Markdown Editor
Mở trình soạn thảo

Bộ mẫu giải pháp chuyên ngành và ngành chịu quản lý

Thiết kế tham chiếu theo ngành (bảo hiểm ACORD, viễn thông ODA, thương mại, ISA-95, điện lực CIM, khu vực công, FHIR) cùng tài liệu PCI DSS, HIPAA, NIS2, DORA và lưu trú dữ liệu.

Bước 1

Tham chiếu theo ngành

  1. Insurance Solution Design Template (ACORD Reference Architecture)

    Đầy đủ

    Insurance core on ACORD: facet mapping, capabilities, policy/billing/claims, rating, ACORD messages, data trace, reinsurance, regulatory data, migration

    ACORD Reference Architecture (Data Model 2.14, Capability Model 2.6); ACORD NGDS v1-13-0

  2. Telecom BSS/OSS Solution Design Template (TM Forum ODA)

    Đầy đủ

    Telecom BSS/OSS on TM Forum ODA: eTOM and SID mapping, ODA component map, Open API catalogue, catalogue-driven orders, Canvas, migration, conformance

    TM Forum ODA (eTOM v24.0, SID v25.0, Open APIs v4/v5, ODA Canvas 1.2.5)

  3. Composable Commerce Architecture Template (MACH)

    Đầy đủ

    Composable (MACH) commerce: PBCs, commerce engine, PIM, CMS, search, OMS, CDP, BFF, data ownership, peak estimate, PCI hosted fields, vendor scoring

    MACH principles (MACH Alliance); PCI DSS v4.0.1

  4. Manufacturing Integration Design Template (ISA-95, OPC UA)

    Đầy đủ

    ERP-MES-shop floor integration: ISA-95 levels, scope split, B2MML exchanges, OPC UA, unified namespace, zones and conduits, plant rollout

    ANSI/ISA-95.00.01-2025; B2MML V0700; OPC UA 1.05; MQTT 5.0; Sparkplug 3.0.0; IEC 62443-3-2

  5. Utility Integration Design Template (IEC CIM)

    Đầy đủ

    Utility integration on IEC CIM: 61968 reference model, system of record per CIM package, profiles, 61968-100 messages, CGMES, model management, 62351

    IEC 61970-301:2020+AMD1:2022; IEC 61968-11; IEC 61968-100; CGMES 3.0; IEC 62351

  6. Public Sector Digital Service Architecture Template

    Đầy đủ

    Government service architecture: user needs, service map, FEAF v2, TCoP, EIF mapping, shared platforms, accessibility, identity, data sharing, assessments

    GOV.UK Service Standard (14 points); Technology Code of Practice; FEAF v2; EIF; Regulation (EU) 2024/903; WCAG 2.2

  7. FHIR Integration Design Template (HL7 FHIR, IHE)

    Đầy đủ

    FHIR and IHE design: version strategy, IGs, profiles, terminology, MHD/PIXm/PDQm/IUA/mCSD, SMART, consent, bulk data, HL7 v2, testing

    HL7 FHIR R4 4.0.1 / R5 5.0.0; US Core 9.0.0; SMART App Launch 2.2.0; IHE ITI TF Rev. 20.2; Regulation (EU) 2025/327
Bước 2

Quy định và tuân thủ

  1. PCI DSS Scoping and Segmentation Design Template (v4.0.1)

    Đầy đủ

    Card data flows and inventory, scope categories, component register, tokenisation and P2PE, segmentation controls and tests, TPSPs, TRAs, scope confirmation

    PCI DSS v4.0.1 (structure and requirement numbers only); PCI SSC scoping and segmentation supplements

  2. HIPAA Security Rule Solution Design Template

    Đầy đủ

    ePHI inventory and flows, risk analysis, 164.308/310/312 safeguards with R/A, addressable decisions, BAAs, encryption, breach notice, NPRM watch

    HIPAA Security Rule 45 CFR 164 Subpart C; NIST SP 800-66 Rev. 2; Security Rule NPRM (Jan 2025)

  3. NIS2 Cybersecurity Risk-Management Measures Template (Article 21)

    Đầy đủ

    NIS2 classification, jurisdiction, management duties, measures (a) to (j) mapped to CIR 2024/2690, incident reporting, supply chain, metrics, transposition

    Directive (EU) 2022/2555 (NIS2) Art. 20, 21, 23; Implementing Regulation (EU) 2024/2690; ENISA guidance v1.0 (June 2025)

  4. DORA Register of Information Template (ICT Third-Party Arrangements)

    Đầy đủ

    DORA Art. 28(3) register: templates B_01.01 to B_99.01, arrangements, providers and LEI/EUID, supply chain ranks, functions, assessments, concentration, exit

    Regulation (EU) 2022/2554 (DORA) Art. 28 to 30; Implementing Regulation (EU) 2024/2956

  5. Data Residency and Sovereignty Assessment Template (GDPR Chapter V)

    Đầy đủ

    Data tiers, flow map, jurisdiction matrix, Chapter V mechanisms, TIAs, PIPL and DPDP examples, Data Act Art. 32, key custody, sovereign cloud scoring, decision

    GDPR Chapter V; SCCs 2021/914; EU-US DPF 2023/1795; EDPB Recommendations 01/2020 v2.0; Data Act Art. 32