Principles

Strategic

Secure

Simple

Solid

Scalable

Sustainable

Align IT solutions and decisions to the strategic imperatives, architecture principles, and BYU's Strategic Plan objectives.

Core Concepts

✅ Actively promote strategic and sustainable partnerships with CES Institutions.

✅ Promote and sustain relationships with strategic commercial vendors.

✅ Services must have well-defined and documented roadmaps which articulate long-term strategic value.

✅ Services must be well-documented and connected to the institutions' IT Services catalog

✅ Purchased and vendor supported solutions are strongly preferred to custom developed, in-house solutions.

✅ Solutions implementing best practice cloud patterns are strongly preferred.

✅ Eliminate unneeded technology and platforms.

✅ Services and solutions that do not meet architectural principles or strategic imperatives must be tracked and should be removed, replaced, or refactored.

✅ Leverage or reuse existing strategic CES and/or campus technology investments.

✅ Design solutions that are broadly applicable and scalable across institutions. Consider the needs and applicability of all CES partners.

Imperatives

Retire & Remove

Unneeded and duplicate technology is eliminated.

Live Golden Rule

Treat each other as the Savior would

Keep Commitments

Build trust by doing what we say

Architect, build, and deliver solutions that are secure, resilient, and incorporate multi-layer, defense-in-depth patterns. Protect user privacy.

Core Concepts

✅ Protect user privacy by adhering to the institution's privacy policy and CES data classification standard.

✅ Build security into the entire application lifecycle.

✅ Assess security risk and build in security controls across all architectural layers (defense-in-depth) that conform to the institution's minimum-security controls.

✅ Data must be classified by sensitivity and business criticality / value using the CES Data Classification standard.

✅ Avoid unnecessary complexity in system designs to reduce failure conditions that expose vulnerabilities.

✅ Insecure, outdated, and end-of-life (EOL) systems should be tracked and removed, refactored, or replaced.

✅Solutions must leverage industry security standards and design patterns.

Imperatives

Security & Privacy

Protect data, IT systems, people, and good name of the university