# Framework

## Framework

- [Company Operating Manual](https://framework.aic.io/company-operating-manual.md)
- [Company Operating Framework](https://framework.aic.io/company-operating-manual/company-operating-framework.md)
- [How We Operate](https://framework.aic.io/company-operating-manual/company-operating-framework/how-we-operate.md)
- [Operating Principles](https://framework.aic.io/company-operating-manual/company-operating-framework/operating-principles.md)
- [Our Delivery Model](https://framework.aic.io/company-operating-manual/company-operating-framework/our-delivery-model.md)
- [Roles, Responsibilities and Accountability](https://framework.aic.io/company-operating-manual/company-operating-framework/roles-responsibilities-and-accountability.md)
- [Decision-Making Model](https://framework.aic.io/company-operating-manual/company-operating-framework/decision-making-model.md)
- [Commercial and Contracting Model](https://framework.aic.io/company-operating-manual/commercial-and-contracting-model.md)
- [Framework Agreements](https://framework.aic.io/company-operating-manual/commercial-and-contracting-model/framework-agreements.md)
- [Statements of Work](https://framework.aic.io/company-operating-manual/commercial-and-contracting-model/statements-of-work.md)
- [Subcontractor Engagement](https://framework.aic.io/company-operating-manual/commercial-and-contracting-model/subcontractor-engagement.md)
- [Change Control](https://framework.aic.io/company-operating-manual/commercial-and-contracting-model/change-control.md)
- [Payments, Milestones and Acceptance](https://framework.aic.io/company-operating-manual/commercial-and-contracting-model/payments-milestones-and-acceptance.md)
- [Agile Delivery Approach](https://framework.aic.io/company-operating-manual/agile-delivery-approach.md)
- [Core Agile Principles](https://framework.aic.io/company-operating-manual/agile-delivery-approach/core-agile-principles.md)
- [Discovery](https://framework.aic.io/company-operating-manual/agile-delivery-approach/discovery.md)
- [Alpha](https://framework.aic.io/company-operating-manual/agile-delivery-approach/alpha.md)
- [Beta](https://framework.aic.io/company-operating-manual/agile-delivery-approach/beta.md)
- [Live](https://framework.aic.io/company-operating-manual/agile-delivery-approach/live.md)
- [Retirement](https://framework.aic.io/company-operating-manual/agile-delivery-approach/retirement.md)
- [Agile Ceremonies](https://framework.aic.io/company-operating-manual/agile-delivery-approach/agile-ceremonies.md)
- [Backlog, Roadmap and Prioritisation](https://framework.aic.io/company-operating-manual/agile-delivery-approach/backlog-roadmap-and-prioritisation.md)
- [Delivery Governance](https://framework.aic.io/company-operating-manual/delivery-governance.md)
- [Delivery Assurance](https://framework.aic.io/company-operating-manual/delivery-governance/delivery-assurance.md)
- [Risk and Issue Management](https://framework.aic.io/company-operating-manual/delivery-governance/risk-and-issue-management.md)
- [Reporting and Progress Tracking](https://framework.aic.io/company-operating-manual/delivery-governance/reporting-and-progress-tracking.md)
- [Project Controls](https://framework.aic.io/company-operating-manual/delivery-governance/project-controls.md)
- [Acceptance and Sign-Off](https://framework.aic.io/company-operating-manual/delivery-governance/acceptance-and-sign-off.md)
- [Intellectual Property and Accelerators](https://framework.aic.io/company-operating-manual/intellectual-property-and-accelerators.md)
- [Background IP](https://framework.aic.io/company-operating-manual/intellectual-property-and-accelerators/background-ip.md)
- [Foreground IP](https://framework.aic.io/company-operating-manual/intellectual-property-and-accelerators/foreground-ip.md)
- [Reusable Assets and Accelerators](https://framework.aic.io/company-operating-manual/intellectual-property-and-accelerators/reusable-assets-and-accelerators.md)
- [Asset Library](https://framework.aic.io/company-operating-manual/intellectual-property-and-accelerators/asset-library.md)
- [IP Reuse Rules](https://framework.aic.io/company-operating-manual/intellectual-property-and-accelerators/ip-reuse-rules.md)
- [Open Source and Third-Party Components](https://framework.aic.io/company-operating-manual/intellectual-property-and-accelerators/open-source-and-third-party-components.md)
- [Engineering and Technical Standards](https://framework.aic.io/company-operating-manual/engineering-and-technical-standards.md)
- [Architecture Standards](https://framework.aic.io/company-operating-manual/engineering-and-technical-standards/architecture-standards.md)
- [Secure Development](https://framework.aic.io/company-operating-manual/engineering-and-technical-standards/secure-development.md)
- [Repository and Version Control Standards](https://framework.aic.io/company-operating-manual/engineering-and-technical-standards/repository-and-version-control-standards.md)
- [Code Review and Quality Gates](https://framework.aic.io/company-operating-manual/engineering-and-technical-standards/code-review-and-quality-gates.md)
- [Release and Deployment Standards](https://framework.aic.io/company-operating-manual/engineering-and-technical-standards/release-and-deployment-standards.md)
- [Security, Compliance and Data](https://framework.aic.io/company-operating-manual/security-compliance-and-data.md)
- [Data Handling and Classification](https://framework.aic.io/company-operating-manual/security-compliance-and-data/data-handling-and-classification.md)
- [Access Control](https://framework.aic.io/company-operating-manual/security-compliance-and-data/access-control.md)
- [Audit and Evidence](https://framework.aic.io/company-operating-manual/security-compliance-and-data/audit-and-evidence.md)
- [Information Assurance](https://framework.aic.io/company-operating-manual/security-compliance-and-data/information-assurance.md)
- [Supplier Security Requirements](https://framework.aic.io/company-operating-manual/security-compliance-and-data/supplier-security-requirements.md)
- [People, Suppliers and Onboarding](https://framework.aic.io/company-operating-manual/people-suppliers-and-onboarding.md)
- [Internal Onboarding](https://framework.aic.io/company-operating-manual/people-suppliers-and-onboarding/internal-onboarding.md)
- [Supplier Onboarding](https://framework.aic.io/company-operating-manual/people-suppliers-and-onboarding/supplier-onboarding.md)
- [Ways of Working](https://framework.aic.io/company-operating-manual/people-suppliers-and-onboarding/ways-of-working.md)
- [Performance Expectations](https://framework.aic.io/company-operating-manual/people-suppliers-and-onboarding/performance-expectations.md)
- [Templates and Operating Artifacts](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts.md)
- [Statement of Work Template](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts/statement-of-work-template.md)
- [Project Initiation Document Template](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts/project-initiation-document-template.md)
- [Weekly Report Template](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts/weekly-report-template.md)
- [Milestone Report Template](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts/milestone-report-template.md)
- [Change Request Template](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts/change-request-template.md)
- [Acceptance Certificate Template](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts/acceptance-certificate-template.md)
- [Risk and Issue Log Template](https://framework.aic.io/company-operating-manual/templates-and-operating-artifacts/risk-and-issue-log-template.md)
- [Glossary](https://framework.aic.io/company-operating-manual/glossary.md)
- [Agile Delivery Playbook](https://framework.aic.io/agile-delivery-playbook.md)
- [Source Basis and Licence](https://framework.aic.io/agile-delivery-playbook/source-basis-and-licence.md)
- [Foundations](https://framework.aic.io/agile-delivery-playbook/foundations.md)
- [Core Agile Principles](https://framework.aic.io/agile-delivery-playbook/foundations/core-agile-principles.md)
- [Agile Methods We Use](https://framework.aic.io/agile-delivery-playbook/foundations/agile-methods-we-use.md)
- [Delivery System](https://framework.aic.io/agile-delivery-playbook/delivery-system.md): Explains how agile delivery is organised, including team structure, roles and the operating model used to run delivery work.
- [Team Model](https://framework.aic.io/agile-delivery-playbook/delivery-system/team-model.md)
- [Working Environment and Cadence](https://framework.aic.io/agile-delivery-playbook/delivery-system/working-environment-and-cadence.md)
- [Backlog, User Stories and Definition of Done](https://framework.aic.io/agile-delivery-playbook/delivery-system/backlog-user-stories-and-definition-of-done.md)
- [Roadmaps, Prioritisation and Planning](https://framework.aic.io/agile-delivery-playbook/delivery-system/roadmaps-prioritisation-and-planning.md)
- [Measuring Progress and Performance](https://framework.aic.io/agile-delivery-playbook/delivery-system/measuring-progress-and-performance.md)
- [Governance and Assurance](https://framework.aic.io/agile-delivery-playbook/delivery-system/governance-and-assurance.md)
- [Delivery Phases](https://framework.aic.io/agile-delivery-playbook/delivery-phases.md): Explains the agile delivery lifecycle, including each phase, its purpose, typical activities, outputs and exit criteria.
- [Discovery](https://framework.aic.io/agile-delivery-playbook/delivery-phases/discovery.md)
- [Alpha](https://framework.aic.io/agile-delivery-playbook/delivery-phases/alpha.md)
- [Beta](https://framework.aic.io/agile-delivery-playbook/delivery-phases/beta.md)
- [Live](https://framework.aic.io/agile-delivery-playbook/delivery-phases/live.md)
- [Retirement](https://framework.aic.io/agile-delivery-playbook/delivery-phases/retirement.md)
- [Operating Controls](https://framework.aic.io/agile-delivery-playbook/operating-controls.md): Explains the controls used to manage agile delivery, including governance, assurance, reporting, risk, change and performance tracking.
- [Commercial, IP and Statement of Work Alignment](https://framework.aic.io/agile-delivery-playbook/operating-controls/commercial-ip-and-statement-of-work-alignment.md)
- [Supplier and Subcontractor Alignment](https://framework.aic.io/agile-delivery-playbook/operating-controls/supplier-and-subcontractor-alignment.md)
- [Security, Data and Assurance](https://framework.aic.io/agile-delivery-playbook/operating-controls/security-data-and-assurance.md)
- [Templates and Checklists](https://framework.aic.io/agile-delivery-playbook/templates-and-checklists.md): Provides practical templates and checklists for planning, governing, assuring and evidencing agile delivery work.
- [Phase Entry and Exit Checklists](https://framework.aic.io/agile-delivery-playbook/templates-and-checklists/phase-entry-and-exit-checklists.md)
- [Governance Templates](https://framework.aic.io/agile-delivery-playbook/templates-and-checklists/governance-templates.md)
- [Research, Backlog and Metrics Templates](https://framework.aic.io/agile-delivery-playbook/templates-and-checklists/research-backlog-and-metrics-templates.md)
- [Glossary](https://framework.aic.io/agile-delivery-playbook/glossary.md)
- [Security, Vetting and Technical Assurance Playbook](https://framework.aic.io/security-vetting-and-technical-assurance-playbook.md)
- [Table of Contents](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/table-of-contents.md)
- [Scope, Source Basis and Maintenance](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/scope-source-basis-and-maintenance.md)
- [Security Operating Model](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operating-model.md): Explains how security is organised, including roles, vetting, assurance activities and decision points.
- [Roles, Accountabilities and RACI](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operating-model/roles-accountabilities-and-raci.md)
- [Security Evidence Model](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operating-model/security-evidence-model.md)
- [Security Governance and Working Groups](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operating-model/security-governance-and-working-groups.md)
- [Security Mission and Principles](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operating-model/security-mission-and-principles.md)
- [Security Risk Appetite and Risk Acceptance](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operating-model/security-risk-appetite-and-risk-acceptance.md)
- [Secure by Design & Defence](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/secure-by-design-and-defence.md): Explains how secure-by-design and defence requirements are built into delivery, architecture and control decisions from the start.
- [Defence Cyber Certification Readiness](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/secure-by-design-and-defence/defence-cyber-certification-readiness.md)
- [JSP 453 Alignment Approach](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/secure-by-design-and-defence/jsp-453-alignment-approach.md)
- [MOD Cyber Security Model v4, DEFCON 658 and Def Stan 05-138](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/secure-by-design-and-defence/mod-cyber-security-model-v4-defcon-658-and-def-stan-05-138.md)
- [MOD Secure by Design Responsibilities](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/secure-by-design-and-defence/mod-secure-by-design-responsibilities.md)
- [Secure by Design Overview](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/secure-by-design-and-defence/secure-by-design-overview.md)
- [Personnel Security and Vetting](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting.md): Explains how personnel security and vetting are managed, including screening levels, role suitability, onboarding controls and ongoing assurance.
- [Baseline Personnel Security Standard](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting/baseline-personnel-security-standard.md)
- [Clearance, Role and Access Mapping](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting/clearance-role-and-access-mapping.md)
- [Insider Risk and Ongoing Personnel Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting/insider-risk-and-ongoing-personnel-security.md)
- [Joiners, Movers and Leavers](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting/joiners-movers-and-leavers.md)
- [National Security Vetting Levels](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting/national-security-vetting-levels.md)
- [Personnel Security Overview](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting/personnel-security-overview.md)
- [Supplier Personnel Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/personnel-security-and-vetting/supplier-personnel-security.md)
- [Classification, Data and Privacy](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy.md): Explains how information is classified and protected, including data handling rules, privacy obligations and control requirements.
- [Data Classification and Handling](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy/data-classification-and-handling.md)
- [Government Security Classifications](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy/government-security-classifications.md)
- [Need to Know and Need to Share](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy/need-to-know-and-need-to-share.md)
- [OFFICIAL and OFFICIAL-SENSITIVE Controls](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy/official-and-official-sensitive-controls.md)
- [Privacy, Personal Data and DPIA](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy/privacy-personal-data-and-dpia.md)
- [Records, Retention and Secure Disposal](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy/records-retention-and-secure-disposal.md)
- [SECRET and TOP SECRET Handling](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/classification-data-and-privacy/secret-and-top-secret-handling.md)
- [Identity Access and Zero Trust](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust.md): Explains how identity and access are managed, including authentication, authorisation, privileged access, access reviews and zero trust controls.
- [ABAC Model](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/abac-model.md)
- [Access Reviews and Recertification](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/access-reviews-and-recertification.md)
- [Hybrid RBAC and ABAC](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/hybrid-rbac-and-abac.md)
- [IAM Overview](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/iam-overview.md)
- [Identity Audit Logging](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/identity-audit-logging.md)
- [Machine Identities and Secrets](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/machine-identities-and-secrets.md)
- [MFA, SSO and Conditional Access](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/mfa-sso-and-conditional-access.md)
- [Privileged Access Management](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/privileged-access-management.md)
- [RBAC Model](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/rbac-model.md)
- [Zero Trust Architecture](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/identity-access-and-zero-trust/zero-trust-architecture.md)
- [Cyber Resilience](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience.md): Explains how cyber resilience is managed, including preparedness, detection, response, recovery and continuity controls.
- [Asset Management and CMDB](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/asset-management-and-cmdb.md)
- [Backup, Disaster Recovery and Business Continuity](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/backup-disaster-recovery-and-business-continuity.md)
- [Cyber Resilience Overview](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/cyber-resilience-overview.md)
- [Exercising, Lessons and Continuous Improvement](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/exercising-lessons-and-continuous-improvement.md)
- [Incident Response and Crisis Management](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/incident-response-and-crisis-management.md)
- [Logging, Monitoring and SOC](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/logging-monitoring-and-soc.md)
- [NCSC 10 Steps Operating Model](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/ncsc-10-steps-operating-model.md)
- [NCSC CAF Mapping](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/ncsc-caf-mapping.md)
- [Ransomware Resilience](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/ransomware-resilience.md)
- [Threat Intelligence and Threat Modelling](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/threat-intelligence-and-threat-modelling.md)
- [Vulnerability and Patch Management](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/cyber-resilience/vulnerability-and-patch-management.md)
- [Technical Secure by Design Standards](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards.md): Explains the technical standards used to implement secure-by-design requirements, including baseline controls, engineering practices and assurance expectations.
- [API Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/api-security.md)
- [Architecture Security Standards](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/architecture-security-standards.md)
- [CI CD and Build Pipeline Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/ci-cd-and-build-pipeline-security.md)
- [Cloud Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/cloud-security.md)
- [Container and Kubernetes Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/container-and-kubernetes-security.md)
- [Cryptography and Key Management](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/cryptography-and-key-management.md)
- [Dependency, SBOM and Software Supply Chain](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/dependency-sbom-and-software-supply-chain.md)
- [Infrastructure as Code Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/infrastructure-as-code-security.md)
- [Network Security and Segmentation](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/network-security-and-segmentation.md)
- [Repository and Branch Protection](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/repository-and-branch-protection.md)
- [Secure Coding and Code Review](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/secure-coding-and-code-review.md)
- [Secure Configuration and Hardening](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/secure-configuration-and-hardening.md)
- [Secure SDLC](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/secure-sdlc.md)
- [Testing, Assurance and Penetration Testing](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/testing-assurance-and-penetration-testing.md)
- [Threat Modelling](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/technical-secure-by-design-standards/threat-modelling.md)
- [Accreditation, Certification and Assurance](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance.md): Explains how accreditation, certification and assurance are managed, including evidence requirements, assessment activities, approval gates and ongoing compliance.
- [Accreditation Strategy](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/accreditation-strategy.md)
- [CAF and GovAssure Readiness](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/caf-and-govassure-readiness.md)
- [Cyber Essentials and Cyber Essentials Plus](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/cyber-essentials-and-cyber-essentials-plus.md)
- [Defence Cyber Certification Readiness](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/defence-cyber-certification-readiness.md)
- [Evidence Library and Control Mapping](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/evidence-library-and-control-mapping.md)
- [ISO 22301 Business Continuity](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/iso-22301-business-continuity.md)
- [ISO 27001 ISMS](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/iso-27001-isms.md)
- [SOC 2, ISO 9001 and ISO 20000](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/accreditation-certification-and-assurance/soc-2-iso-9001-and-iso-20000.md)
- [Supply Chain and Subcontractor Security](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/supply-chain-and-subcontractor-security.md): Explains how supply chain and subcontractor security are managed, including due diligence, control requirements, assurance activities and ongoing oversight.
- [Contracting Securely and Security Schedules](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/supply-chain-and-subcontractor-security/contracting-securely-and-security-schedules.md)
- [Flow Down and Subcontractor Controls](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/supply-chain-and-subcontractor-security/flow-down-and-subcontractor-controls.md)
- [Supplier Monitoring and Offboarding](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/supply-chain-and-subcontractor-security/supplier-monitoring-and-offboarding.md)
- [Supplier Onboarding and Due Diligence](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/supply-chain-and-subcontractor-security/supplier-onboarding-and-due-diligence.md)
- [Supplier Security Model](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/supply-chain-and-subcontractor-security/supplier-security-model.md)
- [Security Operations and Reporting](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operations-and-reporting.md): Explains how security operations and reporting are managed, including monitoring, incident handling, metrics, escalation and governance reporting.
- [Audit Plan and Evidence Retention](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operations-and-reporting/audit-plan-and-evidence-retention.md)
- [Security Exceptions and Risk Acceptance](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operations-and-reporting/security-exceptions-and-risk-acceptance.md)
- [Security Metrics, KPIs and KRIs](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operations-and-reporting/security-metrics-kpis-and-kris.md)
- [Security Operating Rhythm](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/security-operations-and-reporting/security-operating-rhythm.md)
- [Templates and Checklists](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists.md): Provides practical templates and checklists for security planning, assurance, operations, accreditation and evidence management.
- [Accreditation Evidence Matrix](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/accreditation-evidence-matrix.md)
- [Control Mapping Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/control-mapping-template.md)
- [Incident Response Plan Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/incident-response-plan-template.md)
- [JSP 453 Alignment Register Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/jsp-453-alignment-register-template.md)
- [RBAC ABAC Access Matrix Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/rbac-abac-access-matrix-template.md)
- [Security Architecture Decision Record Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/security-architecture-decision-record-template.md)
- [Security Initiation Checklist](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/security-initiation-checklist.md)
- [Security Requirements Catalogue](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/security-requirements-catalogue.md)
- [Security Risk Register Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/security-risk-register-template.md)
- [Supplier Security Due Diligence Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/supplier-security-due-diligence-template.md)
- [Threat Model Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/threat-model-template.md)
- [Vetting and Access Request Template](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/templates-and-checklists/vetting-and-access-request-template.md)
- [Glossary](https://framework.aic.io/security-vetting-and-technical-assurance-playbook/glossary.md)
- [Technical Guidelines, Code Standards and Tech Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack.md)
- [Summary](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/summary.md)
- [Source Basis and Version Policy](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/source-basis-and-version-policy.md)
- [Engineering Operating Model](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/engineering-operating-model.md): Explains how engineering delivery is organised, including technical principles, governance, architecture decisions, quality gates, documentation and continuous improvement.
- [Engineering Golden Rules](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/engineering-operating-model/engineering-golden-rules.md)
- [Architecture Decision Model](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/engineering-operating-model/architecture-decision-model.md)
- [Documentation and Evidence Model](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/engineering-operating-model/documentation-and-evidence-model.md)
- [Technical Debt and Continuous Improvement](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/engineering-operating-model/technical-debt-and-continuous-improvement.md)
- [Technical Governance and Quality Gates](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/engineering-operating-model/technical-governance-and-quality-gates.md)
- [Technical Mission and Principles](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/engineering-operating-model/technical-mission-and-principles.md)
- [Tech Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack.md): Explains the approved engineering technology stack, including runtime, language, tooling, frameworks, testing, DevOps, security tooling and technology selection standards.
- [Approved Technology Radar](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/approved-technology-radar.md)
- [Cloud Distributed Apps and Aspire](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/cloud-distributed-apps-and-aspire.md)
- [Cross-Platform App Stack MAUI](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/cross-platform-app-stack-maui.md)
- [Data Access Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/data-access-stack.md)
- [Desktop Stack WPF](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/desktop-stack-wpf.md)
- [DevOps and CI/CD Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/devops-and-ci-cd-stack.md)
- [IDE and Developer Tooling](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/ide-and-developer-tooling.md)
- [Observability and Telemetry Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/observability-and-telemetry-stack.md)
- [Package Dependency and Supply Chain Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/package-dependency-and-supply-chain-stack.md)
- [ReSharper and Static Analysis](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/resharper-and-static-analysis.md)
- [Runtime and Language Standard](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/runtime-and-language-standard.md)
- [Security Tooling Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/security-tooling-stack.md)
- [Tech Stack Overview](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/tech-stack-overview.md)
- [Testing Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/testing-stack.md)
- [Web API Stack](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/tech-stack/web-api-stack.md)
- [Solution and Architecture Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards.md)
- [Background Jobs and Messaging](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/background-jobs-and-messaging.md)
- [API Gateway and Integration Patterns](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/api-gateway-and-integration-patterns.md)
- [Caching Strategy](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/caching-strategy.md)
- [Dependency Injection Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/dependency-injection-standards.md)
- [Configuration and Options Pattern](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/configuration-and-options-pattern.md)
- [Domain Driven Design Guidelines](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/domain-driven-design-guidelines.md)
- [Logging and Correlation Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/logging-and-correlation-standards.md)
- [Migration and Modernisation Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/migration-and-modernisation-standards.md)
- [Error Handling and Result Patterns](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/error-handling-and-result-patterns.md)
- [Modular Clean Architecture](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/modular-clean-architecture.md)
- [Solution Structure](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/solution-structure.md)
- [Multi-Tenancy and Environment Isolation](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/multi-tenancy-and-environment-isolation.md)
- [Validation Strategy](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/validation-strategy.md)
- [Vertical Slice Architecture](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solution-and-architecture-standards/vertical-slice-architecture.md)
- [C# Code Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards.md)
- [Async Await and Cancellation](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/async-await-and-cancellation.md)
- [Exceptions and Guard Clauses](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/exceptions-and-guard-clauses.md)
- [Analyzers, Warnings and Treat Warnings as Errors](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/analyzers-warnings-and-treat-warnings-as-errors.md)
- [Comments, XML Documentation and API Docs](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/comments-xml-documentation-and-api-docs.md)
- [Collections and Performance Conscious Code](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/collections-and-performance-conscious-code.md)
- [C# Language Version and Feature Policy](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/c-language-version-and-feature-policy.md)
- [Formatting and Style Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/formatting-and-style-standards.md)
- [LINQ Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/linq-standards.md)
- [Nullable Reference Types](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/nullable-reference-types.md)
- [Methods, Parameters and Return Types](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/methods-parameters-and-return-types.md)
- [Naming Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/naming-standards.md)
- [Records, Classes, Structs and Immutability](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/naming-standards/records-classes-structs-and-immutability.md)
- [Serialization and JSON Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/naming-standards/serialization-and-json-standards.md)
- [Date, Time and Time Zones](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/c-code-standards/date-time-and-time-zones.md)
- [SOLID Clean Code and Design Patterns](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solid-clean-code-and-design-patterns.md)
- [Anti Patterns We Avoid](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solid-clean-code-and-design-patterns/anti-patterns-we-avoid.md)
- [SOLID in AIC Projects](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solid-clean-code-and-design-patterns/solid-in-aic-projects.md)
- [Refactoring Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solid-clean-code-and-design-patterns/refactoring-standards.md)
- [Code Review Heuristics](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solid-clean-code-and-design-patterns/code-review-heuristics.md)
- [Design Patterns We Use](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solid-clean-code-and-design-patterns/design-patterns-we-use.md)
- [Clean Code Rules](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/solid-clean-code-and-design-patterns/clean-code-rules.md)
- [Test-Driven Development and Quality Engineering](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering.md)
- [Contract Test Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/contract-test-standards.md)
- [Code Coverage and Mutation Testing](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/code-coverage-and-mutation-testing.md)
- [Mocking Fakes and Test Doubles](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/mocking-fakes-and-test-doubles.md)
- [Defect Management and Regression Testing](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/defect-management-and-regression-testing.md)
- [Integration Test Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/integration-test-standards.md)
- [Performance Load and Soak Testing](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/performance-load-and-soak-testing.md)
- [Test Data Fixtures and Builders](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/test-data-fixtures-and-builders.md)
- [TDD Operating Model](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/tdd-operating-model.md)
- [Test Pyramid and Test Types](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/test-pyramid-and-test-types.md)
- [Unit Test Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/unit-test-standards.md)
- [UI Test Standards for WPF and MAUI](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/test-driven-development-and-quality-engineering/ui-test-standards-for-wpf-and-maui.md)
- [ASP.NET Core Web API Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards.md)
- [API Design Principles](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/api-design-principles.md)
- [Authentication and Authorization Integration](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/authentication-and-authorization-integration.md)
- [API Performance and Resilience](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/api-performance-and-resilience.md)
- [API Testing Checklist](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/api-testing-checklist.md)
- [Health Checks and Operational Endpoints](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/health-checks-and-operational-endpoints.md)
- [Idempotency, Concurrency and ETags](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/idempotency-concurrency-and-etags.md)
- [Minimal APIs vs Controllers](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/minimal-apis-vs-controllers.md)
- [OpenAPI and API Documentation](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/openapi-and-api-documentation.md)
- [ProblemDetails and Error Responses](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/problemdetails-and-error-responses.md)
- [Pagination, Filtering and Sorting](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/pagination-filtering-and-sorting.md)
- [Request and Response Models](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/request-and-response-models.md)
- [Routing, Versioning and Resources](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/routing-versioning-and-resources.md)
- [Validation Filters and Middleware](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/asp.net-core-web-api-standards/validation-filters-and-middleware.md)
- [WPF Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards.md)
- [Accessibility and Usability](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/accessibility-and-usability.md)
- [Data Binding and Commands](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/data-binding-and-commands.md)
- [Navigation and Dialogs](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/navigation-and-dialogs.md)
- [Packaging Deployment and Updates](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/packaging-deployment-and-updates.md)
- [WPF Testing and Automation](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/wpf-testing-and-automation.md)
- [WPF Application Architecture](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/wpf-application-architecture.md)
- [Threading and UI Responsiveness](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/threading-and-ui-responsiveness.md)
- [XAML Style and Resource Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/xaml-style-and-resource-standards.md)
- [MVVM Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/wpf-standards/mvvm-standards.md)
- [.NET MAUI Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards.md)
- [Accessibility and Device Testing](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/accessibility-and-device-testing.md)
- [API Integration](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/api-integration.md)
- [Performance and Startup](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/performance-and-startup.md)
- [MVVM and State Management](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/mvvm-and-state-management.md)
- [Offline First and Sync](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/offline-first-and-sync.md)
- [Permissions and Secure Storage](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/permissions-and-secure-storage.md)
- [Platform Specific Code](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/platform-specific-code.md)
- [Signing Packaging and Distribution](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/signing-packaging-and-distribution.md)
- [MAUI Application Architecture](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/.net-maui-standards/maui-application-architecture.md)
- [Data and Persistence Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards.md)
- [Audit Trails and Soft Deletes](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/audit-trails-and-soft-deletes.md)
- [Dapper and Raw SQL](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/dapper-and-raw-sql.md)
- [Data Seeding and Test Databases](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/data-seeding-and-test-databases.md)
- [Migrations and Schema Governance](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/migrations-and-schema-governance.md)
- [EF Core Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/ef-core-standards.md)
- [MongoDB Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/mongodb-standards.md)
- [Repository and Unit of Work Guidance](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/repository-and-unit-of-work-guidance.md)
- [Transactions and Concurrency](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/transactions-and-concurrency.md)
- [Query Performance Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/query-performance-standards.md)
- [Database Selection](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/data-and-persistence-standards/database-selection.md)
- [Secure Engineering Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards.md)
- [Dependency and Vulnerability Management](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/dependency-and-vulnerability-management.md)
- [Authentication, Authorization, RBAC and ABAC](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/authentication-authorization-rbac-and-abac.md)
- [Cryptography Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/cryptography-standards.md)
- [OWASP ASVS and Top 10 Mapping](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/owasp-asvs-and-top-10-mapping.md)
- [Input Validation and Output Encoding](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/input-validation-and-output-encoding.md)
- [SBOM and Provenance](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/sbom-and-provenance.md)
- [Secrets and Key Management](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/secrets-and-key-management.md)
- [Secure Logging](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/secure-logging.md)
- [Secure by Design for Developers](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/secure-by-design-for-developers.md)
- [Secure Coding Checklist](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/secure-engineering-standards/secure-coding-checklist.md)
- [DevOps Repository and Release Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards.md)
- [CI Pipeline Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/ci-pipeline-standards.md)
- [Branching and Pull Request Model](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/branching-and-pull-request-model.md)
- [Build, Test and Analyse](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/build-test-and-analyse.md)
- [Commit Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/commit-standards.md)
- [Release and Deployment Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/release-and-deployment-standards.md)
- [Infrastructure as Code](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/infrastructure-as-code.md)
- [Environment Strategy](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/environment-strategy.md)
- [Repository Layout](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/repository-layout.md)
- [Versioning and Changelog](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/versioning-and-changelog.md)
- [Rollback and Feature Flags](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/devops-repository-and-release-standards/rollback-and-feature-flags.md)
- [AI-Assisted Project Conception](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/ai-assisted-project-conception.md)
- [AI-Assisted Development](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/ai-assisted-development.md)
- [AI Coding Assistant Policy](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/ai-assisted-development/ai-coding-assistant-policy.md)
- [AI Code Risk Controls](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/ai-assisted-development/ai-code-risk-controls.md)
- [Generated Code Acceptance Criteria](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/ai-assisted-development/generated-code-acceptance-criteria.md)
- [Prompting and Review Standards](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/ai-assisted-development/prompting-and-review-standards.md)
- [Templates and Reference Assets](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets.md)
- [ADR Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/adr-template.md)
- [CI Pipeline Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/ci-pipeline-template.md)
- [API Design Review Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/api-design-review-template.md)
- [Code Review Checklist](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/code-review-checklist.md)
- [Directory.Build.props Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/directory.build.props-template.md)
- [Directory.Packages.props Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/directory.packages.props-template.md)
- [global.json Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/global.json-template.md)
- [NuGet.config Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/nuget.config-template.md)
- [.editorconfig Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/.editorconfig-template.md)
- [Pull Request Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/pull-request-template.md)
- [Test Plan Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/test-plan-template.md)
- [Runsettings Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/runsettings-template.md)
- [Solution README Template](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/solution-readme-template.md)
- [ReSharper Settings Guidance](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/resharper-settings-guidance.md)
- [Release Checklist](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/templates-and-reference-assets/release-checklist.md)
- [Glossary](https://framework.aic.io/technical-guidelines-code-standards-and-tech-stack/glossary.md)