RDA programs and practices

Keep the work connected.

A common way to decide, implement, support and review.

Programs and practices connect responsibilities, services and evidence. Scope, owners and approvals are agreed with each organization. The work is implemented and checked.

Explore programs and practicesHow RDA works

Programs, practices + guide: under 10 minutes

One IT department
Red outline Management graphicManagementPriorities and responsibility
Blue outline Software graphicSoftwareApplications and information
Green outline Network graphicNetworkInfrastructure and continuity

Daily support connected to the longer-term plan.

The shared foundation

Frameworks, programs and practices.

Technology Portfolio Governance (TPG) organizes investment and significant change. The RDA Program Framework provides a common structure for programs. Practices bring expertise into the work and feed what they learn back into requirements and decisions.

Program

A defined way to manage an ongoing responsibility, with an owner, requirements, rules, procedures and review.

Practice

How RDA applies and develops its expertise. Methods and tools evolve with the work, technology and emerging risks.

Both need agreed scope, accountable people, evidence and approved changes. Programs evolve too; a practice can be well established.

How the pieces fitShared frameworks connect programs, practices and service delivery.
FrameworkTechnology Portfolio Governance (TPG)

Set priorities and authorize investment or significant change.

FrameworkRDA Program Framework

Connect requirements, responsibilities, workflows and evidence.

Programs

Establish the outcomes, rules, procedures and review.

Practices

Apply expertise, investigate and improve the methods.

Services, evidence and review

Carry out the agreed work, check results and bring findings back into decisions, programs and practices.

The organization retains its decision and funding authority. The Service Matrix connects the work across Management, Software and Network.

The RDA approach

Programs and practices

Practice

Technology Review and Planning

Review the work your technology needs to support, identify what needs attention and agree on priorities. Technology Portfolio Governance (TPG) and the RDA Program Framework connect the findings to owners, funding decisions, implementation and review. Security and continuity are part of that broader plan.

Explore this practice

Related guidance: Turn Technology Plans into Work You Can Approve · Use the Service Review to Assign the Next Work

Technology Review and Planning: the connectionInformal overview · Read in numbered order
  1. 1Review

    Needs, responsibilities and evidence

  2. 2Agree

    Priorities, owner and next decision

  3. 3Carry through

    Implement, support and review

Program

Information & Technology Governance

Governance connects the rules people work under to the responsibilities and technical controls behind them. The acceptable-use work includes short user policies, local adoption decisions, training, operating records and evidence. Acceptable use belongs within that broader governance work.

Related guidance: Know What Information You Hold and Why · User Credentials · User Credentials Review · Policy areas

Information & Technology Governance: the connectionInformal overview · Read in numbered order
  1. 1Agree

    Scope, authority and rules

  2. 2Put into use

    Responsibilities and training

  3. 3Review

    Records, exceptions and results

Program

AI use and governance

The Municipal AI package separates user rules from governance and technical requirements. It puts requirements before tools, classification before ingestion, validation before rollout and ownership before scale. Approved sources, existing permissions, a bounded pilot and staff verification are part of that approach.

Related guidance: Give AI a Defined Job and an Accountable Owner · Automate an Approved Process You Can Still Explain

AI use and governance: the connectionInformal overview · Read in numbered order
  1. 1Define

    Use, sources and permissions

  2. 2Test

    A bounded pilot with acceptance checks

  3. 3Review

    Staff verify the work and results

Programs

Continuity and disaster recovery

The framework covers these as related subjects. Continuity addresses essential work, people, facilities and alternatives. Disaster recovery addresses service dependencies, restoration order and accepted recovery objectives. Both need named owners, exercises and recorded corrective actions.

Related guidance: Decide How Work Continues When a Service Stops · Prove That the Information Can Be Restored

Continuity and disaster recovery: the connectionInformal overview · Read in numbered order
  1. 1Essential work

    People, services and dependencies

  2. 2Exercise

    Try the arrangements and recovery

  3. 3Improve

    Check results and assign corrections

Program

Incident response

The program framework provides for triage, response authority, containment, evidence handling and recovery. Procedures, role training and exercises support the response. Results and lessons feed corrective work with owners and verification.

Related guidance: Know Who Takes Charge When an Incident Starts · Give Every Important Alert a Route to Action

Incident response: the connectionInformal overview · Read in numbered order
  1. 1Prepare

    Roles, contacts and procedures

  2. 2Respond

    Assess, coordinate and recover

  3. 3Follow through

    Record, review and verify corrections

Practice

ThreatHunter

ThreatHunter connects current threat intelligence with the systems in scope. Research and inventory checks guide authorized investigation. Available records establish what is happening in the environment. Findings become assigned actions and verified follow-up, informing security operations, incident response and program review.

Related guidance: Security operations · Incident response · Endpoint security

ThreatHunter: the connectionRead in numbered order
  1. 1Research

    Current threats and relevant assets

  2. 2Investigate

    Authorized checks and available evidence

  3. 3Follow through

    Assigned action and verified results

Practice

Technology budget planning

Connect current operations, recurring services, projects and replacement costs. Keep assumptions, responsibilities and timing visible so authorized owners can decide what to fund and sustain. GrantMonitor connects approved priorities to suitable funding routes.

Related guidance: Technology planning · Asset lifecycle

Technology budget planning: the connection
  1. 1Understand

    Current services and commitments

  2. 2Plan

    Projects, replacement and full cost

  3. 3Review

    Decisions, changes and actual costs

Program

GrantMonitor

Fit funding to an approved need. GrantMonitor connects scope, readiness evidence, eligibility, full cost and delivery capacity. Defined readiness checks support funding and release decisions; the organization retains authority and responsibility for sustained operations.

Related guidance: Technology planning · Lifecycle planning

GrantMonitor: the connectionRead in numbered order
  1. 1Define

    Approved need, scope and cost

  2. 2Qualify

    Eligibility, evidence and capacity

  3. 3Carry through

    Authorize, deliver and review

Scope, responsibilities and approvals are agreed with each organization. Programs and practices both retain evidence and verify results.

How RDA works