Data Flow Diagrams (DFD) Skill

Purpose

Visualize how data moves through a system. DFDs show what the system does with data, unlike Flowcharts which show control flow (sequence).

When to Use

• •Understanding legacy systems.
• •Analyzing data privacy (where does PII go?).
• •Designing integrations.
• •Security auditing (identifying trust boundaries).

DFD Notation (Gane & Sarson or Yourdon)

1. •Process (Circle/Rounded Rect): Transforms data.
   • •Format: Verb + Noun.
   • •Example: Calculate Tax, Validate User.
2. •External Entity (Square): Source or Sink of data (Outside scope).
   • •Example: Customer, Bank API, Admin.
3. •Data Store (Open Rectangle/Parallel Lines): Resting data.
   • •Example: Customer DB, Orders File.
4. •Data Flow (Arrow): Movement of data packets.
   • •Label: Order Details, Invoice.

DFD Levels

Level 0: Context Diagram

Scope: Entire System as ONE process. Shows: System boundary and interaction with external world.

Example:

graph LR
    Customer[Customer] -->|Order| System((Order Mgmt System))
    System -->|Invoice| Customer
    System -->|Payment Info| Bank[Bank]
    Bank -->|Confirmation| System
    Warehouse[Warehouse] -->|Stock Levels| System
    System -->|Shipping Request| Warehouse

Note: NO data stores are shown in Level 0 unless shared with external systems.

Level 1: System Breakdown

Scope: Breaks the "One Process" into major sub-processes (3-7 bubbles). Shows: Data stores used by these processes.

Example:

1. •Process 1.0: Validate Order
   • •Input: Order (from Customer)
   • •Output: Valid Order
2. •Process 2.0: Calculate Total
   • •Input: Valid Order + Price (from Product DB)
   • •Output: Total Amount
3. •Process 3.0: Process Payment
   • •Input: Total + Card Info
   • •Output: Receipt

Methodology Rules

1. •Conservation of Data: A process cannot create data from nothing (must have input). A process cannot consume data without output (black hole).
2. •No Direct Connections:
   • •Entity ↔ Entity (Out of scope)
   • •Entity ↔ Data Store (Must go through a process)
   • •Data Store ↔ Data Store (Must go through a process)
3. •Labeling: All arrows must be labeled with the data moving (not the action).

DFD vs. Flowchart

Creating a DFD in Steps

1. •Identify Entities: Who sends/receives data? (Customer, Manager, API).
2. •Identify Processes: What logical actions happen? (Check inventory, Save user).
3. •Identify Data Stores: Where is info kept? (Files, Tables).
4. •Draw Level 0: Connect Entities to "The System".
5. •Explode to Level 1: Break system into sub-processes.
6. •Verify: Check for data conservation and missing flows.

Best Practices

• •Keep it logical: Don't worry about physical implementation (e.g., "Paper file" vs "SQL DB" is irrelevant for logical DFD).
• •Number processes: 1.0, 2.0, 3.0. Sub-processes: 1.1, 1.2.
• •Limit complexity: If a level has > 7 processes, decompose further (Level 2).

Tools

• •Visio.
• •Lucidchart.
• •Draw.io.
• •Mermaid (Graph style).