SDLC Governance

SDLC Governance

1. In-Scope

   • In-Dev / In-Prod
   • Application Type
     • End User Managed Applications (EUMA)
     • IT Managed Software
     • IT Infrastructure Software
     • Customized Vendor Application
   • Risk Profiles
     • High Risk
       • High Availability Criticality
       • High Integrity Criticality
       • High Confidentiality Criticality
       • High Access Criticality
     • Low Risk
   • Type of Changes
     • Application Code Changes
     • Application database schema changes
     • Data Migration / Data Conversion
     • Configuration changes that customize applications
     • Infra changes that customize applications
     • Changes stored in Source Code Rep

2. Out of Scope

   • Pure Web Assets with no application content
   • Pure Infra or application entries that has not code to manage
   • Regular RTB activities : User Additions/Deletion
   • Data backup / Refresh
   • Standalone Cluster changes
   • DR activities
   • Standalone Infra/DB activities not related to application
   • Storage, Network, Desktop changes

3. Adoption Process

   • Consolidate all India applications belong to which category
   • Classify them as In-scope/Out of Scope
   • Reach out to Directors and drive it from Top down