Deployment Checklist for FIN133

Stats:
ComponentSuccess CriteriaProject Stage Required (Agile)OK (Y/N)Reviewed by (date)Outstanding Actions (Who)

Documents

Implementation Plan (including Rollback plan)Implementation plan has been followed to deploy to Test and updated in case of issues found Rollback plan has been documented.DSOR (Release 1-n)Nafinnan 15/10/2019requires updating
Implementation Risk AssessmentA risk assessment has been undertaken for the Implementation Plan and selected deployment dates.ASOR (Release 1-n)Yafinnan 15/10/2019low
System Design Specification (SDS)Document complete and accurate. Action: The Document must be copied to the WikiASOR (Final Release / Handover)Yafinnan 15/10/2019documentation from vendor
System Description DocumentDocument complete, accurate and it has been reviewed by Application Management Action: The Document must be copied to the WikiASOR (Final Release / Handover)Yafinnan 15/10/2019documentation from vendor

Controls

Scalability/Load TestingAdequate load testing has taken place. The results have been recorded and analysed to ensure that the application will cope with the anticipated load.ASOR (Final Release / Handover)Npaulr 09/10/2019N/A
PerformanceThe application has been tested against stated performance criteria. Performance has been assured by user and support staff testing.ASOR (Final Release / Handover)Nafinnan 15/10/2019 N/A
Source Code available in GITSource code has been secured in GIT and Production branch is up-to-date. Note that this applies to all new development. If the code was in SVN or VSS at the start of the project it must be migrated to GIT. Action: ensure Production Branch created and check that the branching structure conforms to the policy outlined here: https://www.wiki.ed.ac.uk/display/insite/Version+Control+Policy Where code is provided by a third party (e.g. supplier) it has been established who is responsible to maintain source code.DSOR (Final Release / Handover)Nafinnan 15/10/2019N/A - vendor responsible
Configuration Management DatabaseAdd or update in Abacus application. Server names and software versions: CSG: https://abacus.is.ed.ac.uk/Browser/?p=Content%2FCatalogues%2F552117.html ISG: https://abacus.is.ed.ac.uk/Browser/?p=Content%2FCatalogues%2F562013.html USG: https://abacus.is.ed.ac.uk/Browser/?p=Content%2FCatalogues%2F538043.htmlASOR (Release 1-n)Yafinnan 15/10/2019Updated
Support AccountsRead access accounts or update current read access accounts have been set up for support staff(requires business owner approval)ASOR (Final Release / Handover)N N/A N/A
Password Manager (PMP)PMP has been updated with all relevant account details including external supplier accountsASOR (Release 1-n)Yfmunoz 18/10/2019 N/A

Client

Environment comparisonDatabase comparison between TEST and LIVE (might be required before and after go-live)ASOR (Final Release / Handover)Yafinnan 15/10/2019N/A
Client requirementsDoes the application have specific client requirements, such as JVM/JRE versions, JInitiator etc If so have these requirements been raised with Desktop services Wiki pages to be updated: [1] https://www.wiki.ed.ac.uk/display/insite/Corporate+applications+with+client+based+requirements [2] https://www.wiki.ed.ac.uk/display/insite/Client+side+requirements+for+corporate+applicationsASOR (Release 1-n)Npaulr 31/10/2019 N/A
TechnologiesIs there any new software or technologies involved? (Y/N) If yes state any additional actions taken to ensure adequate handover to the production support teamASOR (Release 1-n)Npaulr 31/10/2019N/A
Access outside UniversityBy default all web based applications are accessible outside University without use of VPN etc Wiki list If not accessible from outside University this needs to be approved by Production Management.ASOR (Release 1-n)Yafinnan 15/10/2019N/A
Vendor Access RequiredDoes vendor require db/app access (Y/N) If yes, ensure access details are in TADASOR (Final Release / Handover)Yafinnan 15/10/2019 N/A

Deploy

CertificatesAll changes to certificates or new certificates for this service have to be added to the certificate master list. The certificate master list is being managed by Applications Management This includes TEST and LIVE certificates and records type of certificate and expiry dates.ASOR (Final Release / Handover)Yafinnan 15/10/2019N/A
Deployment Date(s)Agreed date has been confirmed that allows adequate time for completion of Acceptance Sign Off Review.ASOR (Final Release / Handover)Yafinnan 15/10/201917/10/19
Deployment ResourcesIS and business area resources required for deployment, including those needed for post implementation checking and sign off have been secured.ASOR (Final Release / Handover)Yafinnan 15/10/2019 N/A
Deployment OwnershipResponsibilities for managing the go-live, including: comms with service owner and end users, ensuring go live timescales are met, managing issues arising and managing comms between all teams involved in go live.ASOR (Final Release / Handover)Yafinnan 15/10/2019PM
Service Announcement(s)A Service announcement has been raised with the agreed deployment date on the alert system: http://reports.is.ed.ac.uk/alerts/ Service announcements should be raised by Project Manager 10 days before go live, but no later than 4 days.ASOR (Release 1-n)Yafinnan 15/10/2019 N/A
Reporting and AnalyticsNew BI Universes or substantial changes to Universes/report offerings need to be documented in the Information Portal managed by GaSP. https://www.wiki.ed.ac.uk/display/IP/Information+Portal+HomeASOR (Release 1-n)Yafinnan 15/10/2019 N/A
Change Control(s)A Change & Release record has been created in Unidesk for the LIVE implementation request and notified to GoCAB if necessary Action: Record Unidesk numberASOR / (Release 1-n)Yafinnan 15/10/2019C1910-032
Test Log ReviewA review of the test log (JIRA) has taken place to ensure all required actions have been completed. If this is not the case, then confirmation on criticality of outstanding issues and action plan for resolution is required.ASOR (Final Release / Handover)Nafinnan 15/10/2019 N/A
24x7 monitoring setupConsider if a new application needs to be added to 24x7 monitoring toolASOR (Release 1-n)Yafinnan 15/10/2019N/A

Infrastructure1

Technical Architecture/Operational Document(TAD)Documentation complete and accurately reflects the environment subjected to UAT. Action: Copy TAD to Sharepoint site. https://uoe.sharepoint.com/:f:/r/sites/disasterrecoveryplans and link added to the Wiki.ASOR (Release 1-n)Yfmunoz 18/10/2019 N/A
Technology Management HandoverHandover to Technology Management and Development Technology is completed or arranged. Action: record handover datesASOR (Final Release / Handover)Nfmunoz 18/10/2019Handover to Technology Management to be arranged.
SecurityAll security requirements, e.g. SSL encryption, IP based restrictions firewall requirements have been specified, tested and implemented in LIVEASOR (Release 1-n)Yfmunoz 18/10/2019 N/A
Default DenyDefault deny has been enabled as outlined in the policy: https://www.wiki.ed.ac.uk/display/insite/Default+Deny+Policy Any exceptions must be noted in the TAD and signed off by Head of Production Services.ASOR (Release 1-n)Yfmunoz 08/10/2019N/A
User AccountsUser accounts exist and passwords have been added to PMPASOR (Final Release / Handover)Yfmunoz 18/10/2019 N/A
PatchingEnsure that all applications have an agreed patching schedule and this schedule is agreed with service owners. Different technologies have different patching strategies: Action update wiki: Windows, LinuxASOR (Final Release / Handover)Yfmunoz 08/10/2019 N/A
Start/Stop scriptsAre Server Start-up/Shutdown scripts in place? Including start-up procedure documented, enabled and testedASOR (Release 1-n)Yfmunoz 18/10/2019 N/A

Infrastructure2

PortsPort allocation file been updated: https://www.wiki.ed.ac.uk/display/insite/Port+Allocation+on+Unix+ServersASOR (Release 1-n)Yfmunoz 08/10/2019N/A
Backup and RecoveryAll backups as noted in the TAD need to be confirmed operational. A test recovery of user data needs to be done to validate the integrity of the recovery mechanism and process. The backup strategy should conform to the policy here: https://www.wiki.ed.ac.uk/display/insite/Backup+PolicyASOR (Release 1-n)Yfmunoz 18/10/2019 N/A
DR CopyDR copy to SECONDARY DB configured and tested (unless existing database which is already setup).ASOR/Release1Yfmunoz 18/10/2019N/A
LogsFor all logs the following is in place: Logs are rotated and logs older than 14 months are deleted. In production only minimal levels of logging is switched on (debug may be appropriate on DEV, but not on Production)ASOR (Release 1-n)Yfmunoz 18/10/2019 N/A
DecommissionIf project deploying new server make sure old servers are being decommission including removing passwords from PMP and patching restart WikiASOR (Release n)Nafinnan 15/10/2019to be arranged
Servers are being scanned by NessusCheck that new and existing servers are being scan by NessusASOR (Final Release / Handover)Yfmunoz 08/10/2019 N/A

Support1

Support Agreement (including any charging arrangements)A support agreement OLA is in place for any new applications including any hosting or support charges. Where external suppliers are involved an SLA should be in place as well. Action: SLA moved to wiki: https://www.wiki.ed.ac.uk/display/insite/SLA+and+OLA+repository+-+Applications+ManagementASOR (Final Release / Handover)Ypaulr 08/10/2019 N/A
Application Management HandoverHandover to Application Management and Development team is completed or arranged. Action: record handover datesASOR (Final Release / Handover)N N/A N/A
AppCatalogue updatedFor new and existing application update the Appcatalogue https://appcat.is.ed.ac.uk/ASOR (Final Release / Handover)Yafinnan 15/10/2019updated
Time Recording CodeA Time Recording code for the application, if required, has been confirmed and set up (in ASTA) Action: Does application require a separate entry for business area in ASTAASOR (Final Release / Handover)Yafinnan 15/10/2019 N/A

Support2

Disaster Recovery and Business ContinuityAppropriate DR/BC provision is in place and has been fully tested. Application DR/BC details have been transferred to the DR Portfolio and DR level (1, 2 or 3) has been agreedASOR (Release 1-n)N N/A N/A
Test EnvironmentAn adequate TEST environment has been established for the application which may be used by support to test future changes prior to releasing these in the LIVE environment.ASOR (Release 1-n)Ypaulr 08/10/2019 N/A
Hardware and Software LicensingAll required licensing is in place including maintenance/support arrangements with external suppliers.ASOR (Final Release / Handover)Ypaulr 08/10/2019 N/A
Browser CompatibilityBrowser compatibility has been tested and compatibility information updated See https://www.ed.ac.uk/information-services/computing/application-development/application-support/supported-web-browsers for detailsASOR (Final Release / Handover)Ypaulr 08/10/2019 N/A

Support3

Portal CompatibilityPortal compatibility, where required, has been confirmed the Portals Service Owner.ASOR (Final Release / Handover)N N/A N/A
Help DeskThe new application is recognised with the UniDesk (A business contact queue is defined where initial calls are raised with)ASOR (Final Release / Handover)Ypaulr 09/10/2019 N/A
User Guide DocumentationAppropriate documentation has been produced for users of the new application.ASOR (Final Release / Handover)Nafinnan 15/10/2019 N/A
Training MaterialTraining material, if required, has been produced and is of an appropriate standard.ASOR (Final Release / Handover)N N/A N/A
Demonstration or WalkthroughDemonstration or walkthrough of the new application has taken place for other stakeholder.ASOR (Final Release / Handover)N N/A N/A
Web Sites and Other Document SourcesExternal and internal web sites have been reviewed to ensure that all application references are present, correct and up to date.ASOR (Final Release / Handover)N N/A N/A