Table R1
Reference table
| Discipline | Resource | Why it matters |
|---|---|---|
| Architecture | The Twelve-Factor App | Principles for building deployable services. |
| Architecture | C4 model | A simple way to draw software architecture. |
| Security | OWASP Top Ten | The most common web application risks. |
| Security | NCSC guidance | UK National Cyber Security Centre small business guide. |
| Accessibility | WCAG 2.2 | The accessibility standard we work to. |
| Accessibility | GOV.UK Design System | Well-tested accessible components and patterns. |
| Publishing | App Store Review Guidelines | Apple publishing rules. |
| Publishing | Google Play policy centre | Google publishing rules. |
| Data | ICO guide to UK GDPR | Data protection obligations. |
Checklist
Pre-project survey questions
Who can access production today?
List every account. Remove those no longer needed.
When did you last restore a backup?
A backup that has never been restored is an assumption.
How is a release made?
If only one person knows, write it down first.
What does it cost to run each month?
Hosting, services, licences and support time.