This document defines a basic set of data elements related to operational monitoring and instrumentation that should be provided by systems on-premises, in our AWS Cloud, or a SaaS provider.
A set of documents that define a Trust Model, describe what is currently in place, and a plan to move toward reducing complexity and the need for data sources to provision applications individually.
This analysis of the architecture guidance on the number of production VPCs (Virtual Private Clouds) for services deployed in AWS examines four dimensions: Security, Cost, Operations, and Business Continuity and Disaster Recovery.
This document outlines potential problems associated with multiple applications running on a single instance, describes current best practices for isolating production applications, and makes recommendations to mitigate potential problems when best practices are not followed.
A set of principles that guide the selection of standards for APIs at Harvard and general development recommendations that impact effective interoperation of our systems and services.
This document outlines a mid-term future-state vision, strategy and design approach for directory services across the University to address overlapping services and data, inconsistent provisioning, and varying levels of support.
This document provides a series of guidelines for determining whether a Software as a Service (SaaS) solution should be established with a single shared subscription or multiple subscriptions.
This advisory provides guidance on striking a balance between using website traffic analysis tools (i.e. analytics) to create a better user experience for website visitors and avoiding unnecessary collection of information about our users that could constitute a breach of trust.
This document allows end users the ability to create SharePoint sites/O365 Groups/Microsoft Team sites as a self-service model while maintaining a naming convention for reporting and tracking purposes.
This document provides a discussion and recommendations for the use of http cookies in web sites and applications to avoid operational and security issues.
The HUIT standard for the design and management of AWS accounts to control for the lack of accountability and reduction in economies of scale that can take place in a large and decentralized institution.
This document provides an overview of the overall process, roles, and technical requirements required to utilize the eCommerce Gateway with Salesforce.
This document provides recommendations for choosing an authentication system for Salesforce, based on user experience, security and practical considerations.
This document discusses the top challenges researchers experience in the use of the Cloud and provides recommendations and guiding principles for putting a solution into place.
This document is intended as a high-level overview of the concepts, methods, benefits, and challenges of user research as a discipline within an Information Technology organization.
This advisory provides some guidelines for the product and portfolio teams to enable them to determine whether or not Oracle APEX is an appropriate tool for a specific custom build.
A tool to assess applications (e.g. developed, licensed, and SaaS solutions) for inclusion in the application portfolio. The checklist includes important considerations that must be accommodated and those that should be honored.
The purpose of this document is to provide guidance and governance for the sourcing of software and packages installed standalone or as part of an operating system on HUIT supported systems.
