Brainstorming diagram in Microsoft Visio 2013 for asking questions in determining environment gaps for applications

1. Applications
Do we have a
consistent method of
maintaining versions
of custom and 3rd
party apps?
Does the Physical or
Virtual hardware/
resources match?
Sometimes a server
could have a D: in
one env. and an E:
in another that
server the same
purpose
Does the NTFS
permissions match?
For SQL enabled
apps, are they stored
on the equivalent
SQL platforms for
each environment
and is clustering
consistent
Versioning
Do we consistently
keep production
code in sync with
Team System?
Before deployments
to Prod do we use a
consistent method of
verifying the code
staged, is directly
from Team System?
Security
Are we using a
shared Service
accounts?
Does the Service
Account need explicit
Read/Write
permissions to
certain OU’s but
instead have blanket
access?
Enforcement
Agent
If using a proxy layer
for an “Enforcement
Agent”, are the
Config and Policy
settings the same?
There are currently
URL resources in the
IDM environment.
There is currently
one field in Active
Directory that differs
from the way the
SSO solution works
in Prod. Due to
vendor’s QA data
Data Storage
Does the Storage
capacity match and
what is required for
growth?
Load Balancing
Do we Load Balance
these apps in the
same way per
environment? (ex:
Hash to Hardware)
The wwwroot & .Net
folders don’t always
match
Folders could be
giving to much rights
Performace
Is IIS consistently
configured for
Optimal use?
Are these process
running that could
cause degradation?
(ex: backups or sync
running)
Logging
Can the Application
provide adequate
logging info and can
we quickly decipher
what’s logged
Do we enforce what
apps can
continuously or
maually log
IIS Logging
enabled? IIS by
default is but if we
are not capturing
metrics then should
be off
Is provisioning in
place or do we rely
on manual
intervention to grant
access to an App?
Dependencies
When an IISReset is
done, how many
other components
do we affect
Apps could have SQL
or PS connections
defined within it’s
configuration
How granular is the
monitoring?
Do we go to the real-
time functional level
as what a user would
experience?
Can we do
predictability-trend
analysis?
Is Page filing the
same?
What is needed
within the
Environment for the
App to work? (ex; PKI
Certs or a firewall
port needs to be
enabled)
What is the current
supported lifecycle of
the App?
Ensuring data is
secured and
performing code
reviews