Waterfall Methodology: Technology Solution Governance Compliance Process

PURPOSE ▪ SCOPE ▪ PROCESS DESCRIPTION ▪ PROCESS DIAGRAM ▪ PROCESS INPUTS/OUTPUTS ▪ PROCESS RELATIONSHIPS ▪ ROLES AND RESPONSIBILITIES ▪ SUPPORTING DOCUMENTATION ▪ REVISION HISTORY

Process Owner: Manager, Solutions Development and Support

Note: An owner must be a PCES-level manager or higher.

This process establishes standard tools and processes for the TSLC Waterfall Governance Compliance phase within the Postal Service Technical Environment.

1. PURPOSE

The purpose of the Technology Solution Governance Compliance process validates that requirements and design documents meet USPS compliance standards.  From a compliance standpoint, nothing changes.

2. SCOPE

The Governance Compliance process will be followed for the technology solution and includes, but is not limited to:

3. PROCESS DESCRIPTION

The Technology Solution Governance Compliance process, which validates that the required documents are up-to-date and stored in the archive, consists of the following sub-processes:

1. Ensure that all of the applicable artifacts from all of the previous phases have completed correctly and uploaded to the appropriate location in the TSLC Artifacts Library.

a. Initiate and Plan Phase Artifacts

b. Requirements Phase Artifacts

c. Analysis & Design Artifacts

d. Build Artifacts

e. Customer Acceptance Testing (CAT) Artifacts

Note: Baseline artifacts are mandatory and must be uploaded. Baseline artifacts are indicated in this document by an asterisk (*).

4. PROCESS DIAGRAM

In this section, there is a process diagram of the Technology Solution Governance Compliance process. The process steps are stacked vertically in the center; as each process step is completed, there is a downward arrow to the next process step in the sequence. On the left side are Inputs which inform the process step in the center from which there is an Output. For some process steps, there may not be an input and/or an output. Inputs for the Technology Solution Governance Compliance process include the Change Control Board Document, Technical Solution Requirements with Approval, Technology Solution Design with Approval, SIT Scripts, SIT Test Results, SIT Documented Approval, CAT Scripts, CAT Test Results, C&A Risk Acceptance Letter, Security Certification Letter, Security Accreditation Letter, Customer Acceptance Approval letter, Updated Traceability Matrix as well as SOX PMO Approval, if applicable. The Change Control Board Document, Technical Solution Requirements with Approval, SIT Scripts, SIT Test Results, SIT Documented Approval, CAT Scripts, CAT Test Results, Customer Acceptance Approval letter, and SOX PMO Approval artifact have an asterisk to indicate that they are Baseline Requirements. The first process step is to “Verify Initiate and Plan process artifacts are deposited in the TSLC Artifacts Library” for which there are no additional inputs or outputs. The second process step to “Verify Requirements process artifacts are deposited in the TSLC Artifacts Library” for which there are no additional inputs or outputs. The third process step is to “Verify Analysis and Design process artifacts are deposited in the TSLC Artifacts Library” for which there are no additional inputs or outputs. The fourth process step is to “Verify Build process artifacts are deposited in the TSLC Artifacts Library” for which there are no additional inputs or outputs. The fifth process step is to “Verify Systems Integration Testing (SIT) process artifacts are deposited in the TSLC Artifacts Library” for which there are no additional inputs or outputs. The sixth process step is to “Verify Customer Acceptance Testing (CAT) process artifacts are deposited in the TSLC Artifacts Library” for which there are no additional inputs or outputs. The seventh process step is a decision point. If Verification fails for any of the above processes, the process requires that the problem be corrected, and then the verification process which failed be performed again, until such time as verification can be completed successfully. If Verification is successful, the corresponding output is to “Verify deliverables are uploaded to the TSLC Artifacts Library”. The eighth process step is to Proceed to Release Management, for which there are no additional inputs or outputs. There are no further process steps for this process.

An asterisk (*) denotes a Baseline requirement.

5. PROCESS INPUTS/OUTPUTS

Inputs

Outputs

An asterisk (*) denotes a Baseline requirement.

6. PROCESS RELATIONSHIPS

In this section, there is a relationship diagram of the Technology Solution Governance Compliance process. There are eight processes which comprise the USPS Technology Solution Lifecycle (TSLC) Technology Solution Planning methodology. The processes are aligned vertically as bookends next to each other, specifically: the first process is Initiate and Plan; the second process is Technology Solution Requirements; the third process is Analysis & Design; the fourth process is Technology Solution Build; the fifth process is System Integration Testing (SIT); the sixth process is Customer Acceptance Testing (CAT); the seventh process is Governance Compliance; and the eighth process is Release Management. For all of the processes, there are both Inputs and Outputs to the planning activity. Within the Technology Solution Governance Compliance process, the inputs for the Governance Compliance activity are the Change Control Board Document, Technical Solution Requirements with Approval, Technology Solution Design with Approval, SIT Scripts, SIT Test Results, SIT Documented Approval, CAT Scripts, CAT Results, C&A Risk Acceptance Letter, the Security Certification Letter, the Security Accreditation Letter, Customer Acceptance Approval, Updated Traceability Matrix as well as SOX Impact Assessment (SIA) Form, if applicable. The Change Control Board Document, Technical Solution Requirements with Approval, SIT Scripts, SIT Test Results, SIT Documented Approval, CAT Scripts, CAT Test Results, Customer Acceptance Approval letter, and SOX Impact Assessment (SIA) Form have an asterisk to indicate that they are Baseline requirements. Within the Technology Solution Governance Compliance process, the only output is to “Verify deliverables are uploaded to the TSLC Artifacts Library”. There are no additional outputs of the Technology Solution Governance Compliance process.

An asterisk (*) denotes a Baseline requirement.

7. ROLES AND RESPONSIBILITIES

Business Project Lead (BPL): Responsible for ensuring that all artifacts are completed and uploaded to the appropriate locations in the TSLC Artifact Library.

8. SUPPORTING DOCUMENTATION

For access to the following documents, contact the US Postal Service. See Publication 5, Let's Do Business for further information about local US Postal Service contacts.

9. REVISION HISTORY

Version #1.0
Section(s) Revised:       N/A
Revision Description:     Baseline
Revision Date:              02/22/2012

Version #2.0
Section(s) Revised:       All
Revision Description:    This document was made Section 508 compliant and was converted to HTML.
Revision Date:              FY12/Q3