordination with the technology solution Architect and Operational solution Architect is crucial to align the decommissioning strategy with broader organisational solution policies and operational impacts. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Craft a detailed plan covering all phases of the decommissioning process, incorporating necessary solution controls. • Create and implement a stakeholder engagement plan to ensure all relevant parties are informed and involved throughout the retirement process. • Plan and allocate resources to ensure sufficient solution oversight and technical support during decommissioning. • Establish a clear timeline with specific milestones for each phase of the retirement process to ensure timely execution. | • Decommissioning checklist | • Decommissioning plan with milestones | • Decommissioning strategy with contractual and continuity obligations |
| Retirement | Data Migration and Archiving | Solutions Architect | The SA oversees the secure migration of data from systems slated for decommissioning. They ensure the integrity and confidentiality of the data throughout the migration process, implementing stringent controls and checks. The SA also manages the secure erasure of data remaining on decommissioned systems, applying data sanitisation protocols to prevent unauthorised data retrieval. Additionally, they coordinate with data management teams to establish compliant archiving solutions for any data that must be retained according to organisational policies or legal mandates. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Develop a secure data migration strategy that ensures data integrity and confidentiality during transfers. • Execute data cleansing and sanitization processes to securely erase data from decommissioned systems. • Ensure that data archival processes comply with all relevant data retention policies and are secure from unauthorised access. • Conduct thorough validation and verification of data migration and sanitisation to ensure completeness and accuracy. | • Data disposition note | • Data migration and archiving plan | • Data disposition register with retention mapping |
| Retirement | Decommissioning and Resource Cleanup | Solutions Architect | During the actual decommissioning phase, the SA ensures the process is executed securely. They oversee the physical and digital dismantling of systems, focusing on the thorough deletion or destruction of sensitive information stored on hardware being decommissioned. The SA manages the termination of solution services and configurations associated with the retired systems, ensuring that no residual solution risks remain. They also document all solution measures and actions taken during this phase to provide a clear audit trail for technical requirements compliance and review. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Oversee the physical decommissioning of hardware, ensuring proper shutdown and secure wiping or destruction of devices. • Systematically revoke access rights and credentials associated with decommissioned systems. • Manage compliant disposal or repurposing of hardware, adhering to environmental standards and data solution requirements. • Clean up solution configurations to remove any residuals that could be exploited in the future. | • Resource cleanup confirmations | • Cleanup evidence (infrastructure, licences, integrations) | • Decommissioning evidence pack with CMDB and contract closure |
| Retirement | Communication and User Transition | Solutions Architect | The SA plays a role in communicating changes during the decommissioning process. They inform all relevant stakeholders of solution changes and new risks introduced by the transition to new systems. The SA provides guidance and support to users adapting to new systems, including conducting solution training sessions. They gather feedback from users on the solution impact of the transition, using this data to refine future solution strategies and ensure a seamless transition for all users. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Implement a comprehensive communication strategy to keep all stakeholders informed about decommissioning processes and solution implications. • Provide training and support for users transitioning to new systems, focusing on new solution protocols. • Establish mechanisms to gather and address feedback throughout the transition process to refine the decommissioning strategy. | • Stakeholder comms note | • Transition comms plan | • Programme transition communications with dependency notifications |
| Retirement | Review and Documentation | Solutions Architect | Following the completion of the decommissioning, the SA conducts a comprehensive review of the process to evaluate the effectiveness of the solution measures implemented. They update project solution documentation to reflect the processes undertaken and the outcomes achieved, ensuring that all lessons learned are captured. This documentation is vital for ongoing solution assessments and helps refine future decommissioning strategies, contributing to the continuous improvement of project delivery and solution practices within organisation. | Level 6 - Initiate, influence | ARCH (Solution architecture), DESN (Systems design), METL (Methods and tools) | • Conduct a thorough solution review after the retirement process to evaluate the effectiveness of implemented solution measures. • Document all solution procedures and actions taken during the retirement in detailed reports for future reference and technical requirements compliance audits. • Capture and analyse lessons learned to provide insights for improving future decommissioning projects, focusing on solution enhancements. | • Closure note with lessons | • Decommissioning review report | • Formal closure report • Architecture repository updates |
Workbook source · OA
Operational Architect activity model
Operational readiness, resilience, supportability and estate health.
Artefact columns show the information a project should produce or hand over, scaled by project size. Risk overrides size: a small-value change touching critical services, complex integrations or novel technology adopts the next band up. Artefacts may live inside existing operational documents rather than as standalone deliverables.
| Through Life Stage | Value Stream Activity | Role | Description | SFIA Responsibility Level | Relevant Skills | Activities | Example Artefacts - Small (<£250k, low risk) | Example Artefacts - Medium (£250k–£2m, moderate risk) | Example Artefacts - Large (>£2m, high risk or novel) |
|---|---|---|---|---|---|---|---|---|---|
| Planning | Service Strategy Development | Operational Architect | Ensures operational considerations are integrated from the start, influencing the service strategy to include proactive monitoring and continuous risk assessment. The Operational operational Architect advocates for resilient designs that accommodate easy updates and maintenance without compromising operational. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Collaborate with enterprise architects and business leaders to integrate robust operational measures into the initial service design. • Advocate for scalable operational solutions that can evolve with the service, ensuring long-term protection and adaptability. • Participate in strategic planning sessions to ensure operational considerations are prioritised and integrated from the outset. | • Operational constraints note for the project brief | • Operability requirements statement • Estate constraint summary | • Operational strategy input paper • Estate health assessment informing strategy |
| Planning | Assessment | Operational Architect | Regularly assesses the operational environment to identify operational vulnerabilities and compliance deviations. This continuous evaluation helps in maintaining the integrity of the operational framework and ensures the service remains robust against emerging threats. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Conduct comprehensive operational audits and detailed risk assessments of operational systems on a regular basis to identify and mitigate vulnerabilities. • Analyse operational logs and monitoring data to proactively detect anomalies and potential threats, initiating preventive measures. • Evaluate the performance of existing operational controls and initiate upgrades or adjustments based on findings to enhance overall operational. | • Known-constraint and legacy note for the project | • Operational assessment of affected services (capacity, support, dependencies) | • Estate assessment report for impacted domains • Operational risk register extract |
| Planning | Governance Planning | Operational Architect | Implements and monitors operational governance practices in operational activities, ensuring compliance with organisational operational policies and regulations. The Operational operational Architect is essential in enforcing these governance structures daily to maintain service reliability and operational. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Develop, implement, and maintain robust operational policies and compliance protocols, ensuring they are up-to-date with the latest operational standards and regulations. • Organise and lead operational governance meetings to review policies and discuss improvements with key stakeholders. • Implement mechanisms for rapid response and crisis management, ensuring they are well-integrated into the operational governance structures. | • Operational acceptance criteria note | • Operational governance inputs (acceptance gates, checkpoints) | • Operational governance framework section • Service acceptance criteria catalogue |
| Planning | Security and Compliance Planning | Operational Architect | Updates and refines the operational and compliance plans to address new operational challenges and regulatory changes. This ongoing planning ensures that the operational practices remain effective and that operational protocols adapt to the evolving threat landscape. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Regularly update operational plans to incorporate new technologies, tactics, and threat intelligence, ensuring proactive defence mechanisms are in place. • Plan and oversee regular compliance checks and operational audits to ensure ongoing adherence to both internal and external standards. • Develop and maintain incident response plans, ensuring they are effective and can be activated immediately to handle potential operational breaches. | • Operational compliance checklist input | • Operational plan updates for compliance activities | • Operational compliance framework contribution with monitoring requirements |
| Planning | Architecture Design | Operational Architect | Provides ongoing input to refine the operational architecture of operational systems, ensuring it supports both current and future operational needs. The Operational operational Architect collaborates with system architects to enhance operational measures and safeguard service operations. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Provide ongoing consultation to IT architecture teams to integrate robust operational features into network and system designs. • Review and advise on the operational aspects of operational infrastructure, ensuring that all elements are protected against potential threats. • Collaborate with technology providers to ensure that operational enhancements are seamlessly integrated into existing and new systems. | • Operability review comments on proposed design | • Operational requirements for the design (monitoring, support, maintenance access) | • Operational architecture input paper • Supportability reference requirements |
| Planning | Migration Planning | Operational Architect | Plays a crucial role in planning and executing the secure migration of operational data and systems, ensuring minimal downtime and maintaining operational standards. The Operational operational Architect oversees these activities to ensure seamless transitions and operational continuity. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Strategically plan the secure migration of operational systems and data, ensuring all actions comply with operational best practices and minimise risks. • Supervise the implementation of operational measures during migrations to safeguard data integrity and service continuity. • Monitor migration processes in real-time to quickly address any operational issues and adjust plans as necessary to ensure safety and compliance. | • Migration window and constraint note | • Operational migration risk assessment • Continuity plan for migration | • Migration operations runbook with checkpoints and abort criteria • Downtime analysis |
| Planning | Cost Management Planning | Operational Architect | Manages and optimises operational-related expenditures in the operational phase, ensuring cost-effective operational practices that do not compromise the service‚Äôs operational posture. This involves regular reviews of operational investments against operational performance. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Monitor and control budget allocations for operational operations, ensuring optimal use of resources for maximum operational impact. • Evaluate the financial efficiency of implemented operational measures, proposing budget adjustments to better address emerging threats and opportunities. • Prepare detailed financial reports for operational operations, highlighting ROI and justifying future investments in operational technologies and practices. | • Run-cost implication note | • Run-cost estimate for the service (support, infrastructure, tooling) | • Whole-life run-cost model • Cost-to-serve baseline |
| Planning | Training and Change Management Planning | Operational Architect | Leads the development and implementation of ongoing operational training programs for operational staff to address new threats and changes in technology. The Operational operational Architect ensures that all operational personnel are aware of and comply with the latest operational procedures and practices. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Lead the design and delivery of comprehensive operational training programs for operational teams, focusing on real-world threats and practical defence strategies. • Develop and implement ongoing operational awareness campaigns to keep operational at the forefront of operational practices. • Manage the operational aspects of organisational change, ensuring that updates to operational policies and technologies are effectively communicated and adopted across all operational teams. | • Ops team briefing note | • Operational training plan for affected teams | • Operational capability uplift plan • Training needs analysis |
| Design | Requirements Gathering | Operational Architect | Actively participates in the requirements gathering phase to ensure operational needs are accurately captured and integrated into the project design. The Operational operational Architect collaborates with project teams to define practical operational requirements that support both day-to-day operations and long-term maintenance, preparing the system for real-world operational challenges post-deployment. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Collaborate with design and project teams to ensure operational requirements are integrated from the outset. • Assess and define operational needs that maintain ongoing operations and support. • Identify operational challenges that impact operational post-deployment, such as maintenance windows and access management. • Gather requirements for operational monitoring tools and operational support systems needed for the live environment. | • Operational requirements list (monitoring, backup, support hooks) | • Operational requirements catalogue with acceptance criteria | • Operational requirements specification with traceability |
| Design | Architecture Planning | Operational Architect | Contributes expert advice on selecting secure operational technologies and architectures that enhance overall system resilience and operational. The Operational operational Architect ensures that the architecture includes robust disaster recovery solutions and scalable operational configurations to support ongoing operations and system updates efficiently. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Advise on the selection of operational technologies and infrastructure that enhance operational and resilience. • Participate in defining operational architecture that includes robust recovery and backup solutions. • Evaluate and recommend operational configurations for operational environments, focusing on long-term sustainability and ease of management. • Ensure architectural plans include provisions for operational patches and updates. | • Operability comments on options | • Operational assessment of architecture options | • Operational impact appraisal per option • Estate integration analysis |
| Design | High and Detailed Design | Operational Architect | Reviews high and detailed designs to integrate operational measures effectively, such as secure logging and incident response mechanisms. This role is crucial in ensuring that designs reflect operational needs, providing detailed input to enhance system monitoring, network segmentation, and proactive operational defences. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Review high and detailed designs to ensure they include operational measures such as logging, monitoring, and incident response. • Provide detailed enhancements to network segmentation, access management, and monitoring mechanisms and tools. • Validate operational measures within the designs to confirm they meet operational standards and practices. • Document operational requirements and ensure they are integrated into technical specifications. | • Ops review comments on HLD/LLD | • Operational review record • Monitoring and support design inputs | • Operational integration design (monitoring, ITSM, backup, scheduling) • Runbook skeletons |
| Design | Security Design | Operational Architect | Leads the design of operational controls, ensuring that all aspects of operational are robustly integrated into the project infrastructure. The Operational operational Architect designs systems with features that support continuous monitoring, threat detection, and efficient operational management, focusing on sustainability and ease of operation. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Lead the integration of operational controls within the project‚Äö√Ñ√¥s operational design, ensuring all aspects are covered from an operational standpoint. • Design systems with operational features such as automated threat detection systems and integrated operational management tools. • Develop designs for operational operations centres (SOCs) if applicable, detailing processes, tools, and procedures needed. • Specify requirements for operational software, including SIEM (operational Information and Event Management) systems. | • Operability confirmation on security controls (with security architecture) | • Operational validation of control supportability | • Control operating procedures contribution co-produced with security architecture |
| Design | Scalability and Reliability Design | Operational Architect | Ensures that scalability and reliability designs incorporate operational measures that adapt to changing operational loads while maintaining strict operational controls. This includes planning for secure auto-scaling, load balancing, and failover capabilities, thus guaranteeing system integrity and continuous protection under all operational scenarios. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Ensure scalability and reliability designs include considerations for scaling operational measures and maintaining service continuity under various operational conditions. • Provide input on designing systems that remain secure during scaling operations, such as during load balancing and auto-scaling events. • Advise on fail-safe operational operations that ensure system integrity and data protection during failover procedures. • Review and recommend improvements to enhance operational in scalable and reliable system designs. | • Note on operational behaviour under scale | • Operational scaling requirements and thresholds | • Resilience-operations analysis (failure modes, recovery procedures) |
| Design | Cost Optimisation | Operational Architect | Identifies and implements cost-effective operational practices that optimise resource utilisation without compromising operational integrity. The Operational operational Architect assesses the long-term cost benefits of operational decisions, aiming to reduce operational expenses while enhancing operational effectiveness. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Identify cost-effective operational practices that optimise resource use without compromising operational. • Assess the long-term cost implications of operational decisions, focusing on total cost of ownership including maintenance and updates. • Recommend operational technologies and practices that reduce operational overheads while maximising operational effectiveness. • Help budget for operational needs, ensuring adequate funding for ongoing operational operations. | • Run-cost comment on design choices | • Operational cost comparison of options | • Run-cost optimisation analysis with service-level trade-offs |
| Design | Design Review and Validation | Operational Architect | Engages in operational design reviews to validate the operational viability and effectiveness of operational implementations. This includes ensuring that operational measures are practical, manageable, and align with operational realities, making necessary adjustments based on feedback to optimise the operational posture for everyday operations. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Participate in operational design reviews to validate the operational feasibility of operational implementations. • Ensure operational designs adequately support operational needs and can be effectively maintained and managed post-deployment. • Adjust operational strategies based on outcomes from design reviews to ensure practical and effective operational measures. • Confirm that operational designs are validated against operational scenarios to prevent potential operational issues in live environments. | • Operational readiness comments | • Operational review record with findings | • Operational assurance report • Acceptance validation plan |
| Design | Documentation | Operational Architect | Manages the comprehensive documentation of all operational procedures and systems. The Operational operational Architect ensures that this documentation is thorough, up-to-date, and accessible, providing a critical resource for training, troubleshooting, and maintaining operational standards across operational teams. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Oversee the creation of comprehensive operational documentation that guides maintenance and management of operational systems. • Ensure documentation includes detailed operational procedures, standards, and guidelines for operational. • Update operational documentation to reflect operational insights and lessons learned during the design phase. • Provide operational training materials based on the operational documentation to ensure proper understanding and implementation of operational practices. | • Updated operational notes | • Operational documentation set (procedures, contacts, escalations) | • Complete operations documentation pack (runbooks, SOPs, support model) |
| Development | Idea Generation and Requirements | Operational Architect | Provides input during the initial phases of project planning, ensuring that operational considerations are embedded from the start. They assess and critique proposed projects for potential operational implications, advising on necessary adjustments to align with production-level operational standards. The OA helps define operational metrics and objectives, ensuring new developments are equipped to meet these criteria once deployed. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Provide insights on operational requirements and best practices to ensure new projects are designed with long-term operational management in mind. • Assess proposed projects for operational implications, suggesting adjustments to meet production-level operational standards. • Participate in defining operational metrics and objectives that new developments should achieve. | • Operational lessons input to requirements | • Operational requirements input log | • Operational insight report (incident trends, toil hotspots) shaping requirements |
| Development | Design and Architecture | Operational Architect | Reviews project designs to ensure they are not only secure but also optimised for long-term maintenance and scalability. They advocate for the inclusion of features that support efficient incident management and recovery, such as advanced monitoring capabilities and automated operational controls, ensuring the architecture supports robust operational practices. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Review and provide feedback on project designs from an operational perspective, ensuring designs are scalable, maintainable, and secure. • Advise on incorporating features that facilitate secure operations, such as monitoring capabilities and automated operational controls. • Ensure that the architecture supports efficient incident response and recovery strategies. | • Operability feedback on component designs | • Operational review notes per increment | • Operational architecture review records with tracked actions |
| Development | Development and Coding | Operational Architect | Collaborates with development teams to integrate operational measures into the codebase. This includes recommending operational tools and practices that simplify future maintenance and enhance operational, such as standardised logging protocols and comprehensive error handling. They ensure that all operational features are adequate to protect the application against threats in a live environment. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Recommend operational tools and practices that should be integrated during development to ease transition into production and simplify ongoing maintenance. • Engage with development teams to embed operational considerations, such as logging standards and error handling protocols, into the codebase. • Validate that operational features coded into applications are adequate for threat mitigation in a live environment. | • Operational instrumentation suggestions | • Telemetry and logging guidance for developers | • Production-readiness standards input • Instrumentation specification |
| Development | Testing and Quality Assurance | Operational Architect | Oversees the integration of operational tests, ensuring these tests mimic real-world operational conditions to validate the application‚Äôs resilience. They work closely with QA teams to implement scenarios that test the system‚Äôs response to operational incidents under stress, reviewing and approving test outcomes to confirm that operational requirements are met. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Oversee the inclusion of operational tests within the QA process, ensuring tests reflect real-world usage and abuse cases. • Coordinate with QA to simulate operational conditions in operational testing scenarios to verify system resilience and data integrity under stress. • Review and approve test results, focusing on the operational aspects crucial for maintaining system stability and performance. | • Operational scenarios suggested for tests | • Operational test scenarios (failure, recovery, support cases) | • Operational acceptance test suite definition |
| Development | Deployment and Release Management | Operational Architect | Guides the operational aspects of deployment strategies to maintain and enhance the operational posture during rollouts. They monitor deployments closely, responding swiftly to any operational incidents and ensuring that new releases do not compromise the operational environment. Additionally, they assist in developing secure rollback procedures and detailed disaster recovery plans. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Guide the operational aspects of deployment strategies to ensure that new releases maintain or enhance the operational posture of operational environments. • Monitor the initial deployment phases for operational issues, coordinating quick responses to any incidents. • Assist in the development of secure rollback procedures and disaster recovery plans. | • Release window and constraint note | • Operational release checklist | • Release operations framework (verification points, rollback triggers) |
| Development | Monitoring and Performance Optimisation | Operational Architect | Designs and implements comprehensive operational monitoring systems that provide real-time insights into threats and performance. They continuously assess the effectiveness of current operational measures, recommending updates or enhancements based on their findings. This ongoing analysis helps to identify potential operational vulnerabilities and optimise system performance to handle evolving operational challenges. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Design and implement operational monitoring solutions that provide real-time analysis of threats and system performance. • Continuously evaluate the effectiveness of existing operational monitoring tools and strategies, recommending improvements or upgrades as needed. • Analyse performance and operational data to identify patterns that may indicate potential operational vulnerabilities or the need for system enhancements. | • Metric and alert wishlist | • Monitoring solution design (collection, dashboards, thresholds) | • Full observability architecture with retention and tuning approach |
| Development | Feedback and Continuous Improvement | Operational Architect | Actively collects and analyses feedback from system users and automated monitoring tools to drive continuous improvements in operational protocols. They lead initiatives to refine and update operational measures, ensuring that the organisations operational practices adapt to new threats and operational feedback. This iterative process helps maintain system integrity and enhances user trust over time. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Collect and analyse operational feedback from system users, IT support, and automated monitoring tools to identify areas for improvement. • Lead the ongoing refinement of operational protocols and measures based on operational feedback and emerging threats. • Initiate operational enhancement projects that improve resilience, reduce complexity, and streamline operations. | • Operational feedback notes to delivery | • Operational feedback report with prioritised items | • Structured feedback loop with metrics and review cadence |
| Testing | Test Planning and Strategy | Operational Architect | Orchestrates the development of a unified testing strategy, embedding operational across all project phases. This strategy standardises operational testing protocols across organisations and ensures each project adheres to the same high standards and methodologies. By incorporating regulatory and compliance requirements, the OA ensures operational measures are consistent and compliant across various sectors. This strategic oversight aligns operational practices with evolving business objectives effectively. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Develop comprehensive operational testing strategies that align with the organisations risk management and operational policies. • Coordinate testing schedules with IT operations to minimise impact on production environments while ensuring thorough coverage. • Assess and update operational testing procedures to incorporate emerging threats and changes in compliance requirements. • Establish key performance indicators (KPIs) and objectives for operational testing to measure effectiveness and guide improvements. | • Operational test considerations note | • Operational testing plan (non-disruption rules, environments) | • Operational test strategy with production safeguards |
| Testing | Test Environment Setup | Operational Architect | Establishes baseline operational configurations to maintain integrity and operational controls across all environments. They implement stringent access controls and continuous monitoring to safeguard these environments from unauthorised access and potential breaches. Regular operational audits ensure that any vulnerabilities or misconfigurations are promptly identified and corrected, maintaining the integrity of the testing processes. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Ensure operational test environments are robustly secured and accurately replicate production settings for effective testing. • Implement strict controls over the creation and management of virtual environments to prevent data leakage and ensure environment integrity. • Regularly review and refresh operational configurations in test environments to adapt to new operational threats and vulnerabilities. • Conduct periodic operational audits of test environments to ensure compliance with internal and external operational standards. | • Environment isolation confirmation | • Test environment baseline replicating production operations | • Environment attestation • Production-parity gap assessment |
| Testing | Test Case Design and Improvement | Operational Architect | Guides the development of operational test cases, ensuring coverage of anticipated operational scenarios. They promote the creation of a centralised repository of reusable test cases, enhancing efficiency and consistency in operational testing across projects. Periodic reviews and updates of test cases keep organisations abreast of emerging threats and technological changes, ensuring that testing remains robust and relevant. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Design detailed operational test cases for operational systems that cover a broad spectrum of risk scenarios and potential attacks. • Collaborate with cybersecurity teams to incorporate real-time threat intelligence into test case scenarios. • Regularly review and enhance test cases based on outcomes from recent operational incidents and operational changes. • Develop test cases that not only check for vulnerabilities but also assess the resilience of operational controls and incident response procedures. | • Operational scenarios in test cases | • Operational test cases (monitoring, recovery, support processes) | • Operational test library mapped to service levels |
| Testing | Test Execution | Operational Architect | Monitors the adherence to predefined operational protocols and timelines. They provide expert analysis of complex test results, particularly in simulations that involve sophisticated operational scenarios. The OA also coordinates realistic incident response simulations to rigorously evaluate the effectiveness of organisations operational measures, ensuring that test documentation is meticulous and thorough. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Oversee the rigorous execution of operational tests, ensuring they are conducted without disrupting operational services. • Analyse test results to quickly identify operational weaknesses and coordinate with respective teams for immediate mitigation. • Implement continuous testing practices that allow for ongoing assessments of the operational posture without manual intervention. • Document all testing activities and outcomes in a central repository for accountability and future reference. | • Operational impact observation notes | • Operational test execution report | • Formal operational test report with recovery validation evidence |
| Testing | Test Data Management | Operational Architect | Oversees the management of sensitive test data, implementing policies that enforce data protection standards such as encryption and anonymisation. They ensure that data handling practices comply with legal and regulatory requirements and that all personnel involved in testing are trained in these practices. Regular audits of test data management procedures ensure ongoing compliance and operational. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Manage the lifecycle of test data to ensure its operational from creation to disposal, including strict access controls and encryption measures. • Ensure that test data reflects the complexity of real-world data but without using actual sensitive information to prevent risks. • Implement automated tools for test data generation and management to reduce errors and improve efficiency. • Audit and review test data handling practices regularly to ensure they meet the latest operational and compliance requirements. | • Test data handling confirmation | • Test data lifecycle controls record | • Test data governance evidence with disposal records |
| Testing | Test Automation | Operational Architect | Enhances the efficiency and frequency of operational testing across operational systems. They ensure tools are regularly updated and maintained to keep pace with system changes and emerging threats. This automation not only streamlines the testing process but also ensures consistent and reliable testing outcomes, for maintaining robust operational defences. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Leverage advanced test automation tools to streamline operational testing processes, increasing frequency and consistency. • Integrate automated operational scans within regular operational procedures to continuously evaluate the operational landscape. • Update and maintain automation scripts to adapt to new system configurations and emerging operational threats. • Evaluate the effectiveness of automated tools regularly, ensuring they provide accurate and relevant results. | • Scheduled operational checks configured | • Automated operational test suite (health, recovery drills) | • Continuous operational validation framework description |
| Testing | Performance Testing | Operational Architect | Conducts performance testing to assess the impact of operational measures on system performance under various load conditions. They work collaboratively with technical teams to optimise operational settings that might affect system performance, ensuring that operational implementations enhance rather than hinder user experience and system efficiency. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Conduct performance testing to evaluate how operational measures affect system efficiency and user experience under normal and peak loads. • Identify any performance bottlenecks caused by operational configurations and work on optimising them without compromising operational. • Collaborate with network and systems engineers to ensure that operational enhancements do not adversely impact system performance. | • Operational behaviour note under load | • Operational performance report (tooling overhead, thresholds) | • Operations-performance analysis with tuning recommendations |
| Testing | Defect Tracking and Management | Operational Architect | Ensures that all operational issues identified during testing are meticulously documented, prioritised based on their impact, and resolved swiftly. This process involves close coordination with development and operational teams to ensure effective and timely resolutions, maintaining the integrity and operational of operational systems. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Utilise sophisticated defect tracking systems to document, prioritise, and track the resolution of operational issues discovered during testing. • Establish clear communication channels between operational teams and developers to ensure quick and effective defect resolutions. • Monitor the resolution process to ensure operational fixes are implemented properly and verify through re-testing. | • Operational defects logged with severity | • Defect triage with operational impact assessment | • Defect trend analysis with systemic operational fixes |
| Testing | Continuous Improvement | Operational Architect | Uses insights gathered from operational testing to drive enhancements in operational procedures. Regular review sessions with stakeholders help disseminate lessons learned and foster a culture of continuous operational improvement, ensuring that the organisations operational measures evolve in response to new challenges and operational requirements. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Use data and feedback from operational testing to drive continuous improvement initiatives in operational practices. • Organise regular review meetings with stakeholders to discuss testing outcomes, share best practices, and plan future testing strategies. • Stay updated with the latest operational testing methodologies and tools to enhance the organisations operational testing capabilities. | • Testing lessons for operations noted | • Operational testing improvement actions | • Operational readiness improvement plan from test outcomes |
| Deployment | Provisioning and Configuration | Operational Architect | Ensures that all systems are continuously monitored and adjusted post-deployment to maintain operational standards. After initial configurations set by the Solutions Architect, the OA takes over to manage ongoing operational configurations, ensuring that any changes due to operational requirements maintain the integrity of the system and comply with operational policies. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Continuously audit and update operational configurations to adapt to evolving technology and threat landscapes. • Implement strict access controls, ensuring only authorised personnel can make changes to critical systems. • Collaborate with network architects to design secure network configurations that minimise vulnerabilities. • Develop scripts or automation tools to consistently apply operational settings across deployments without manual intervention. | • Configuration check result | • Configuration audit report vs baseline | • Continuous configuration compliance design • Exception register |
| Deployment | Monitoring and Incident Management | Operational Architect | Responsible for the continuous monitoring of all operational systems. They implement advanced monitoring tools that detect, alert, and report on operational incidents in real time. The OA swiftly coordinates incident response strategies to mitigate risks, working closely with incident response teams to manage and resolve issues as they arise, ensuring minimal impact on service continuity. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Design and deploy comprehensive monitoring systems that detect, alert, and log operational incidents in real time. • Develop and maintain incident response protocols, including escalation paths and communication strategies for swift action. • Train operational teams on incident response techniques, enhancing their ability to detect and respond to operational incidents. • Perform regular scenario-based drills to test and refine incident response effectiveness. | • Alert routing configured | • Monitoring implementation record • Escalation matrix | • Monitoring deployment pack • ITSM integration evidence (tested escalations) |
| Deployment | Performance Optimisation | Operational Architect | Monitors the performance impact of operational measures to ensure they do not adversely affect the operational efficiency of services. They work to optimise configurations that balance operational with system performance, ensuring that operational measures enhance rather than hinder service delivery. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Analyse system performance logs to identify any impact from operational tools and configurations. • Collaborate with system administrators to fine-tune operational settings that optimise operational efficiency and system stability. • Develop strategies to mitigate any negative impacts of operational measures on system performance. • Implement adaptive operational measures that can dynamically adjust based on system performance metrics. | • Post-deployment performance check | • Performance assessment with tuning actions | • Optimisation report with re-baselined thresholds |
| Deployment | Backup and Disaster Recovery | Operational Architect | Oversees the operational aspects of backup and disaster recovery plans. They ensure these plans are regularly updated, tested, and capable of quick execution in response to any disaster scenario. The OA's oversight guarantees that backup systems are functional, secure, and capable of restoring data and services quickly to mitigate downtime and data loss. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Design and implement redundant backup systems to ensure data integrity across multiple storage locations. • Schedule and oversee regular backup tests to ensure they are functional and meet recovery time objectives (RTOs) and recovery point objectives (RPOs). • Update disaster recovery plans in response to new business requirements or after significant system updates or changes. • Collaborate with business continuity planners to ensure that operational aspects are fully integrated into organisations overall continuity strategy. | • Backup configured and restore tested | • Backup/DR validation report | • DR operations runbook • Failover test evidence pack |
| Deployment | Security Management | Operational Architect | Enforces operational policies that protect against internal and external threats. They continually update and refine operational measures, such as access controls and encryption protocols, to adapt to new threats. The OA conducts regular operational audits to ensure compliance with the latest operational standards and to assess the effectiveness of current operational measures. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Continually review and enhance operational policies and procedures to cover all aspects of the operational environment. • Implement regular updates of operational systems, including firewalls, intrusion detection systems, and malware protection tools. • Conduct comprehensive audits of existing operational measures to identify vulnerabilities and implement corrections. • Stay abreast of the latest operational standards and compliance requirements, integrating them into the operational framework. | • Access model applied (with security architecture) | • Operational management record (access, policies) | • Operational management plan • Privileged operations procedures |
| Deployment | Patch and Configuration Management | Operational Architect | Manages the regular application of patches and updates to ensure systems are protected against vulnerabilities. They oversee the patch management process, ensuring patches are tested, deployed securely, and integrated without disrupting existing operations. The OA also maintains configuration management logs to track changes and ensure all modifications meet operational requirements. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Oversee the deployment of patches, ensuring they are tested, approved, and documented before application. • Regularly review and adjust the configuration management database (CMDB) to ensure accuracy and completeness. • Develop and enforce policies for change management that include operational review and approval processes. • Monitor the effectiveness of patches and configuration changes to ensure they do not introduce new vulnerabilities into the system. | • Patch schedule entry | • Patch management onboarding record | • Maintenance and patching framework integration pack |
| Deployment | Capacity Planning and Scaling | Operational Architect | As services evolve, the OA plays a crucial role in capacity planning and resource scaling to handle increased operational loads. They monitor system performance and user demand to guide resource allocation, ensuring that scaling efforts are secure and align with the overall operational architecture. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Forecast future system demands based on trend analysis and business growth projections. • Ensure operational scalability by integrating flexible operational solutions that can grow with the system. • Work with IT procurement to ensure that new hardware and software purchases meet the operational needs of organisations. • Advise on virtualisation and cloud strategies that meet operational requirements while providing scalable resources. | • Capacity check note | • Capacity forecast for the service | • Capacity and scaling plan with headroom analysis |
| Deployment | Continuous Improvement | Operational Architect | Collects feedback from monitoring systems, user reports, and operational incidents to continuously refine and enhance operational practices. They lead efforts to implement lessons learned into current operations, fostering a proactive approach to operational and operational efficiency. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Implement a feedback loop with IT operations and business units to gather insights on operational practices and potential improvements. • Analyse incident reports and audit findings to drive continuous operational enhancements. • Lead cross-functional teams in projects to refine and enhance operational infrastructure and practices. • Promote a culture of operational awareness and continuous improvement across the service. | • Deployment observations logged | • Deployment review with improvement actions | • PIR contribution with operational metrics baseline |
| Transition | Knowledge Transfer and Training | Operational Architect | Maintains system-specific operational knowledge, tools, and processes to support ongoing operations. Ensures that operational control objectives continue to align with evolving business requirements and provides onboarding or upskilling support for operational teams. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Assimilate project-delivered operational artefacts and validate their applicability for ongoing operational management. • Maintain and enhance system-specific operational documentation, including operational runbooks, control catalogues, and escalation processes. • Deliver tailored operational onboarding and refresher training for platform teams and support staff responsible for day-to-day operations. • Establish clear lines of communication between operational teams and operational functions to support effective knowledge retention and issue escalation. • Periodically review system documentation and operational procedures to ensure they reflect current architecture and control implementations. | • Handover session record • Quick-reference for service desk | • Validated handover pack accepted by operations • Training records | • Knowledge base articles • Capability assessment post-training |
| Transition | Incident Response Preparation | Operational Architect | Develops and maintains incident response playbooks for the system, ensuring alignment with the system’s architecture and threat profile. Coordinates with SOC and IR teams to ensure playbooks are actionable and regularly tested against known threats or past incidents. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Develop and maintain system-specific incident response playbooks aligned with enterprise IR strategy and threat intelligence sources. • Conduct tabletop exercises and simulated incident walkthroughs to validate team readiness and response effectiveness. • Ensure appropriate log sources and telemetry feeds are integrated with SIEM and EDR platforms to support rapid triage and forensic analysis. • Define incident severity levels and containment protocols relevant to the operational context of the system. • Collaborate with SOC and Threat Intelligence functions to tune alerting thresholds and detection rules specific to system behaviours. | • Escalation contacts loaded to on-call | • Service-specific support playbook validated | • Exercised playbooks with tabletop report • Major-incident integration evidence |
| Transition | Monitoring Enablement | Operational Architect | Owns the operational monitoring strategy for the system, ensuring continuous visibility into operational events and anomalies. Maintains log source integrity, adjusts alerting thresholds, and validates that monitoring remains aligned to current risk. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Maintain oversight of all operational monitoring controls, ensuring that log sources remain active, synchronised, and tamper-resistant. • Regularly review and tune monitoring rules, detection use cases, and alerting thresholds based on changes in system behaviour or threat landscape. • Coordinate with observability and infrastructure teams to address telemetry gaps, ensuring complete coverage of critical components. • Implement automated monitoring health checks and alert suppression rules to reduce false positives and alert fatigue. • Ensure monitoring capabilities are aligned with operational SLAs, risk appetite, and incident response expectations. | • Monitoring confirmed live and parsing | • Monitoring acceptance record (alerts tested, dashboards live) | • Observability acceptance evidence • Tuning baseline and review schedule |
| Transition | Operational Handover | Operational Architect | Accepts responsibility for the operational posture of the live system, ensuring all operational controls are operating effectively and integrated with broader operational processes. Maintains artefacts such as control matrices and technical runbooks to support change and incident response. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Assume ownership of the system’s operational posture post-deployment, ensuring continuity of operational controls as part of the operational lifecycle. • Establish and maintain a comprehensive operational configuration baseline, integrating it into change control and assurance processes. • Validate that operational teams have the necessary access, guidance, and tooling to manage operational controls effectively. • Review and approve post-handover changes that could impact the system’s operational posture, working closely with Change and Risk Management. • Maintain artefacts such as system operational profiles, audit logs, and configuration inventories as part of operational governance. | • Acceptance checklist signed | • Operational acceptance record with conditions | • Formal service acceptance report with readiness evidence |
| Transition | Post-Deployment Security Testing | Operational Architect | Oversees post-deployment operational testing specific to the project, ensuring that all operational controls are functioning as designed. Focus is on validating that no operational regressions or gaps exist after deployment. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Conduct scheduled and ad hoc validation of operational controls in the production environment, ensuring they remain effective post-change. • Collaborate with testing and resilience teams to run scenario-based tests (e.g., failover, credential misuse, lateral movement) reflecting realistic threats. • Perform periodic regression testing following updates, patches, or architectural changes to identify and address emerging control gaps. • Review findings from vulnerability scans, penetration tests, and red team exercises, coordinating remediation and lessons learned activities. • Maintain a operational test plan for the system that evolves based on threat intelligence, incident trends, and audit findings. | • Post-go-live checks reviewed (with security architecture) | • Production validation report | • Ongoing validation schedule with first-cycle evidence |
| Operation | Environment Provisioning | Operational Architect | Ensures that the provisioning of operational environments is consistent with real-time operational requirements and ongoing risk assessments. The OA works closely with the IT operations teams to implement robust operational measures that align with the specific needs of live services. They continuously monitor and adjust the operational configurations to adapt to changing threat landscapes, ensuring that environments remain secure and resilient. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Define and implement operational policies and controls tailored specifically for each type of operational environment, whether cloud-based, on-premise, or hybrid. • Coordinate with infrastructure teams to ensure all provisioning processes incorporate necessary operational checks and meet compliance standards. • Conduct risk assessments for new or modified environments to identify potential operational gaps and ensure appropriate measures are in place. • Establish protocols for securely integrating new technologies and platforms into existing environments. | • Provisioning compliance record | • Environment compliance reporting | • Continuous compliance dashboard • Deviation register |
| Operation | Release Packaging | Operational Architect | Oversees the operational aspects of release packaging for operational updates and patches. They ensure that all deployment artifacts are verified for operational integrity and comply with the organisations established procedures. The OA collaborates with development and project delivery teams to secure the release process, maintaining traceability and accountability for every change made to the operational systems. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Ensure the operational of all release packages by implementing encryption and digital signing to maintain integrity and authenticity. • Conduct pre-deployment reviews of all packages to validate compliance with operational policies and architectural standards. • Coordinate with project delivery teams to integrate operational considerations into the build and release process, ensuring seamless transitions from development to operations. | • Release verification note | • Release verification procedure and records | • Release integrity process with verification evidence |
| Operation | Configuration Management | Operational Architect | Responsible for ensuring that all operational settings and integrations adhere to strict operational standards. They oversee the application of configuration changes, maintaining compliance with operational policies, and preventing unauthorised modifications. The OA also conducts regular audits to validate configuration integrity and to identify and remediate any operational discrepancies. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Oversee the management of operational configurations for operating systems, applications, and network devices across operational environments. • Develop and enforce policies for managing changes to system configurations to avoid unauthorised alterations and ensure consistency across platforms. • Regularly review and update configuration settings based on new operational findings and compliance requirements. • Automate configuration monitoring to detect and respond to unauthorised changes in real-time. | • CMDB updated | • Drift reports with remediation | • Configuration management framework in operation • Drift analytics |
| Operation | Deployment Automation | Operational Architect | Ensures that all automated processes incorporate comprehensive operational checks. They monitor automated deployment scripts to detect and rectify potential operational issues swiftly. The OA's role is crucial in certifying that automation tools enhance operational efficiency without compromising the operational of the deployed services. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Design secure deployment automation workflows that include comprehensive pre-deployment checks and post-deployment validations. • Integrate advanced operational testing and scanning tools within deployment pipelines to identify vulnerabilities before they affect production environments. • Monitor automated deployment activities for adherence to operational protocols, intervening manually when necessary to correct issues. | • Automation run logs | • Automation review record | • Automation assurance pack (controls, break-glass, audit trails) |
| Operation | Deployment Verification | Operational Architect | Actively involved in the deployment verification process, ensuring that all new or updated services meet rigorous operational standards before they go live. They coordinate with testing teams to conduct thorough operational assessments and validate compliance with the operational criteria defined during the project delivery phase. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Oversee the deployment verification process, ensuring all aspects, from functional performance to operational compliance, are thoroughly validated. • Implement automated operational testing frameworks to perform intensive operational audits during deployment verification. • Coordinate with cybersecurity teams to resolve any operational issues discovered during verification promptly and efficiently. | • Verification checklist completed | • Verification reports vs acceptance criteria | • Verification framework with attestation records |
| Operation | Rollback and Recovery | Operational Architect | Plans and tests rollback procedures and disaster recovery plans tailored to operational services. They ensure these plans are robust, secure, and capable of quickly restoring services to a secure state after an incident. Regular testing of these procedures ensures they are always ready to execute and effectively minimise downtime and data loss. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Design and test robust rollback procedures that can be quickly implemented in case of a deployment failure or operational breach. • Regularly update and practice disaster recovery plans to ensure minimal downtime and maintain operational continuity under all circumstances. • Review and refine recovery strategies following real-world incidents or changes in the operational landscape to improve resilience and reduce recovery times. | • Rollback tested and recorded | • Rollback and recovery test reports | • Recovery assurance pack with exercise evidence |
| Operation | Monitoring and Performance Optimisation | Operational Architect | Establishes and manages sophisticated monitoring systems that track the operational and performance of services continuously. They use this data to optimise system performance while ensuring robust operational measures are effective. The OA adjusts operational controls in response to observed threats or performance bottlenecks, ensuring optimal service delivery. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Develop and maintain advanced operational monitoring solutions that provide continuous surveillance of all operational systems. • Analyse operational monitoring data to identify trends and potential threats, enabling proactive adjustments to operational strategies. • Optimise system performance and operational by regularly tuning monitoring tools and updating operational response protocols. | • Alert review and tuning log | • Monitoring effectiveness reviews • Tuning records | • Observability coverage assessment • Continuous tuning programme |
| Operation | Defect Tracking and Management | Operational Architect | Manages the tracking and resolution of defects discovered during the operation of services. They prioritise operational-related defects, coordinating with the relevant teams to ensure timely and effective remediation. The OA maintains detailed records of all operational issues and their resolutions to improve future response strategies and enhance overall operational. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Lead the defect tracking process for operational issues, ensuring comprehensive documentation and prioritisation based on severity and impact. • Develop workflows for rapid defect resolution that involve key stakeholders across operational, IT operations, and development teams. • Maintain a lessons-learned repository from past operational incidents and defect resolutions to guide future operations and prevent recurrence. | • Defects tracked with priority | • Defect reporting with SLA performance | • Root-cause and trend analysis • Systemic remediation proposals |
| Maintenance | Monitoring and Alerting | Operational Architect | Establishes comprehensive monitoring frameworks that are specifically tailored to the unique requirements of organisations live services. By implementing advanced detection technologies and configuring real-time alert systems, the OA ensures that potential operational threats are identified swiftly and addressed promptly. This proactive monitoring setup allows for the continuous surveillance of operational systems, ensuring operational breaches are minimised and operational continuity is maintained. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Design, implement, and maintain comprehensive monitoring solutions tailored to specific operational needs of live services. • Configure real-time alert systems to promptly detect and respond to operational threats, minimising impact on operational continuity. • Continuously update and upgrade monitoring tools with the latest threat detection technologies and methodologies. • Analyse monitoring data to identify trends and potential operational vulnerabilities, ensuring proactive management of risks. • Collaborate with IT operations to ensure monitoring systems are integrated seamlessly across all platforms and services. | • Alert tuning notes | • Monitoring review reports • Updated alert catalogue | • Monitoring improvement backlog • Coverage gap analysis |
| Maintenance | Incident and Problem Management | Operational Architect | Takes a leadership role in coordinating the response to operational incidents. They develop and continuously refine incident response processes to incorporate best practices and lessons learned from recent operational events. Regular training sessions are conducted for the incident response teams to ensure preparedness and efficiency in handling operational breaches. The OA also facilitates a collaborative environment across various departments, ensuring that all stakeholders are engaged and informed during the resolution of operational incidents. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Lead the coordination and management of incidents, ensuring swift and effective resolution to maintain service integrity. • Regularly update incident response processes, incorporating best practices and lessons learned from recent operational events. • Conduct regular training for incident response teams to ensure readiness and efficiency. • Facilitate cross-functional collaboration among IT operations, network operational, and external stakeholders to address and mitigate incidents. • Review and analyse past incidents to improve response strategies and minimise future risks. | • Incident records with resolutions | • Post-incident reviews with tracked actions | • Problem records with root-cause analysis • Playbook updates from incidents |
| Maintenance | Patch and Update Management | Operational Architect | Oversees the patch and update management process, ensuring that all operational systems receive timely updates to mitigate known vulnerabilities. They manage a schedule for updates and maintain a controlled environment for testing patches before deployment. This careful management helps avoid disruptions to ongoing operations and ensures that updates enhance system operational without introducing new issues. The OA also works closely with software vendors to understand the implications of patches and to coordinate their effective rollout. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Oversee and coordinate the timely application of patches and updates across all operational systems to address operational vulnerabilities. • Develop strategies for efficient patch management that minimise disruptions to ongoing operations and service delivery. • Conduct pre-deployment testing of patches to ensure compatibility and non-disruption to existing systems. • Maintain a rigorous schedule for regular updates, ensuring all systems are defended against the latest operational threats. • Collaborate with software vendors and operational teams to understand implications of patches and manage the rollout process effectively. | • Patch status for the estate | • Patch compliance reports with deferrals | • Maintenance posture reporting • Risk-based deferral framework records |
| Maintenance | Performance Optimisation | Operational Architect | Focused on optimising the performance of operational systems to ensure they do not negatively impact the overall system performance. They regularly assess and resolve any performance bottlenecks caused by operational configurations, implementing strategic enhancements to improve system efficiency. By balancing operational needs with system performance requirements, the OA ensures that operational systems are both secure and highly efficient, providing a seamless user experience. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Regularly assess and optimise the performance of operational systems to ensure they do not adversely affect the overall system performance. • Identify and resolve any performance bottlenecks caused by operational configurations or updates. • Implement strategic enhancements to improve both operational and system efficiency, ensuring optimal operational performance. • Work closely with network and systems engineers to ensure that operational enhancements are implemented without degrading service quality or user experience. | • Performance check notes | • Performance reviews with tuning actions | • Estate optimisation study with re-baselined thresholds |
| Maintenance | Capacity Planning and Scaling | Operational Architect | Leads efforts to ensure that organisations infrastructure is prepared to handle both expected and unexpected increases in demand. They conduct detailed analyses of performance metrics and usage patterns to accurately forecast future resource needs. The OA ensures that operational architectures are scalable and robust, providing strategic guidance on infrastructure investments that support growth while maintaining operational standards. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Lead capacity planning efforts to ensure infrastructure is prepared to handle expected and unexpected increases in load, with a keen focus on maintaining operational standards. • Analyse performance metrics and usage patterns to accurately predict scaling needs and prepare for resource allocation. • Assess the scalability of operational architectures and ensure they are robust enough to handle increased operational demands. • Provide strategic recommendations on infrastructure investments that enhance scalability while strengthening operational measures. | • Capacity utilisation check | • Capacity forecast for the estate | • Capacity plan with validated scaling design |
| Maintenance | User Feedback and Enhancements | Operational Architect | Engages with end-users to gather feedback on the operational and operational aspects of services. This feedback is valuable in driving improvements and ensuring that operational measures align with user expectations and needs. The OA prioritises operational enhancements based on this user feedback, facilitating regular review sessions to discuss concerns and potential improvements, enhancing user trust and satisfaction with the services. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Actively engage with end-users to gather feedback on operational and operational aspects of services, using insights to drive improvements. • Incorporate user feedback into operational enhancement initiatives, ensuring that updates and changes meet user needs and enhance overall operational. • Facilitate regular review sessions with users to discuss operational concerns and potential improvements, enhancing user trust and service satisfaction. | • User feedback log entries | • Feedback analysis with proposed enhancements | • Service improvement plan with prioritised enhancements |
| Maintenance | Continual Improvement and Innovation | Operational Architect | Drives initiatives focused on the continuous improvement of operational measures. They explore and integrate innovative operational technologies and practices to stay ahead of potential threats and adapt to evolving operational challenges. By fostering a culture of continuous learning and adaptation within the operational team, the OA ensures that organisations operational practices remain cutting-edge, effectively protecting against both current and future operational risks. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Champion continuous improvement initiatives focused on enhancing operational measures and practices across live services. • Explore and integrate innovative operational technologies and methodologies to stay ahead of emerging threats and challenges. • Develop a culture of continuous learning and adaptation within the team, encouraging ongoing professional development and knowledge sharing. • Lead projects to pilot new operational solutions, evaluating their effectiveness and suitability for wider deployment across organisations. | • Improvement actions in ops review | • Operational improvement plan | • Innovation pilot evaluations with adoption recommendations |
| Optimisation | Performance Analysis and Benchmarking | Operational Architect | Benchmarks operational performance across live services - availability, SLA attainment, incident trends, cost-to-serve - against targets and comparable services, converting the evidence into improvement direction. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Track operational KPIs (availability, SLA attainment, MTTR, change success rate) against agreed targets. • Benchmark services against prior periods, comparable services and industry reference points. • Diagnose recurring performance issues, distinguishing architectural causes from process ones. • Report findings to service owners with prioritised improvement recommendations. | • Ops KPI summary in service review | • Operations performance review vs targets • Improvement actions | • Benchmarking report across services • Re-baselined targets • Investment recommendations |
| Optimisation | Cost and Value Optimisation | Operational Architect | Optimises the run cost of the operational estate - infrastructure utilisation, tooling overlap, support effort - while protecting agreed service levels. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Analyse utilisation and cost-to-serve across the operational estate to identify waste. • Right-size infrastructure and consolidate under-used tooling and environments. • Review support-effort hotspots and target the services consuming disproportionate effort. • Present savings options with explicit service-level impact for decision. | • Utilisation check with quick wins | • Consolidation proposal with service-level impact • Cost-to-serve analysis | • Run-cost optimisation case • Consolidation design with continuity validation |
| Optimisation | Process Improvement and Automation | Operational Architect | Improves and automates operational processes - event handling, request fulfilment, routine maintenance - reducing toil, error rates and response times. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Identify high-toil operational processes and quantify effort consumed. • Design automation for routine operations (runbook automation, self-healing, request fulfilment). • Ensure automated actions are controlled, auditable and reversible. • Measure toil reduction, error-rate and response-time improvements. | • Toil hotspot list with quick wins | • Runbook automation designs • Toil reduction metrics | • Operations automation roadmap • Self-healing design • Benefits tracking |
| Optimisation | Technology Refresh and Rationalisation | Operational Architect | Maintains the health of the operational technology estate - planning refreshes ahead of end-of-support, consolidating overlapping tooling, and keeping operational platforms current without destabilising services. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Maintain a lifecycle register for operational platforms and tooling with end-of-support exposure. • Plan refresh activity sequenced to protect service continuity. • Rationalise overlapping operational tools, validating replacement capability before retirement. • Update operational documentation and integrations for the refreshed estate. | • Lifecycle register entries (end-of-support) | • Refresh plan with continuity approach | • Estate rationalisation case • Migration design with service-impact analysis |
| Optimisation | Control and Configuration Tuning | Operational Architect | Tunes operational configurations - monitoring thresholds, scheduling, resource allocations, resilience settings - using operational evidence to improve stability and efficiency. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Analyse operational events and performance data to identify configurations causing noise or instability. • Tune thresholds, schedules and resource allocations with documented rationale. • Validate changes against service levels and roll back where effects disappoint. • Maintain tuned baselines under change control and monitor drift. | • Tuning change log with rationale | • Tuning review report (noise and stability trends) | • Estate tuning programme records • Validated baselines under change control |
| Optimisation | Capability Enhancement and Innovation | Operational Architect | Advances operational capability on the basis of evidence - piloting improvements such as AIOps, predictive maintenance or advanced observability - and embedding what proves its value. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Identify operational capability gaps from incident trends, toil analysis and team feedback. • Propose and run controlled pilots for enhanced operational capabilities. • Evaluate pilots against agreed success criteria including operational overhead. • Embed successful capabilities into standard operations and update the operating model. | • Capability gap notes from ops trends | • Capability pilot proposal and evaluation (e.g. AIOps) | • Capability uplift design with pilot evidence • Operating model update |
| Retirement | Identification and Assessment | Operational Architect | The OA evaluates operational systems marked for retirement to assess their current functional status and operational posture. This involves analysing usage patterns to identify underutilised or redundant systems and determining any potential operational risks associated with their continued operation or shutdown. The OA works closely with the EA to ensure that the findings align with enterprise-wide operational strategies, ensuring no gaps in compliance or protection arise during the transition process. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Analyse operational systems to determine which are candidates for retirement based on utilisation, performance, operational vulnerabilities, and ongoing support costs. • Perform detailed operational assessments for each system identified for retirement to uncover any potential risks associated with decommissioning. • Collaborate with enterprise operational architects to ensure alignment between the retirement candidates and broader operational strategies. • Document and report on the potential impacts of system decommissioning, including effects on related systems and business operations. | • Retirement candidate assessment note | • Operational retirement assessment (dependencies, support, contracts) | • Estate analysis for retirement with dependency map |
| Retirement | Planning and Strategy | Operational Architect | Once systems are identified for retirement, the OA develops a plan focusing on maintaining operational throughout the decommissioning process. This planning includes detailed risk assessments, outlining potential vulnerabilities during system shutdown or data migration phases. The OA collaborates with project teams to ensure that the transition strategy minimises operational disruptions and maintains operational integrity, creating contingency plans for any identified risks. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Develop operational-focused decommissioning plans that include timelines, required resources, and detailed procedures for safely winding down systems. • Create risk mitigation strategies for identified operational risks to ensure that the retirement process does not expose organisations to threats. • Coordinate with IT and business units to develop a phased decommissioning approach that minimises operational disruptions. • Plan for the secure handling and disposal of hardware, ensuring that all data is irreversibly destroyed or securely migrated. | • Decommissioning checklist for operations | • Operational decommissioning plan (wind-down sequence) | • Decommissioning operations strategy with continuity safeguards |
| Retirement | Data Migration and Archiving | Operational Architect | The OA oversees the secure migration and archiving of data from retiring systems, ensuring that data integrity and confidentiality are preserved. They implement data operational controls and coordinate with IT teams to employ encryption and other protective measures during data transfer processes. The OA also ensures that all data retention policies are adhered to and that any data deletion aligns with compliance mandates, safeguarding against potential data breaches. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Manage the secure migration of data from systems being retired to new systems, ensuring data integrity and operational during the transfer. • Implement encryption and secure transfer protocols to protect data during migration. • Coordinate the archiving of critical data in compliance with legal and regulatory requirements, ensuring that data retention policies are adhered to. • Oversee the secure deletion of data that is not migrated or archived, using industry-standard data sanitisation methods. | • Data disposition actions recorded | • Migration execution records with verification | • Data disposition evidence pack with archive access controls |
| Retirement | Decommissioning and Resource Cleanup | Operational Architect | During the physical decommissioning of systems, the OA ensures that all operational measures are strictly followed. This includes overseeing the secure erasure of data, the proper disposal of hardware, and the revocation of access rights associated with decommissioned systems. The OA monitors and verifies each step of the resource cleanup to prevent operational lapses, ensuring that all components are appropriately sanitised or destroyed. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Supervise the physical decommissioning process, ensuring that all components are appropriately dismantled and disposed of securely. • Manage the deactivation and de-registration of software licenses and the revocation of system access to ensure that operational vulnerabilities are closed. • Oversee the secure wiping or destruction of storage devices to prevent data leakage. • Ensure compliance with environmental standards for the disposal of electronic waste and hardware. | • Access removed and assets disposed (confirmations) | • Cleanup execution records (accounts, integrations, monitoring, agents) | • Decommissioning evidence pack with CMDB closure |
| Retirement | Communication and User Transition | Operational Architect | The OA is actively involved in communicating with users affected by the retirement of systems, ensuring they are fully informed about the changes and understand the operational implications. They provide support and guidance during the transition to new systems, focusing on operational training and updating users on new operational protocols. The OA gathers feedback from users to continually refine the transition process and address any operational concerns promptly. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Communicate decommissioning plans and schedules to all stakeholders, providing updates and alerts throughout the process. • Provide guidance and support to users affected by the retirement, ensuring they are transitioned to new systems with appropriate operational training. • Collect and address feedback from users throughout the decommissioning process to ensure issues are resolved promptly and to improve future retirement processes. | • Notification records | • Transition communications issued with guidance | • Stakeholder transition record with dependency notifications |
| Retirement | Review and Documentation | Operational Architect | Post-retirement, the OA conducts a comprehensive review of the entire decommissioning process to evaluate the operational measures implemented and identify any areas for improvement. They document all aspects of the retirement process, including operational protocols used, challenges faced, and how they were mitigated. This documentation serves as a vital resource for future retirement projects, providing a detailed record that helps refine and enhance operational practices. | Level 5 - Ensure, advise | DESN (Systems design), IFDN (Infrastructure design), ITOP (Infrastructure operations), METL (Methods and tools) | • Conduct post-decommissioning reviews to evaluate the operational effectiveness of the retirement process and identify any remaining risks. • Document all aspects of the decommissioning process, including actions taken, decisions made, and lessons learned, to inform future retirement strategies. • Update operational policies and practices based on insights gained from the retirement process to enhance organisations operational postures. | • Closure note with lessons | • Decommissioning review with catalogue/monitoring updates | • Formal closure report • Archived operational documentation set |