PHASE 5: DESIGN PHASE OBJECTIVE/GOALS

1 Single Release Custom Page 1 of 20 PHASE 5: DESIGN PHASE 5: DESIGN PHASE During the DESIGN PHASE , the system is designed to satisfy the requirements identified in the previous phases. The requirements identified in the Requirements Analysis PHASE are transformed into a System DESIGN Document that accurately describes the DESIGN of the system and that can be used as an input to system development in the next PHASE . OBJECTIVE/GOALS Objectives Successful completion of the DESIGN PHASE should comprise: Transformation of all requirements into detailed specifications covering all aspects of the system Assessment and planning for security risks Approval to progress to the Development PHASE Goals The purpose of the DESIGN PHASE is to transform the requirements into complete and detailed system DESIGN specifications.

2 Once the DESIGN is approved, the Development Team begins the Development PHASE . DELIVERABLES AND APPROVALS SDLC deliverables help State agencies successfully plan, execute, and control IT projects by providing a framework to ensure that all aspects of the project are properly and consistently defined, planned, and communicated. The SDLC templates provide a clear structure of required content along with boilerplate language agencies may utilize and customize. State agencies may use formats other than the templates, as long as the deliverables include all required content. The development and distribution of SDLC deliverables: Ensure common understanding among Development Team members and stakeholders, Serve as a reminder of specified plans as projects become increasingly complex, Provide agency senior management and other State officials insight into project risks and ongoing performance, Encourage the execution of repeatable and consistent processes, Facilitate the implementation of project management and agency IT best practices, and Result in a comprehensive record of project performance useful for many purposes ( staff knowledge transfer, budgetary and other assessment activities, lessons learned).

3 During the development of documentation, the Development Team should: Write comprehensive, easy to understand documents with no redundant information. Develop an organized document repository for critical project information, so Development Team members can easily access, store, and reference project documents and other deliverables from all life cycle phases. Implement routine deliverable reviews to correct inaccuracy, incompleteness, and ambiguities. Single Release Custom Page 2 of 20 PHASE 5: DESIGN Recognize that sample templates for deliverables are available; agencies might accept deliverables in different formats as long as all required information is present. The content of these deliverables might expand or shrink depending on the size, scope, and complexity of the project. Recycle or reference information from earlier documents where possible and beneficial.

4 The following is a listing of deliverables required of all projects for this PHASE of work. Deliverable Goals Developed By Approved By System DESIGN Document specifies the construction details of the system, each system component s interaction with other components and external systems, and the interface that allows end users to operate the system and its functions. Document the results of the system DESIGN process Describe how the system with satisfy requirements Development Team Project Sponsor Agency CIO Project Manager System Security Consensus Document (SSCD) a single document containing all information relevant to completing the system s C&A. Define the system s security architecture, security policies, risk assessments, and security tests Consolidate all information for the C&A Project Manager Agency CIO Security Plan documents the scope, approach, and resources required to assure system security.

5 Describe planned activities to control access and protect the system and its information Development Team Project Manager Agency CIO Data Retention Plan describes the project policies for data and records management. Record retention and disposition responsibilities Document retention and disposition requirements Record management process Document retention and disposition schedules Development Team Project Manager Agency CIO Single Release Custom Page 3 of 20 PHASE 5: DESIGN Deliverable Goals Developed By Approved By Disaster Recovery Plan IT-focused plan designed to restore operability of targeted systems, applications, or a computer facility due to a natural or man-made extended interruption of an agency s business services. Identify plans to restore operability in the event of extended interruption of services Define and document concept of operations Document notification procedures Record damage assessment procedures, recovery activities, and reconstitution procedures Development Team Project Manager Agency CIO Unit and Integration Test Plans ( Begin) detailed scripts used in the Development and Test Phases for evaluating the completeness and correctness of the smallest parts of the system and the components created from those parts.

6 The test scripts are more specific than the Test Master Plan, which is high-level and more focused on processes. Identify detailed scripts for testing system components Development Team Agency CIO Project Manager Conversion Plan ( Begin) describes the strategies and approaches for converting/migrating data from an existing system to another hardware or software environment. Document all planned activities to ensure a smooth data conversion from a legacy system to a new environment Development Team Agency CIO Implementation Plan describes how the information system will be deployed as an operational system. Define all planned activities to ensure successful implementation to production operations Development Team Project Sponsor Agency CIO Single Release Custom Page 4 of 20 PHASE 5: DESIGN Deliverable Goals Developed By Approved By Operations or System Administration Manual (Begin) The Operations Manual focuses on mainframe systems; the Systems Administration Manual is oriented for distributed (client/server) applications.

7 Both documents provide details on system operations. Provide detailed instruction for system operations Development Team Agency CIO Maintenance Manual (Begin) details effective system maintenance. Appendices might document maintenance procedures, standards, or other essential information on areas such as backup, networking and connectivity, access and authentication, cabling, and critical services. Provide maintenance personnel with the information necessary to effectively maintain the system Project Manager Agency CIO Training Plan outlines training needs for end users on the new or enhanced information system. Ensure that the schedule accounts for all necessary training needs to successfully implement, operate, and maintain the system Development Team Project Sponsor User Manual ( Begin) describes to end users how to make full use of the information system, including system functions and capabilities, contingencies and alternate modes of operation, and step-by-step procedures for system access and use.

8 Provide users with detailed information to fully utilize the system Development Team Agency CIO Single Release Custom Page 5 of 20 PHASE 5: DESIGN Deliverable Goals Developed By Approved By Requirements Traceability Matrix (Update) a table that links requirements to their origins and traces them throughout the project life cycle. Establish a baseline for requirements change control, DESIGN , and testing Development Team Agency CIO Business Owner Project Manager All deliverables other than those identified as Updates should be developed in this PHASE . Deliverables identified as Updates should be revisited and enhanced as necessary as prescribed in this PHASE . Deliverables produced during this PHASE must be reviewed in detail and should follow the approval path as defined in the above table.

9 A signature page or section should accompany each deliverable requiring approval. DoIT will periodically request copies of these documents as part of its oversight responsibilities. ROLES The following personnel participate in the work activities of this PHASE : Project Sponsor Executive Sponsor Agency CIO Project Manager Development Team Project Stakeholders Security Officer Secretary of DoIT RACI Key Responsible Describes role that executes the activities to achieve the task. Accountable Describes roles that own the quality of the deliverable and sign off on work that Responsible provides. Consulted Describes roles that provide subject matter expertise. Informed Describes roles that receive information about the task. Single Release Custom Page 6 of 20 PHASE 5: DESIGN Deliverable Executive Sponsor Project Sponsor Agency CIO Project Manager Development Team Project Stakeholders Security Officer DoIT System DESIGN Document I A A R I C C System Security Consensus Document I I A R I I A C Security Plan I I A R I I A C Disaster Recovery Plan I I A R I I A C Unit and Integration Test Plans I I A R I C C Conversion Plan I I A R I I C Implementation Plan I A A R I I C Operations or System Administration Manual I I A R I I C Maintenance Manual I I A R I I C Training Plan I A A R I I C User Manual I I A R I I C Requirements Traceability Matrix I A A R I C C Possible RACI Matrix The Roles and Responsibilities page has detailed descriptions of these roles and their associated responsibilities.

10 Single Release Custom Page 7 of 20 PHASE 5: DESIGN TASKS AND ACTIVITIES PHASE 5 DESIGN PhaseExecutive SponsorDevelopmentTeamAgencyCIOS ecurityOfficerDoITDeliverablesProjectSpo nsorProject PHASE Project PMP & Communications Risk Management the Quarterly Update Review Single Release Custom Page 8 of 20 PHASE 5: DESIGN PHASE 5 DESIGN PhaseExecutive SponsorDeliverablesDoITDevelopmentTeamSe curityOfficerAgencyCIOP rojectSponsorProject ManagerSystem DESIGN DocumentUnit & Integration Test DESIGN Test Configuration & Change Functional & Non-Functional the Requirements Traceability MatrixRequirements Traceability the System DESIGN Document Single Release Custom Page 9 of 20 PHASE 5: DESIGN PHASE 5 DESIGN PhaseExecutive SponsorDeliverablesDoITDevelopmentTeamSe curityOfficerAgencyCIOP rojectSponsorProject ManagerTraining the System the Security a Disaster Recovery a System Security Consensus DocumentSystem Security Consensus DocumentImplementation Plan Single Release Custom Page 10 of 20 PHASE 5: DESIGN PHASE 5 DESIGN PhaseExecutive SponsorDeliverablesDoITDevelopmentTeamSe curityOfficerAgencyCIOP rojectSponsorProject PHASE -Closure a Data Retention DESIGN ReviewsENDDataRetentionPlanOperations or System Admin for Operations & Maintenance ActivitiesMaintenanceManual Review PHASE Prerequisites.