Non-Functional Requirements

The following are recommended non-functional requirements for the OpenHIE component software depicted in the gray box of figure 2.1 and further defined in this document. OpenHIE supports the use of technology that is appropriate for the use case and does not preclude the use of proprietary tools but rather supports the use of tools that are built to meet the needs and support the implementation. OpenHIE does require that technologies do not create a “lock-in” scenario whereby the implementer has no access to their data and as such supports an approach to an open architecture.

#	OpenHIE Non-Functional Requirements	Notes for system evaluation	Recommendation/ Requirement
NRF-1	Technologies should provide standard means of accessing data within the system that does not lock the client into proprietary data formats or storage mechanisms.	Please provide documentation on API usage.	Recommendation
NFR-2	The system should be well Documented: An OpenHIE reference system should include appropriate background, design, installation, configuration, and operational documentation to ensure it is easy to understand, maintain, and debug. Source code should have comments so that developers do not need to look anywhere else to understand the code. Configuration files should have embedded comments explaining the different options. Installation, configuration, and operational activities should be describe	Please provide links to documentation and source code Including: Source code documentation policies or examples of comment practices should be shared. Please share configuration files. Please provide installation documentation or links to scripts. Please provide links to source code.	Recommendation
NFR-3	If the system is an open source tool the system should have open, easy access to source code: A standard version control system (e.g., GitHub) should be used to ensure that source code access is fast, easy to download, compile, and execute code.	Please provide links to read.me files and source code repository. Also provide the git flow structure of the repository. E.g production, dev and bug branches.	Recommendation
NFR-4	The system should be built using common technology: In order to make it easy to run/configure/debug, the software should be built on popular technologies that are widely accepted. Any 3rd party libraries used by the software should be easy for a typical developer to use. Any external software/systems (like the database) should also be easy to use. It should be easy to view the contents of the database.	Please state the key programming languages and supported technology platforms. Please list third-party libraries needed Please provide the database entity relationship mapping diagram and documentation.	Recommendation
NFR-5	The source code should include unit tests that are based on the specific requirements of OpenHIE and that create a framework to validate functionality and that the system operates as designed.	Provide links to testing documentation	Recommendation
NFR-6	OpenHIE does not preclude the use of proprietary solutions. If an open source solution is selected it is recommended that the component would, ideally, be distributed under an OSI approved open-source license that minimizes complexity and enables an implementer community to leverage the software in a broad variety of sustainability contexts.	Please share your license	Recommendation
NFR-7	The system should take into account the IT infrastructure of low resource settings where electricity, internet and/or technical literacy may be limited.		Recommendation
NFR-8	Have a community of practices for the global good applications and ensure that there are clear directions on how to engage with the community.	Link to the community and documentation on the way to contact the leaders.	Recommendation
NFR-9	Security practices should include supporting role-based access control lists where appropriate.		Recommendation
NFR-10	It is recommended that there are security practices to notify global good application implementers when security patches are needed.		Recommendation
NFR-11	There should be a community plan for maintaining and evaluating the application for cyber security risks.		Recommendation
NFR-12	Application licenses shall be clearly stated.		Required