ministryofjustice / technical-risk-measures

Discussion around how we measure technical risk in the Ministry of Justice.
4 stars 1 forks source link

Boundary of scope - in-house vs outsourced #15

Closed jennyd closed 5 years ago

jennyd commented 5 years ago

All our systems have some kind of dependency on external tech, but lots of different models of dividing responsibilities between MOJ and external providers exist across our systems. What's in scope for these measures?

For digital services, we have a fairly consistent idea of where that boundary is, and that's where we started when defining the criteria. But the words we've used so far don't always make sense on the surface in other contexts. We should clarify that boundary so that we can word the questions in a way that makes it easier for people across the organisation to understand why they apply in their context.