EPRI: Electric Power Research Institute

Software Development

Subscriber Website (SWS) Development Requirements

For existing SWS sites:

To submit a Web Content Promotion request, please submit the SWS Promotion request e-mail form.

To submit a Database Requests (Restore, Back Up, or Run a Script), please submit the SWS Database request e-mail form.

For new SWS sites:

For developing a new SWS site, follow the steps below.

  1. Obtain URL and Design Approvals
  2. EPRI project manager must obtain approvals from:

  3. EPRI Branding Requirements
  4. All web applications are hosted on EPRI.com, must meet:

    And be compatible with:

    • Microsoft Windows 7, Windows 8.1, Windows 10
    • Microsoft Internet Explorer
    • Mozilla Firefox
    • Google Chrome
    • Applications designed for Mobile must clearly document the supported operating systems (iOS 4.x/5.x Android 2.x/3.x/4.x etc.) and platforms – phone/tablet and optimal display dimensions.

    Web applications must meet applicable EPRI product requirements (e.g., Corporate, Documentation, test Cases, etc.).

  5. Kick-off Meeting and Compatibility Requirements
  6. Once URL and design approvals are obtained, forward the approvals to SQA along with a completed Web Application Kick-off Meeting Checklist (145 KB). Once received, SQA will schedule a meeting to review the checklist and begin the development process.

    For guidance on working with IT-SQA to make the web application functional on EPRI.com, use the Web Application Integration and Planning Checklist (90 KB).

    Subscriber Website must be compatible on the following stack:

    • Microsoft Windows Server 2008 R2
    • Microsoft Internet Information Server 7.5
    • Microsoft .NET Framework 4.5.2
    • Microsoft SQL Server 2008 R2

    Supported programming languages:

    • All .NET programming languages (C#, VB.NET, etc.)
    • JavaScript
    • Python*

    *Note: Environment for Python-driven SWS must be discussed with SQA prior to starting development. Pre-requisites and other dependencies may require approval from IT Management.

  7. Security Requirements
  8. All web applications are tested for and must meet the requirements of the Open Web Application Security Project (OWASP) Application Security Verification Standard (ASVS) Project

    Download the OWASP ASVS 2009 Web Application Standard Release (2.25 MB) for standards and requirements.

    When submitting the web application to SQA for testing, submit documentation (i.e., word document or spreadsheet, etc.) describing how the web application addresses OWASP ASVS security requirements.

  9. SQA Testing and Promotion
  10. To request an SQA test (e.g., Pre-Production (Beta) or Production (Final)), submit the Testing Submittal Package, which must include the SWS Promotion Checklist (80 KB).

    Reminder: SWS Developers must submit their code by checking it in to the DEV branch of their GitLab repository. For more information regarding GitLab, send a message to SQA@epri.com.