Skip to content

12.0 Appendices

Part 12 collects the guidebook's reference apparatus and practical toolkit: the material you reach for while doing the work rather than reading straight through. Where Parts 1–11 explain principles and recommendations, the appendices give you the definitions, ready-to-use artifacts, self-assessment, sources, and navigation that support them. Each is written to stand alone, so you can link a team directly to a single appendix.

Chapters in this part

  • 12.1 Glossary: Definitions of the terms and acronyms used across the book, from ADRs and SLOs to RAG, SBOM, and zero-trust.
  • 12.2 Checklists: Ready-to-use quick-reference checklists for reviews, launches, security and privacy, accessibility, incidents, releases, and more.
  • 12.3 Templates: Copy-paste templates for ADRs, RFCs, postmortems, threat models, runbooks, risk registers, and other recurring documents.
  • 12.4 Maturity self-assessment: The four-level maturity model from every chapter, consolidated into one matrix for organizational self-assessment (see chapter 10.8 for the discipline behind it).
  • 12.5 References: A consolidated index of the standards and frameworks cited throughout, plus a curated bibliography of recommended reading.
  • 12.6 Adoption roadmap: A phased, non-big-bang guide to rolling out the guidebook's practices, with sequencing, prioritization, and enterprise and government guidance.
  • 12.7 Index: A subject index mapping key concepts to the chapters where they appear.

How to use these appendices

Treat them as living companions to the chapters. When a chapter recommends a practice, the corresponding appendix helps you act on it: chapter 1.6 (decision records) pairs with the ADR template in chapter 12.3; the security chapters (4.1–4.6) pair with the threat-model and security-review checklists in chapter 12.2; and the maturity section of every chapter feeds the consolidated self-assessment in chapter 12.4. Start from a chapter's recommendations, then use these appendices to turn them into artifacts, assessments, and a rollout plan (chapter 12.6). Terms in any chapter are defined in the glossary (chapter 12.1), and the index (chapter 12.7) helps you find where a concept is treated in depth.