diff --git a/docs/api-concepts/05-Non-conformance.md b/docs/api-concepts/05-Non-conformance.md new file mode 100644 index 0000000..4ebeba4 --- /dev/null +++ b/docs/api-concepts/05-Non-conformance.md @@ -0,0 +1,18 @@ +--- +title: Non-Conformance +--- + +The API Standards are set at the standard the health sector should be operating at. However, due to the reality of the environment, there is a known deficiency in some of the existing products and services. The approach of these API standards is to keep them at the higher level and document the non-conformance and path to conformance. + +## Non-comformance process + +Non-conformance **MUST** be documented for API Consumers and API Producers of the Digital Services Hub where applicable. + +Digital Services Hub maintains a register of non-conformance. + +The registers includes: +- A list of standards that aren't met +- Any compensating controls +- Outline a path to resolution + +The grace period of non-conformance is 24 months from entering the register. This is to accommodate large changes that may be required to achieve conformance e.g. architecture, or technology changes. \ No newline at end of file