Working with open standards
Open standards are technical specifications developed outside of government.
You must use open standards when designing and building your service unless you’ve been granted an exemption.
Using open standards means you can:
- share data between services and systems more easily
- avoid getting ‘locked in’ to a specific piece of technology or supplier
- reuse software components built by others, including open source components
- reduce the overall cost of your digital service
- benefit from global cyber threat intelligence
- change your service’s design over time more easily
Open standards you must use
The Open Standards Board has approved a list of open standards that all of government must use.
If no approved open standard meets your needs
If you believe the approved list has no available standard that meets your needs, email the open standards team: [email protected].
They’ll tell you if another government project has a similar standard you could use.
If there’s no suitable standard in use elsewhere in government, you must find a standard from outside government.
Finding technical standards outside government
When looking for a standard outside government, you must follow these open standard principles.
-
Start with user needs.
-
Choose standards that make it possible for suppliers to compete on an equal basis.
-
Choose standards that support flexibility and change.
-
Choose standards that support sustainable cost.
-
Make well-informed decisions about your standards.
-
Use fair and transparent selection processes when choosing your standards.
-
Be fair and transparent in how you specify and implement your chosen open standards.
Find out more about following open standards principles.
If you find a standard that you think could be useful across government, you should submit a suggestion to the open standards team at the Central Digital and Data Office (CDDO).
Services with multiple technical specifications
If you’re building a service which uses multiple technical specifications, for example an application programming interface (API) used for interfacing between pieces of software, you’re likely to be using multiple technical standards.
In these cases, you must make sure that as many standards as possible meet open standards principles.
Getting an exemption
In exceptional circumstances the Open Standards Board may give you permission to use a standard that:
- does not meet the open standards principles and has an open alternative
- performs the same function as one of the government’s approved open standards
To ask for an exemption, you need to explain why you want to use a different standard when you apply for spend control approval.
In your spend controls application you should include:
- a description of how you selected your proposed standard
- an analysis of your proposed standard against the Cabinet Office definition of an open standard
You can use the Standards Hub’s core assessment questions for proposed standards to help you decide what information to include.
The Open Standards Board will decide whether you can use your proposed standard.
If your service does not need spend controls approval, ask your organisation’s accounting officer for an exemption to use a standard that does not meet normal rules.
If you get an exemption
If you get an exemption, the open standards team will publish this information on the Standards Hub as long as it does not pose a threat to national security.
You can also contact the open standards team at CDDO for advice. Email [email protected].
- Last update:
-
Integrated guidance on Managing third-party product security risks.
-
Guidance first published