A reference architecture is a starting position, not a destination. It encodes a set of decisions someone else made for a generalised case: a topology, a service selection, a security baseline, and a set of assumptions about scale, regulation, and existing systems. The value is real, the decisions are usually sound for the case as stated, and the diagrams compress years of platform knowledge into a page. The danger is equally real: the case as stated is never your case, and the assumptions are silent. A banking architecture assumes a regulator; it does not assume your regulator. A retail architecture assumes a peak; it does not assume your peak.
This article closes our OCI by industry series by addressing the question every industry chapter raises: where do you actually start? The honest answer is that you start twice. Once with the part of the architecture that is the same for everyone, the landing zone, the network, identity, and the database layer, where reference designs should be followed closely because deviation buys nothing. And once with the part that is genuinely yours, the workload profile, the regulatory posture, and the integration map, where reference designs should be treated as a checklist of questions rather than a set of answers.
What a reference architecture gives you, and what it cannot
Published OCI reference architectures do three useful things. They name the services that fit a problem, which saves weeks of catalogue archaeology. They show topologies that are known to work, region and availability domain layout, network segmentation, the placement of Exadata, compute, and storage relative to each other. And they encode the security baseline, compartments, policies, encryption, and logging, that a greenfield team would otherwise assemble by trial and error.
What they cannot do is know your estate. A reference architecture has no opinion about your twenty year old billing schema, your interface map, your license position, or the fact that your peak load arrives on the last banking day of the month. It also carries a quiet bias: vendor published designs naturally showcase newer services, and a real migration usually wants the boring, proven path for the core and the newer services at the edges. Reading a reference architecture well means extracting the topology and the baseline while interrogating every service selection against your own constraints.
The core every industry shares
Across the twelve industries in this series, the foundation barely changes, and that is the most practical fact in the whole catalogue. Every estate needs a landing zone with compartment design that separates production from everything else, identity federated to the corporate directory, customer managed keys for anything sensitive, audit logging switched on everywhere, and a network design with private connectivity back to the data centres. Every Oracle heavy estate needs the same database decisions: Exadata or Base Database Service, BYOL verified before sizing, Data Guard topology matched to recovery objectives. And every estate needs the same operational scaffolding, monitoring, patching, backup verification, and cost governance, before the first workload arrives.
This shared core is where reference architectures should be followed most closely, because it is where originality has no payoff. A bespoke compartment model is not a competitive advantage; it is a future audit finding. The landing zone reference designs, applied with discipline and documented once, are the highest value pages in the catalogue for every industry without exception.
Where industries genuinely diverge
The divergence is real, but it is narrower than the marketing suggests, and it concentrates in three places: the defining workload, the regulatory posture, and the shape of the peak. The table below compresses the series into those three dimensions.
| Industry | Defining workload | What actually shapes the architecture |
|---|---|---|
| Banking | Core banking and payments on Oracle | Operational resilience rules, end of day close, DR evidence |
| Insurance | Policy admin and actuarial modelling | Burst compute for actuarial runs, decades of policy history |
| Healthcare | EHR hosting and clinical integration | PHI controls, availability during care delivery |
| Retail | Commerce and merchandising platforms | Peak trading events, elasticity with cost discipline |
| Manufacturing | ERP, MES, and plant analytics | The OT boundary, plant uptime, ERP consolidation |
| Public sector | Citizen services and records | Procurement, sovereignty, and accreditation regimes |
| Telecom | BSS, OSS, and usage rating | Usage record volume, billing windows, network adjacency |
| Utilities | CIS, meter data, outage systems | Storm elasticity, rate case scrutiny, NERC CIP boundary |
| Energy | Trading platforms and reservoir HPC | Risk run deadlines, burst HPC economics |
| Pharma | Clinical, safety, and quality systems | GxP validation scope, electronic record rules |
| Media | Rendering, streaming origin, archives | Egress economics, project burst rendering |
| SaaS providers | Multitenant platforms | Unit economics per tenant, isolation model |
Read down the third column and the pattern is visible: the differentiators are constraints, not services. The same Exadata serves the bank and the utility; what differs is whose deadline it must beat and whose auditor must be satisfied. This is why adapting a reference architecture is mostly an exercise in constraint mapping rather than service substitution, and why the industry articles in this series spend more words on regulators, windows, and boundaries than on product names.
A worked example: reading one diagram critically
Take a typical published design for a transactional Oracle application on OCI: two availability domains, an Exadata database with a Data Guard standby, application tier on compute behind a load balancer, FastConnect to the data centre, and a security baseline of compartments, keys, and logging. Applied to a regional insurer's policy administration estate, the constraint mapping runs like this. The defining workload is the policy database and its nightly batch, so the Exadata selection survives scrutiny, and the BYOL position decides the shape sizing. The regulatory posture demands evidence of recovery, so the Data Guard topology is kept but the recovery objectives are written against the insurer's own resilience commitments, not the diagram's defaults, which may mean promoting the standby to a second region rather than a second availability domain.
The shape of the peak is where the diagram bends furthest. The insurer's peak is not customer traffic; it is the quarterly actuarial run and the year end close, so the elastic capacity the reference design allocates to the web tier is quietly redirected to the analytics compartment, where the actuarial models actually burst. Two services in the published design fail the interrogation entirely: a streaming component that assumes event volumes the insurer will never produce, and a newer database service that would force a replatform the batch schedule cannot absorb. Both are struck, the boring path is kept, and the resulting design looks eighty percent like the reference and one hundred percent like the insurer. That ratio, most of the diagram surviving but every line of it interrogated, is what a healthy adaptation looks like in practice.
The failure patterns to avoid
Three failure patterns account for most of the reference architecture trouble we are asked to repair. The first is wholesale adoption: the diagram is implemented as specified, the silent assumptions arrive with it, and the estate discovers at its first real peak or first real audit that the generalised case was not its case. The second is the showcase trap: the design is assembled from the newest services in the catalogue because they appear in the freshest diagrams, and the core workload ends up on a path nobody has run at scale under that industry's constraints, with a revalidation or resilience bill attached. The third is foundation originality: the team treats the landing zone as a place to express opinions, builds a bespoke compartment and identity model, and pays for that creativity on every audit and every subsequent workload for years.
All three have the same root cause, which is skipping the constraint mapping, and the same cure, which is doing it in writing before any implementation begins. One page naming the defining workload, the regulatory posture, and the shape of the peak costs a morning. Each failure pattern above has cost the companies that hosted it a quarter or more of remediation, and in the audit heavy industries the cost is denominated in findings rather than time.
A seven step method for adapting a reference architecture
- Start from the estate, not the diagram. Inventory the workloads, the Oracle license position, the integration map, and the data classifications before opening the catalogue, because the inventory is the test every diagram must pass.
- Adopt the landing zone designs nearly verbatim. Compartments, identity, keys, logging, and network segmentation are the shared core; spend your deviation budget elsewhere.
- Name your three constraints. The defining workload, the regulatory posture, and the shape of the peak, written down in one page, decide which reference patterns apply and which silently assume someone else's business.
- Interrogate every service selection. For each component in the published design ask whether it earns its place against your constraints, and prefer the proven path for the core estate over the showcased path.
- Map the boundaries explicitly. Whatever does not move, OT layers, control systems, validated estates, sovereign data, gets a documented boundary and a one directional data flow before any migration sequencing.
- Sequence by dependency and calendar. Nonproduction and analytics first, the defining workload last, with cutovers timed against the business calendar the reference architecture knows nothing about.
- Validate the design against a real month. Price it against real volumes, walk it through the worst real day in recent memory, and present that evidence, not the diagram, for the decision.
Using this series alongside the catalogue
The twelve industry articles in this cluster are designed to supply what the published diagrams omit: the constraints. Each one spends its words on the things no diagram can carry, the regulator's expectations, the calendar the cutover must respect, the boundary that does not move, and the peak that defines the sizing. If you are starting an evaluation, read your own industry's article first, then the article of the structurally closest neighbour, because the comparison sharpens both. A bank should read OCI for banking alongside the insurance piece; a hospital group should read OCI for healthcare next to pharma; a retailer should read OCI for retail next to media and SaaS; an agency should read OCI for public sector next to banking, where the resilience patterns originate. The pillar page maps the full set.
Then take the adapted design through implementation with the discipline it deserves. A reference architecture that survives constraint mapping still has to be built, landing zone first, evidence trail from day one, and the defining workload moved last with its cutover rehearsed. That build discipline, from design workshop through go live, is what our OCI implementation practice exists for, and it is where the difference between a diagram and an estate becomes a matter of record. As an independent firm with 20+ years of combined Oracle experience, 500+ OCI engagements behind our patterns, and 24/7/365 managed operations after go live, we treat the published catalogue the way this article recommends: as excellent raw material that has never once been the finished answer.
Part of a series
This guide is part of OCI by Industry — our complete pillar guide on the topic.
Moving Oracle workloads to OCI, or already running on OCI and not sure the architecture or the spend is right? Most teams bring in a specialist before they commit to a region, a shape, or a Universal Credits number. OCISpecialists.com plans the landing zone, runs the migration, and manages the estate after go live, on a fixed project fee, a managed monthly retainer, or a cost optimization fee paid only on verified savings.