CPA3.2 Technical Planning and Management

Purpose

The organisation has sufficient and appropriate technical infrastructure resources, suitable skilled staff, software, technical services, and appropriate management plans to ensure that all functions and services of the repository are supported.

CC3.2: Capability completeness of Technical Planning and Management

  1. Initial: There is some awareness of the need for planning, but this is not fully described or communicated. There is an intent to meet the specific objectives but there is no evidence of a procedure in place to do so.
  2. Partial: There is at least one required activity that is not present or not at a repeatable level. There is evidence that the direction the organisation is taking will lead to a complete capability in this area.
  3. Complete: All required activities are shown to be present in the organisation and at least at a defined level.

SO3.2.1: Technical Infrastructure Resources

The organisation plans and ensures it has sufficient and appropriate technical infrastructure resources to support all the repository functions and service provision.

RA3.2.1.1: Technical Management and Maintenance Plan

The organisation has a documented and maintained technical management and maintenance plan.

(0) Not defined:

There is no awareness or evidence of a technical management plan within the organisation, or management of technical infrastructure resources that support all the repository functions and services.

(1) Initial:

There is management of technical infrastructure but this is undertaken on a reactive when needed basis. There is no evidence of documented planned management.

(2) Repeated/partial:

There are regular management tasks undertaken but these have been established through repeated practice. There is no documented technical management plan.

(3) Defined:

The organisation has in place a documented technical management and maintenance plan.

(4) Managed:

Technical management and maintenance is monitored. Issues and discrepancies from the plan are recorded.

(5) Optimised:

At regular intervals the technical management and maintenance plan is reviewed and appropriate changes are made, recorded and communicated.

 

RA3.2.1.2: Defined Technological Infrastructure Resources

The organisation has defined the appropriate technological infrastructure resources required to be in place to support all repository functions and services.

(0) Not defined:

There is no evidence or awareness that the organisation has defined what is the appropriate technology or level to support all functions and services. The technology appears to be inadequate to support all functions and services.

(1) Initial:

There is evidence that the technological infrastructure is partially complete, either due to lack of resources or unable to employ qualified staff. The organisation has not defined the appropriate technological resources or level to support all repository functions and services.

(2) Repeated/partial:

There is evidence that there is likely to be an appropriate level of technical infrastructure resources to support all repository functions and services, however the organisation has not defined what this level should be.

(3) Defined:

The organisation has defined the appropriate technical infrastructure resources to support all functions and services.

(4) Managed:

Technological infrastructure resources appropriate to support functions and service needs are monitored and analysed at regular intervals. The monitoring is documented.

(5) Optimised:

At regular intervals the appropriate technological infrastructure resources are reviewed with respect to the function and service needs and the description is adjusted accordingly.

 

SO3.2.2: Software Migration and Maintenance

Appropriate software is migrated to new versions and maintained with required updates, bug fixes and patches that are required to ensure the safe and consistent provision of all functions and services in accordance with policies and the technical management and maintenance plan. New software tools or services are evaluated and selected to ensure the safe and consistent provision of all functions and services in accordance with policies and the technical management and maintenance plan.

RA3.2.2.1: Planned Migration and Maintenance of Core Software

Migration and maintenance of all core software is undertaken in a planned and consistent manner by responsible roles in accordance with appropriate policies and the technical management and maintenance plan.

(0) Not defined:

There is no evidence of, or awareness of the need for, software migration and maintenance being performed by the organisation.

(1) Initial:

Software migration and maintenance is undertaken by staff who care for a specific service, hardware platform, or tool, on an ad hoc basis.

(2) Repeated/partial:

Software migration and maintenance is undertaken by individuals in a coordinated fashion when required to do so.

(3) Defined:

Migration and maintenance of core software is undertaken in a planned and consistent manner in accordance with appropriate policies and the management and maintenance plan and by responsible roles. A risk assessment and test installation are undertaken before migration or substantial updates are applied to core software.

(4) Managed:

Software migration and maintenance are monitored and issues and incidents are recorded.

(5) Optimised:

At regular intervals the procedures of migration and maintenance of core software are reviewed, modified where required to improve process or where required by policy change, and communicated internally.

 

RA3.2.2.2: Evaluation of Software Tools and Services

New software tools or services are evaluated against a set of requirements defined by the organisation for the safe and consistent provision of functions and services in accordance with policies and the technical management and maintenance plan.

(0) Not defined:

There is no evidence of a software evaluation procedure or requirements being defined.

(1) Initial:

New or updated software is evaluated on an ad hoc basis by various roles or staff. Software maybe installed and used to provision a function or service without a full evaluation being performed.

(2) Repeated/partial:

New or updated software is evaluated for use on a regular basis to a set of undocumented requirements but based upon the knowledge of staff. There is no systematic or comparative reporting.

(3) Defined:

A defined set of requirements (functional and nonfunctional) is created for the evaluation of core software tools or software services required safe and consistent provision of functions and services. Software or service is selected based upon best fit to the requirements. This process is documented in a policy.

(4) Managed:

The process of creating the requirements and software selection are monitored and issues recorded.

(5) Optimised:

At regular intervals the process of software and service evaluation is reviewed and alterations made if required due to changes in other policies or issues noted.