MHRA: Architecture and Information Security Services

Delivering Architecture-as-a-Service and Information Security Services for MHRA

The MHRA’s Strategy & Architecture team within the Technology, Digital, Data & Delivery division sought Architecture-as-a-Service and Information Security services to support their portfolio of change initiatives. The services aimed to provide high-level deliverables, including architectural and technical roadmaps, data architecture support, solution options papers, impact and benefits analysis and overhaul of the existing enterprise architecture repository. Seamless application integrations, collaboration with stakeholders and vendors and delivering Information Security services were also key objectives.

Key Improvements to the Architecture Service & Knowledge Transfer Objectives

The existing architecture service underwent significant improvements, including:

  • Streamlined governance processes by aligning templates with industry best practices.
  • Revision and update of key templates, artefacts and RACI matrices.
  • Enhanced clarity and accountability by refining RACI matrices.
  • Creation and update of architectural assets.
  • Developed comprehensive risk, dependency and issue registers.
  • Updated principles and guidance for architectural decision-making and solution design.
  • Creation of knowledge transfer and handover documentation.
  • Scheduled sessions with identified Agency resources for effective knowledge sharing.
  • Check-in of all objects into the Agency’s EA tool (iServer 365 repository).
  • Identification and flagging of outstanding design actions.
  • Updating and reallocation of Technical Support Group (TSG) tickets.

Contribution to Specific Projects

Delivered solution architecture, design assurance and repository development across major transformation, sequencing, website remediation and reporting initiatives. Key contributions included developing and maintaining high-level solution designs, assessing integration options, managing architectural risks and design decisions, assuring supplier low-level designs, and producing documentation to support transition into live service.

  • Designed and configured the iServer 365 architecture repository to support standard operational reporting, data gap analysis, field requirements, configuration processes and data updates.
  • Supported Finance Transformation Phase 2 by maintaining application solution designs, evaluating integration and technology proposals, and ensuring alignment with architectural standards.
  • Developed and assured designs for the Next Generation Sequencing project, supporting integration, risk management and supplier design validation.
  • Contributed to the NIBSC Website Remediation project by assessing remediation impacts, producing targeted designs, supporting Azure B2B authentication design, and collaborating with security and other domains.

Key Technologies

Worked across Oracle Fusion, Microsoft Azure, Google Cloud, MuleSoft, SolWeb, Power BI, Azure Data Services, Data Factory, Data Lake, SQL, Ingenica 360, Microsoft Dynamics NAV, Datarails, SharePoint, Appian, React, Node.js, MariaDB, Microsoft authentication services and bespoke CMS platforms.

Data Architecture-As-A-Service Overview

Our Data Architects were tasked with delivering a comprehensive solution to support the development of the agency’s enterprise data architecture.
Key responsibilities and contributions included:
• Support to build an enterprise logical data model which defined data standards to underpin the governance of solution design.
• Identify and document agency enterprise multi domain logical data.
• Produce an enterprise model document in Sparx EA.
• Support to build and implement an agency wide data governance roadmap and framework.
• Aid in conducting a maturity assessment of the agency’s data management.
• Assist in developing standards which underpin the data governance including master data management, data quality and data interoperability using open standards.
• Data Architecture artefacts and knowledge transfer as appropriate to TD3 staff:

  • Logical domain model
  • Enterprise Model document
  • Data Governance roadmap
  • Data Management maturity assessment

Information Security-As-A-Service Overview

Security Architects delivered a comprehensive solution addressing MHRA’s security governance needs across BAU operations and projects. They embedded Security and Privacy by Design principles into architecture products, contributed to Solution Design Boards, and provided security guidance for DevOps implementation. They produced recommendations for a Security Operations Centre, including monitoring, detection and incident-response approaches. They created privileged-account management procedures, activated Privileged Identity Management in Active Directory, and enforced MFA for elevated accounts. They also developed a Data Loss Prevention Policy and established an obsolescence repository for end-of-life and end-of-support software, providing regular review and approval recommendations for solution designs.

Conclusion

The Architecture-as-a-Service, Data Architecture and Information Security services provided contributed significantly to the MHRA’s portfolio of change. With streamlined processes, improved architecture artefacts, defined data modelling and architecture, successful knowledge transfer and robust Information Security measures, the MHRA enhanced its service delivery, decision-making, risk management and alignment with strategic objectives. The services delivered substantial value by supporting projects, strengthening security posture and ensuring compliance with regulatory standards.