Governance

Kind: principle

Layer: Security Core

Record: architecture:governance

Severity: contextual

Scope: organization, architecture, platform

Canonical: Ontology

A design rule that architecture decisions are held to stated policies and standards, through review and automated gates.

Listed in Architecture principles, after Compliance and before Policy Enforcement.

Requires

• Policy
• Standards
• Review

Reinforces

• Compliance
• Consistency

Enables

• Controlled Evolution

Conflicts with

• Unbounded Autonomy

In tension with

• Team Velocity
• Decentralization
• Autonomy
• Decentralization / Governance
• Autonomy / Governance

Tensions

• Governance / Team Velocity

Violated by

• Uncontrolled Change

Refactored by

• Standardize the Interface
• Design Review

Severity

• contextual

Category

• Security / Privacy / Compliance / Governance

Enabled by

• Explicit Boundaries
• Single Source of Truth

Reinforced by

• Versioning
• Control Plane
• Centralized Configuration
• Centralized Authentication
• Infrastructure as Code
• Assessment
• Gap Analysis
• Architecture Decision Records
• Explainability

Required by

• Architectural Consistency

Linked from

• Domain Architecture
• Contracts / Interfaces / Compatibility
• Control / Coordination / Centralization
• Portability / Infrastructure / Deployment
• Core Modular Design
• Architecture Review / Evolution / Governance Artifacts
• Model Architecture
• Schema / Canonical Data / Semantics
• Security / Privacy / Compliance / Governance
• Transactions / State / Concurrency
• Contracts / Interfaces / Compatibility
• Core Vocabulary
• Security Privacy Compliance
• Severity levels
• The resolutions