Merge pull request #38 from machintim/machintim-merge-in-SATRE-Glossary

Merge in SATRE Glossary

Author: rmbaxter67

assets/uktre-glossary.yaml

@@ -11,6 +11,13 @@ glossary:
     definition: |-
       The technical mechanism for controlling a known (authenticated) user’s access to a system and its underlying assets such as data. Access control is also referred to as authorisation (and shorthanded as “AuthZ” to distinguish it from authentication), as it determines what the user is authorised to do.
       See also: [AAI]; [Authentication]; [Authorisation].
+  - term: Actor
+    tags:
+      - Architecture
+    definition: |-
+      A person, organization, or system that has one or more roles that initiates or interacts with activities.
+      Example: The SATRE architecture needs actors such as data analysts and internal auditors.
+      See also: [Role].
   - term: Administrative Data
     tags:
       - Data in general
@@ -38,6 +45,13 @@ glossary:
       - Computing
     definition: |-
       The process of installing, configuring, and making software applications available for use within a given environment (eg, a [Trusted Research Environment (TRE)]).
+  - term: Application Component
+    tags:
+      - Architecture
+    definition: |-
+      An encapsulation of application functionality which is modular and replaceable.
+      Example: To perform work within a TRE a data analyst might need access to a Desktop or command line interface application component.
+      See also: [Desktop]; [Command Line Interface (CLI)].
   - term: Application Programming Interface (API)
     tags:
       - Computing
@@ -48,6 +62,17 @@ glossary:
       - Computing
     definition: |-
       A number of applications, tools and other software that work in concert to form a complete software solution.
+  - term: Architecture
+    tags:
+      - Architecture
+    definition: |-
+      An architecture defines the structures and behaviours of an organisation including people, processes, data and technology. This helps build a blueprint for how organisations and people work with technology to deliver TREs.
+  - term: Architectural Principle
+    tags:
+      - Architecture
+    definition: |-
+      Fundamental guidelines that inform the design, decision making and implementation of a TRE. These principles provide a framework to ensure that the design of the underlying components of a TRE are aligned to consistent goals, values and best practices.
+      See also: [Trusted Research Environment (TRE)].
   - term: Artificial Intelligence (AI)
     tags:
       - Computing
@@ -97,6 +122,13 @@ glossary:
       - Processes
     definition: |-
       A set of guidelines that, if followed, is known to produce good outcomes. Best practice may be based on different levels of research evidence and/or collective experience.
+  - term: Business Process
+    tags:
+      - Architecture
+    definition: |-
+      A set of actions which produce a specific desired outcome.
+      Example: To access the TRE a data consumer needs to complete an onboarding business process.
+      See also: [User Onboarding]; [Trusted Research Environment (TRE)].
   - term: Big Data
     tags:
       - Data in general
@@ -106,7 +138,19 @@ glossary:
     tags:
       - Special aspects in the NHS Context
     definition: |-
-      A senior professional in the NHS who safeguards patient confidentiality and privacy. They are responsible for protecting patient information, including how it is used in, for example, research. Named after Dame Fiona Caldicott, the first UK National Data Guardian. 
+      A senior professional in the NHS who safeguards patient confidentiality and privacy. They are responsible for protecting patient information, including how it is used in, for example, research. Named after Dame Fiona Caldicott, the first UK National Data Guardian.
+  - term: Capability
+    tags:
+      - Architecture
+    definition: |-
+      An ability that a system possesses. Capabilities are typically expressed in general and high-level terms. Achieving a capability typically requires a combination of organisation, people, processes, and technology.
+      See also: [Capability Decomposition].
+  - term: Capability Decomposition
+    tags:
+      - Architecture
+    definition: |-
+      A set of components that realise a capability. These components will vary depending on the nature of the capability. Business-focused capabilities will be realised by business processes, roles and services. Technology-focused capabilities will be realised by applications, services and interfaces. In addition to the components realising the capability, a catalogue of standards, frameworks and controls linked to the capabilities will provide guidance on how to implement the capabilities safely.
+      See also: [Capability]; [Component]; [Business Process]; [Role]; [Application Component]. 
   - term: Census
     tags:
       - Data in general
@@ -147,6 +191,12 @@ glossary:
     definition: |-
       Computer data storage hosted by a cloud computing firm rather than provided locally. Access to cloud storage requires an Internet connection, in contrast to local storage which is either attached to a user's computer or needs only a local network connection.
       Examples: Apple's iCloud storage, Google's Drive or Microsoft OneDrive are examples of cloud storage.
+  - term: Component
+    tags:
+      - Architecture
+    definition: |-
+      The statements concerning processes, controls, practices and applications that make up a capability, together with an importance label.
+      See also: [Capability]; [Capability Decomposition].
   - term: Code Control
     tags:
       - Computing
@@ -259,6 +309,13 @@ glossary:
       - Data Management
     definition: |-
       The management and oversight of data throughout its lifecycle, including storage, usage, sharing, retention, and eventual disposal.
+  - term: Data Object
+    tags:
+      - Architecture
+    definition: |-
+      A store of data or information.
+      Example: To know what data is stored within the TRE a study database data object is needed. This contains information on the data assets within the TRE, who owns them and other compliance information.
+      See also: [Database]; [Trusted Research Environment (TRE)].
   - term: Data Literacy
     tags:
       - Data in general
@@ -713,6 +770,12 @@ glossary:
     definition: |-
       The systematic evaluation and analysis of potential risks, threats, or vulnerabilities, including their likelihood, potential impact, and the effectiveness of existing controls or mitigation measures.
       See also: [Risk Assessment](https://www.elgaronline.com/display/book/9781035300921/b-9781035300921-R_69.xml).
+  - term: Role
+    tags:
+      - Architecture
+    definition: |-
+      A role is a set of connected behaviors, rights, obligations and norms within a TRE system. Roles are occupied by individuals, who are called actors.
+      See also: [Actor]; [Trusted Research Environment (TRE)].
   - term: Routinely Collected Data
     tags:
       - Health Services & Health Data
@@ -740,6 +803,12 @@ glossary:
     definition: |-
       Characteristics of individuals or populations related to social and demographic aspects such as age, gender, ethnicity, socioeconomic status, and education level.
       See also: [Characteristic].
+  - term: Specification Pillar
+    tags:
+      - Architecture
+    definition: |-
+      A specification pillar is a group of related capabilities. SATRE has four specification pillars: Information governance, Computing technology, Data management and Supporting Capabilities.
+      See also: [Capability].
   - term: Structured Query Language (SQL)
     tags:
       - Computing