The vendor preferred platforms should be considered for implementation first. A flexible way of customizing the application to user requirements without making upgrading difficult should be provided. This should include user exits. A high level of security should be provided at both the client and server ends. The application should provide a flexible system of authorization control, with facilities for distributing and auditing authorization administration.
Security is one of the top priority items being addressed as part of the architectural guidelines.
It is recommended to stay current with developments at the Architecture Framework document web site. A specific security proposal is being implemented and it is essential that new applications be reviewed for inclusion in the enterprise security infrastructure. Such modes should be capable of running in parallel, without interfering with normal production operation. It is desirable to avoid the circumstance where duplicate hardware server platforms are required for application testing and upgrade. These additional installations would provide for upgrades, ad hoc reporting and system redundancy.