Engineering Procedures & Reference Templates

These procedures and templates came out of ISO 9001:2015 and ISO 27001:2022 certification work. They are stripped of organisation-specific context and written to be reusable by any engineering team. The procedures open inline. The Excel templates download.

These procedures reflect a specific conviction: standards that slow engineers down will be worked around. The goal in every one of them was to make the compliant path the path of least resistance, lightweight checks where speed matters, heavier validation where correctness does, with documented fallback paths for the cases where the standard route genuinely cannot apply.

DevOps procedures

Each procedure covers scope, roles, phase gates, KPIs, and toolchain. All six are in active use and reviewed on a defined cadence.

Procedure	Description
SDLC Procedure	End-to-end software delivery lifecycle. Six phases from requirements through operations, with DORA metrics, engineering maturity model, and ISO 9001/27001 alignment. Adopted via GitLab CI pipeline templates.
Code Review Procedure	Standards, checklists, approval workflows, and metrics for peer code review. Enforced through SonarQube and JUnit 5.
CI/CD Procedure	Pipeline design, quality gates, deployment strategies, and rollback requirements. Implemented across all active GitLab runners.
Release Management Procedure	Release planning, versioning, validation, and communication protocols. Adopted via GitLab Releases and semantic versioning policy.
Configuration Management Procedure	IaC standards, environment consistency, drift detection, and audit trails. Enforced through Harbor, internal registry with tagging and versioning policy.
Data Masking Procedure	PII classification, masking strategies, and compliance controls for regulated environments. Applied across all PII-bearing product surfaces as part of ISO 27001 controls.

SLA reference templates

Built to support SLA framework design and service continuity planning. Both templates are technology-agnostic. The dependency mapping template applies to any organisation with cascading service relationships. The recovery objectives workbook gives any team a structured baseline for measuring whether their SLA commitments reflect operational reality.

Template	Description
Service Recovery Objectives Workbook	Automated RTO, RPO, MTTR, and MTBF calculations across eight sheets. Quantifiable inputs, qualitative scoring, dependency tracking, impact analysis, and improvement planning.
Service Dependency Mapping Template	Full infrastructure dependency chains per service. Physical, virtual, network, software, external, and regulatory layers, with cascade failure scenarios, SPOF identification, and ordered recovery sequences.