Deployment Standards

Standard Metadata

Area: CI/CD
Owner: Cloud & DevOps group
Last reviewed: 2026-09-09
Next review due from: 2026-12-01
Enforcement: Code review
Status: Active

Deployments must be automated · DEVOPS-02.1 · MUST · DEV

Deployment rollbacks should be automated · DEVOPS-02.2 · MUST · DEV

It should be as quick and easy as possible to revert a deployment if needed.

Software updates must be deployed securely · DEVOPS-02.3 · MUST · DEV

Deployments must protect the confidentiality of software and configuration. Use secure, encrypted channels and avoid manual mechanisms.

Deploy only build artifacts from controlled Build pipelines.
Store credentials in a Key Vault or Variable Group Secret. Never use plain‑text secrets.
Use dedicated service principals with minimal RBAC to maintain least-privilage.
Require pipeline approvals for production releases.