Skip to content
Orion's Arm emblemORION’S ARMSoftware Solutions
Doc · OA-STD-001Engineering standards

Evidence should accumulate as the system is built.

These illustrative reference artefacts show the standard of decision-making, assurance and handover we bring to an engagement. They are examples of our method, not completed client work.

E-01

Problem definition

Users, outcomes, constraints and decision ownership.

E-02

Architecture record

Options, trade-offs, interfaces and accepted consequences.

E-03

Control evidence

Threats, mitigations, verification and accountable owners.

E-04

Operational handover

Runbooks, monitoring, recovery, training and acceptance.

OA-REF-ADR

Architecture decision record

Makes consequential technical decisions understandable, reviewable and durable after the original team has moved on.

Reference artefact 01 · Illustrative

Required contents
  1. 01Decision context and constraints
  2. 02Options considered
  3. 03Chosen approach and rationale
  4. 04Consequences and review trigger
Example control block
Status
Illustrative
Decision
Integration boundary
Owner
Architecture authority
Review
Material interface change
OA-REF-CTL

Threat and control record

Connects credible failure or abuse scenarios to controls, verification evidence and named responsibility.

Reference artefact 02 · Illustrative

Required contents
  1. 01Asset and threat statement
  2. 02Preventive and detective controls
  3. 03Verification method
  4. 04Residual risk and owner
Example control block
Status
Illustrative
Asset
Service identity
Control
Least privilege
Evidence
Access review record
OA-REF-ORR

Operational readiness record

Prevents launch from becoming the moment documentation, recovery and ownership are discovered to be incomplete.

Reference artefact 03 · Illustrative

Required contents
  1. 01Service ownership and escalation
  2. 02Observability and alerting
  3. 03Backup and recovery evidence
  4. 04Knowledge transfer and acceptance
Example control block
Status
Illustrative
Gate
Ready for service
Authority
Service owner
Evidence
Recovery exercise

Need to see how this applies to your programme?

We can map the required evidence to your delivery and assurance environment.

Submit a project brief