{"id":15685,"date":"2021-06-17T13:48:32","date_gmt":"2021-06-17T11:48:32","guid":{"rendered":"https:\/\/www.intellias.com\/?p=15685"},"modified":"2023-06-15T12:11:13","modified_gmt":"2023-06-15T10:11:13","slug":"devops-in-finance-best-practices-and-case-studies","status":"publish","type":"blog","link":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/","title":{"rendered":"DevOps in Finance: Best Practices and Case Studies"},"content":{"rendered":"<p>The financial services sector has had a mixed relationship with DevOps. Denial \u2014 <em>No, it\u2019s impossible<\/em>. Anger \u2014 <em>Why is it that everyone but us can do it?!<\/em> Bargaining \u2014 <em>Okay, maybe we should at least try CI\/CD?<\/em> Depression \u2014 <em>No, we are not making enough progress.<\/em> And, finally, acceptance \u2014 <em>Yes, the financial sector can do DevOps and do it well!<\/em> <\/p>\n<p>Financial businesses can do DevOps so well, in fact, that <a href=\"https:\/\/media.webteam.puppet.com\/uploads\/2020\/11\/Puppet-State-of-DevOps-Report-2020.pdf?_ga=2.109381701.1146703036.1620379914-130665616.1620379914\" target=\"\u201d_blank\u201d\" rel=\"noopener\">State of DevOps Report<\/a> by Puppet and CircleCI ranked financial services among the leaders in DevOps practice maturity, alongside tech industry players. <\/p>\n<p>Indeed, many FinTech and traditional financial companies have made admirable progress in DevOps adoption over the years. Because they are similar to tech players, companies in the financial sector have similar IT demands and constraints:<\/p>\n<ul>\n<li>Growing data volumes<\/li>\n<li>An expanding cross-channel presence<\/li>\n<li>Rapid rates of digitization<\/li>\n<li>Secure, low-latency data exchanges<\/li>\n<\/ul>\n<p>The difference is that many tech companies (at least the cloud-born ones) have headroom because they are starting from scratch. Traditional financial institutions have the baggage of legacy infrastructure as well as cultural resistance, which may slow down transformations.<\/p>\n<p>But the twenty twenties look to become decisive for plowing ahead with <a href=\"https:\/\/intellias.com\/aws-devops-services-with-intellias\/\">DevOps adoption<\/a>.  We can now observe the financial sector more and more utilizing AWS platform potential to build new capabilities and deliver meaningful business value. While doing so, the organizations have to balance their existing processes, systems, processes, and toolset in combo with the AWS DevOps culture of transformation while innovating at speed of market demands.<\/p>\n<h2>Why DevOps in finance is a priority <\/h2>\n<p>According to the <a href=\"https:\/\/www.atlassian.com\/whitepapers\/devops-survey-2020\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">Atlassian Survey 2020 \u2013 DevOps Trends<\/a>, 99% of respondents say DevOps has had a positive impact on their organization. That\u2019s a not-so-surprisingly nearly unanimous result.  <\/p>\n<p>At this point, the benefits of DevOps are well-described: <\/p>\n<ul>\n<li><b>Better release cadence.<\/b> Top DevOps teams deploy new code <a href=\"https:\/\/services.google.com\/fh\/files\/misc\/state-of-devops-2019.pdf\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">208 times<\/a> more frequently than WHOM.<\/li>\n<li><b>Faster deployments.<\/b> <a href=\"https:\/\/www.atlassian.com\/whitepapers\/devops-survey-2020\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">49%<\/a> of teams using DevOps report faster time to market for new applications.<\/li>\n<li><b>Increased reliability.<\/b> Mature adopters have a <a href=\"https:\/\/services.google.com\/fh\/files\/misc\/state-of-devops-2019.pdf\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">7X lower<\/a> rate of failure.<\/li>\n<li><b>Improved security and compliance<\/b> thanks to better-documented development and testing processes, plus clear frameworks for application governance, risk management, and security.<\/li>\n<\/ul>\n<p>Ultimately, the promise of DevOps for finance is that it will help your software teams get better at what they do \u2014 writing, testing, securing, and integrating new code \u2014 through better processes and supporting tools.<\/p>\n<p>So why now for DevOps?<\/p>\n<p>In one buzzword \u2014 digital transformation. Amidst the pandemic, many financial companies had to triple down on their digital service to meet consumers\u2019 shifting preferences. <a href=\"https:\/\/intellias.com\/how-to-sustainably-pursue-digital-banking-innovations-front-end-office-transformations\/\">Frontend transformations<\/a> such as <a href=\"https:\/\/intellias.com\/6-step-guide-to-creating-a-digital-account-opening-dao-system\/\">digital account opening<\/a>, KYC, mobile banking, online customer support, and self-service had to be done fast.  <\/p>\n<p>This major push for a better digital customer experience (CX) has had a ripple effect <a href=\"https:\/\/intellias.com\/modernizing-legacy-banking-systems-how-to-get-it-right\/\">on backend systems and supporting IT processes.<\/a> A growing digital footprint, stretching through on-premises software and the cloud, requires better cadence for managing new deployments, target infrastructure, and legacy cores integrated with new digital add-ons.  <\/p>\n<section class=\"testimonial-wrap testimonial-wrap--simple\">\n\t\t\t<blockquote class=\"testimonial-block\">\n\t\t\t\t<div class=\"testimonial-block__content\">\n\t\t\t\t<svg class=\"quote-icon\" width=\"75\" height=\"65\" viewBox=\"0 0 75 65\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path opacity=\".3\" fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M16 29.7h10c2.4 0 4.4.8 6.1 2.5a8.5 8.5 0 0 1 2.5 6.2v17.4c0 2.5-.8 4.5-2.5 6.2a8.2 8.2 0 0 1-6 2.6H8.7c-2.4 0-4.4-.9-6-2.6a8.5 8.5 0 0 1-2.6-6.2v-32A23 23 0 0 1 7 7.4 23.1 23.1 0 0 1 23.2.6H26a2.8 2.8 0 0 1 2.9 3v5.7c0 .8-.3 1.5-.9 2-.5.6-1.2 1-2 1h-2.8a11 11 0 0 0-8.2 3.3c-2.2 2.3-3.3 5-3.3 8.2v1.5c0 1.2.4 2.2 1.2 3 .9 1 1.9 1.4 3 1.4Zm49.9 0c2.4 0 4.4.8 6 2.5a8.5 8.5 0 0 1 2.6 6.2v17.4c0 2.5-.9 4.5-2.5 6.2a8.2 8.2 0 0 1-6.1 2.6H48.7c-2.4 0-4.5-.9-6.1-2.6a8.5 8.5 0 0 1-2.5-6.2v-32a23 23 0 0 1 6.7-16.4A23.1 23.1 0 0 1 63 .6h2.9c.7 0 1.4.3 2 .8.6.6.8 1.3.8 2v5.9c0 .8-.2 1.5-.8 2-.6.6-1.3 1-2 1H63a11 11 0 0 0-8.1 3.3c-2.2 2.3-3.4 5-3.4 8.2v1.5c0 1.2.4 2.2 1.3 3 .8 1 1.8 1.4 3 1.4h10Z\" fill=\"url(#a)\"\/><defs><linearGradient id=\"a\" x1=\".2\" y1=\"32.6\" x2=\"74.5\" y2=\"32.6\" gradientUnits=\"userSpaceOnUse\"><stop stop-color=\"#45D6AD\"\/><stop offset=\".5\" stop-color=\"#5DB6E1\"\/><stop offset=\"1\" stop-color=\"#BC84CA\"\/><\/linearGradient><\/defs><\/svg>\n\t\t\t\t\t<p>79% of banking executives agree there is a need to dramatically reengineer the experiences that bring technology and people together in a more human-centric way.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\t<small class=\"testimonial-block__footer\">\n\t\t\t\t\n\t\t\t\t\t<span class=\"testimonial-block__author\"><span class=\"author\"> <\/span> <span class=\"testimonial-block__position\">Accenture<\/span><\/span>\n\t\t\t\t<\/small>\n\t\t\t<\/blockquote>\n\t\t<\/section>\n<p>DevOps is a people, technology, and process equation aimed at finding the optimal cadence for managing, optimizing, and expanding software development capabilities in the context of overall IT services delivery. It\u2019s just the glue many financial teams need to bind together their product delivery services.<\/p>\n<h2>DevOps best practices for financial companies<\/h2>\n<p>While DevOps can offer fast results, the route to adoption may take several bends. In a <a href=\"https:\/\/www.atlassian.com\/whitepapers\/devops-survey-2020\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">survey by Atlassian<\/a>, over 85% of teams reported at least one roadblock to implementing DevOps:  <\/p>\n<ul>\n<li>Lack of skills\/knowledge among team members<\/li>\n<li>Legacy infrastructure<\/li>\n<li>Immature delivery culture<\/li>\n<\/ul>\n<p>The good news? These obstacles are manageable with some DevOps adoption guidance and a commitment to new ways of working. Here\u2019s a lowdown on the DevOps best practices for financial companies (with benefits and case studies).  <\/p>\n<h3>CI\/CD for finance\/financial institutions<\/h3>\n<p>CI\/CD stands for continuous integration and continuous delivery (or deployment). Continuous integration means that developers frequently integrate their code into the main branch. Every change to the application first passes a number of automated tests and only then gets into the build. This helps you avoid <a href=\"https:\/\/martinfowler.com\/articles\/originalContinuousIntegration.html\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">integration hell<\/a> and find problems in software early on.  <\/p>\n<p>What\u2019s more important, continuous integration makes continuous delivery possible. CD is a set of practices that speed up the software lifecycle. In other words, CD allows product releases to happen more frequently. It pushes the build to delivery environments. And just like CI, CD is a largely automated process that involves quantifiable risks. But continuous delivery doesn\u2019t necessarily mean continuous deployment. Putting the release into the hands of users is often still a manual process. By contrast, <a href=\"https:\/\/ieeexplore.ieee.org\/abstract\/document\/7884954\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">continuous deployment<\/a> is fully automated. Essentially, with continuous deployment, every update to the build gets into production right away. <\/p>\n<h3>Continuous integration, delivery, and deployment explained<\/h3>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/d17ocfn2f5o4rl.cloudfront.net\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-1-info.jpg\" alt=\"DevOps in Finance: Best Practices and Case Studies\" width=\"770\" height=\"450\" class=\"alignnone size-full wp-image-34905\" srcset=\"https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-1-info.jpg 770w, https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-1-info-300x175.jpg 300w, https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-1-info-768x449.jpg 768w\" sizes=\"(max-width: 770px) 100vw, 770px\" \/><\/p>\n<p>The business benefits of CI\/CD for finance: <\/p>\n<ul>\n<li><b>Faster time to market.<\/b> Automation means that more code gets deployed to production sans scheduled maintenance or other service disruptions.<\/li>\n<li><b>Flexibility and responsiveness.<\/b> CI\/CD lets you build fast and fail fast in a sandbox environment. This allows your teams to rapidly test products, troubleshoot bugs and integration issues, and release fully functional software rather than half-baked code.<\/li>\n<li><b>Increased productivity.<\/b> Implementing CI\/CD allows the development team to stay more productive. CI\/CD for FinTech eliminates rework and wait time. Thanks to the automation of routine processes, software developers can focus on other more crucial tasks, such as ensuring code quality and security.<\/li>\n<li><b>Product quality.<\/b> Since the development process is largely automated with CI\/CD, it\u2019s also more reliable. Errors are detected early in development and potential risks are calculated, making it easier for developers to control them.<\/li>\n<p><\/ui><\/p>\n<p>To sum up, continuous integration (CI) and continuous delivery (CD) for FinTech and financial institutions pave the way to faster, more stable, and more predictable code deployments. In essence, CI\/CD creates a step-by-step production line with quality checkpoints.  <\/p>\n<p>Capital One, one of the earliest DevOps adopters in finance, designed their <a href=\"https:\/\/www.capitalone.com\/tech\/software-engineering\/focusing-on-the-devops-pipeline\/\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">software pipelines<\/a> using the principle of \u201c16 Gates\u201d \u2014 checkpoints that help ensure top code quality. These include:<\/p>\n<ul>\n<li>Rigorous source code version control and optimum branching strategy<\/li>\n<li>Static code analysis<\/li>\n<li>Minimum acceptable code coverage of 80%<\/li>\n<li>Ongoing scans for vulnerabilities<\/li>\n<li>Artifact version control<\/li>\n<li>Automated resource provisioning<\/li>\n<li>Immutable servers<\/li>\n<li>Integration and performance testing<\/li>\n<li>Automated build deploy testing for every commit<\/li>\n<li>Automated rollback and change orders<\/li>\n<li>Zero-downtime releases<\/li>\n<li>Feature toggling<\/li>\n<\/ul>\n<p>This approach has enabled Capital One to reduce the time needed to build new application infrastructure by <a href=\"https:\/\/aws.amazon.com\/solutions\/case-studies\/capital-one-devops\/\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">over 99%<\/a>. Plus, it has significantly improved the company\u2019s software release timelines.<\/p>\n<h3>Continuous testing<\/h3>\n<p>Continuous testing (CT) is the process of introducing automated testing at different stages of the software development lifecycle to enhance end product quality. In other words, CT encourages you to test early, often, and fast.   <\/p>\n<p>Continuous testing accomplishes several things at once:<\/p>\n<ul>\n<li><b>Assesses risk coverage.<\/b> Learn which code is production-ready and which release candidates are not ready to move to the delivery pipeline (e.g. due to integration issues).<\/li>\n<li><b>Acts as a safety net.<\/b> Prevent subpar products from creeping into releases and undermining the user experience. Early bug detection also reduces bills for bug fixes.<\/li>\n<li><b>Ensures comprehensive coverage.<\/b> Test data and test cases are written in advance and always available for instant runs. CT also covers everything from \u201cshift left\u201d (e.g. unit and component testing to prevent costly debugging at later stages) to \u201cshift right\u201d (load testing, application performance monitoring, production testing, etc.) to ensure stable product performance, high failure tolerance, and a stellar customer experience.<\/li>\n<li><b>Augments product quality.<\/b> Mature teams run software tests at the right time and stage of the SDLC (without creating bottlenecks for other processes) and use the insights obtained from tests to improve code quality.<\/li>\n<\/ul>\n<p>To sum up, continuous testing encourages you to blend testing activities into your development process instead of postponing most till the last stage so that all produced code is covered by end-to-end tests from the get-go through deployment.  <\/p>\n<p>Mastering this \u201cshift left\u201d often requires not just better testing tools but more tectonic changes in QA processes and team mindsets. These can be challenging to execute. Here\u2019s some extra data to help you make your business case. <\/p>\n<section class=\"testimonial-wrap testimonial-wrap--simple\">\n\t\t\t<blockquote class=\"testimonial-block\">\n\t\t\t\t<div class=\"testimonial-block__content\">\n\t\t\t\t<svg class=\"quote-icon\" width=\"75\" height=\"65\" viewBox=\"0 0 75 65\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path opacity=\".3\" fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M16 29.7h10c2.4 0 4.4.8 6.1 2.5a8.5 8.5 0 0 1 2.5 6.2v17.4c0 2.5-.8 4.5-2.5 6.2a8.2 8.2 0 0 1-6 2.6H8.7c-2.4 0-4.4-.9-6-2.6a8.5 8.5 0 0 1-2.6-6.2v-32A23 23 0 0 1 7 7.4 23.1 23.1 0 0 1 23.2.6H26a2.8 2.8 0 0 1 2.9 3v5.7c0 .8-.3 1.5-.9 2-.5.6-1.2 1-2 1h-2.8a11 11 0 0 0-8.2 3.3c-2.2 2.3-3.3 5-3.3 8.2v1.5c0 1.2.4 2.2 1.2 3 .9 1 1.9 1.4 3 1.4Zm49.9 0c2.4 0 4.4.8 6 2.5a8.5 8.5 0 0 1 2.6 6.2v17.4c0 2.5-.9 4.5-2.5 6.2a8.2 8.2 0 0 1-6.1 2.6H48.7c-2.4 0-4.5-.9-6.1-2.6a8.5 8.5 0 0 1-2.5-6.2v-32a23 23 0 0 1 6.7-16.4A23.1 23.1 0 0 1 63 .6h2.9c.7 0 1.4.3 2 .8.6.6.8 1.3.8 2v5.9c0 .8-.2 1.5-.8 2-.6.6-1.3 1-2 1H63a11 11 0 0 0-8.1 3.3c-2.2 2.3-3.4 5-3.4 8.2v1.5c0 1.2.4 2.2 1.3 3 .8 1 1.8 1.4 3 1.4h10Z\" fill=\"url(#a)\"\/><defs><linearGradient id=\"a\" x1=\".2\" y1=\"32.6\" x2=\"74.5\" y2=\"32.6\" gradientUnits=\"userSpaceOnUse\"><stop stop-color=\"#45D6AD\"\/><stop offset=\".5\" stop-color=\"#5DB6E1\"\/><stop offset=\"1\" stop-color=\"#BC84CA\"\/><\/linearGradient><\/defs><\/svg>\n\t\t\t\t\t<p>Enterprises can save up to $7 million in operating costs over 3 years after adopting continuous testing. With the help of automation and test case number minimization, teams can also shave off 80% in execution efforts, resulting in $4 million cost savings in test case execution.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\t<small class=\"testimonial-block__footer\">\n\t\t\t\t\n\t\t\t\t\t<span class=\"testimonial-block__author\"><span class=\"author\"> <\/span> <span class=\"testimonial-block__position\">Forrester Total Economic Impact Study on Continuous Testing <\/span><\/span>\n\t\t\t\t<\/small>\n\t\t\t<\/blockquote>\n\t\t<\/section>\n<p>Furthermore, <a href=\"https:\/\/learn.broadcom.com\/forrester-tei-study-of-ca-continuous-testing\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">Forrester<\/a> indicates that teams with mature continuous testing practices:<\/p>\n<ol>\n<li>Minimize unplanned work by 28% and spend 50% less time on test case design<\/li>\n<li>Spend up to 80% less time on test case automation and execution<\/li>\n<li>Save up to $13 million in testing environment infrastructure costs<\/li>\n<li>Increase release management productivity by as much as 40%<\/li>\n<li>Reduce cut-over calls in critical code deployments from 8 hours to 30 minutes<\/li>\n<\/ul>\n<p>Forrester also reports that better requirements formalization \u2014 a positive side effect of CT \u2014 also reduces the volume of unnecessary QA work and increases team performance.  <\/p>\n<h3>Infrastructure as code (IaC)<\/h3>\n<p>Infrastructure as code (IaC) refers to the automated provisioning and management of infrastructure for new deployments so you can develop, test, deploy, and scale new cloud applications faster and with less risk.   <\/p>\n<p>Instead of programming configurations manually, your teams can automatically create and replicate the same environment each time they start a new project. IaC helps to ensure that all infrastructure configurations are well-documented, version-controlled, and homogenous, yet flexible \u2014 meaning you can divide your infrastructure into modular components to suit an array of projects while ensuring that all of them use the versioning the DevOps team uses for source code. <\/p>\n<p>IaC documents the full topology of your infrastructure \u2014 from networks and VMs to load balancers \u2014 and incorporates all steps required to configure the right environment to run your applications.  <\/p>\n<p>In short, infrastructure as code acts as scaffolding. In one click, you can build up the environment you need to develop and test new products.  <\/p>\n<p>Benefits of infrastructure as code for financial application development include:<\/p>\n<ul>\n<li><b>Faster development and deployment.<\/b> Having the ability to set up infrastructure on command accelerates team performance at every stage of the software development lifecycle. Your team can provision CI\/CD and testing environments in a matter of moments, plus streamline deployments since the application and production infrastructure are neatly packaged in one block.<\/li>\n<li><b>Consistent product quality.<\/b> The biggest issue with manual infrastructure provisioning is configuration drift: when your dev, testing, and deployment environments are mismatched. Ad-hoc configurations can cause issues during deployment and result in security vulnerabilities and non-compliance \u2014 the least desirable scenarios for finance.<\/li>\n<li><b>Enhanced testing.<\/b> IaC lets you test apps in a production-like environment at any stage of the SDLC. Doing so helps prevent common deployment issues caused by configuration drift, missing dependencies, or integrations.<\/li>\n<li><b>Cost optimization.<\/b> The <a href=\"https:\/\/intellias.com\/cloud-computing-vs-on-premises-comparison-guide\/\">cloud computing bill<\/a> can run high when left unattended. IaC helps contain resource consumption through targeted optimization and the dynamic provisioning and teardown of environments.<\/li>\n<\/ul>\n<p><b>Case in point:<\/b> <a href=\"https:\/\/www.mckinsey.com\/~\/media\/McKinsey\/Industries\/Financial%20Services\/Our%20Insights\/Next-gen%20technology%20transformation%20in%20financial%20services\/Next-gen-technology-transformation-in-financial-services.pdf\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">McKinsey<\/a> notes that one European bank managed to reduce the size of its IT infrastructure team by 45% after moving to standardized, automated infrastructure provisioning products. <\/p>\n<p>What do these infrastructure team members do now? Probably play in the automatically provisioned sandbox as Barclay\u2019s team does. Brian Simpson-Adkins, the product owner of IaC at Barkley\u2019s, has <a href=\"https:\/\/www.hashicorp.com\/resources\/terraform-enterprise-chef-enable-cd-barclays\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">shared<\/a> how IaC has helped Barkley\u2019s get better at innovation without breaking any regulatory barriers: <\/p>\n<section class=\"testimonial-wrap testimonial-wrap--simple\">\n\t\t\t<blockquote class=\"testimonial-block\">\n\t\t\t\t<div class=\"testimonial-block__content\">\n\t\t\t\t<svg class=\"quote-icon\" width=\"75\" height=\"65\" viewBox=\"0 0 75 65\" fill=\"none\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path opacity=\".3\" fill-rule=\"evenodd\" clip-rule=\"evenodd\" d=\"M16 29.7h10c2.4 0 4.4.8 6.1 2.5a8.5 8.5 0 0 1 2.5 6.2v17.4c0 2.5-.8 4.5-2.5 6.2a8.2 8.2 0 0 1-6 2.6H8.7c-2.4 0-4.4-.9-6-2.6a8.5 8.5 0 0 1-2.6-6.2v-32A23 23 0 0 1 7 7.4 23.1 23.1 0 0 1 23.2.6H26a2.8 2.8 0 0 1 2.9 3v5.7c0 .8-.3 1.5-.9 2-.5.6-1.2 1-2 1h-2.8a11 11 0 0 0-8.2 3.3c-2.2 2.3-3.3 5-3.3 8.2v1.5c0 1.2.4 2.2 1.2 3 .9 1 1.9 1.4 3 1.4Zm49.9 0c2.4 0 4.4.8 6 2.5a8.5 8.5 0 0 1 2.6 6.2v17.4c0 2.5-.9 4.5-2.5 6.2a8.2 8.2 0 0 1-6.1 2.6H48.7c-2.4 0-4.5-.9-6.1-2.6a8.5 8.5 0 0 1-2.5-6.2v-32a23 23 0 0 1 6.7-16.4A23.1 23.1 0 0 1 63 .6h2.9c.7 0 1.4.3 2 .8.6.6.8 1.3.8 2v5.9c0 .8-.2 1.5-.8 2-.6.6-1.3 1-2 1H63a11 11 0 0 0-8.1 3.3c-2.2 2.3-3.4 5-3.4 8.2v1.5c0 1.2.4 2.2 1.3 3 .8 1 1.8 1.4 3 1.4h10Z\" fill=\"url(#a)\"\/><defs><linearGradient id=\"a\" x1=\".2\" y1=\"32.6\" x2=\"74.5\" y2=\"32.6\" gradientUnits=\"userSpaceOnUse\"><stop stop-color=\"#45D6AD\"\/><stop offset=\".5\" stop-color=\"#5DB6E1\"\/><stop offset=\"1\" stop-color=\"#BC84CA\"\/><\/linearGradient><\/defs><\/svg>\n\t\t\t\t\t<p>Where does a developer play with software? We\u2019ve created a sandpit area that\u2019s fenced off from our core network so that developers can download stuff and have a play with it. If they like it, then they can go through the process to get it into the bank.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\t<small class=\"testimonial-block__footer\">\n\t\t\t\t\n\t\t\t\t\t<span class=\"testimonial-block__author\"><span class=\"author\">Brian Simpson-Adkins, <\/span> <span class=\"testimonial-block__position\">product owner of IaC at Barkley\u2019s<\/span><\/span>\n\t\t\t\t<\/small>\n\t\t\t<\/blockquote>\n\t\t<\/section>\n<p>Such an approach has allowed the heritage financial institution with operations in 40 countries to remain compliant while also being up-to-speed with adopting emerging technologies and responding to shifting customer demands.<\/p>\n<h3>DevSecOps<\/h3>\n<p>DevSecOps is a newer trend in town that mature financial organizations are now eager to explore.  <\/p>\n<p>Short for development, security, and operations, DevSecOps is aimed at infusing automated security best practices at every stage of the SDLC, from design to deployment.<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/d17ocfn2f5o4rl.cloudfront.net\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-2-info.jpg\" alt=\"DevOps in Finance: Best Practices and Case Studies\" width=\"770\" height=\"620\" class=\"alignnone size-full wp-image-34908\" srcset=\"https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-2-info.jpg 770w, https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-2-info-300x242.jpg 300w, https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-2-info-768x618.jpg 768w\" sizes=\"(max-width: 770px) 100vw, 770px\" \/><\/p>\n<p><em>Source: McKinsey \u2014 <a href=\"https:\/\/www.mckinsey.com\/business-functions\/mckinsey-digital\/our-insights\/agile-reliable-secure-compliant-it-fulfilling-the-promise-of-devsecops\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">Agile, reliable, secure, compliant IT: Fulfilling the promise of DevSecOps<\/a><\/em> <\/p>\n<p>Similar to continuous testing, DevSecOps encourages the development team to incorporate security continuously into every iteration instead of treating it as an afterthought. DevSecOps helps ensure that deployment-ready software meets all compliance, reliability, and security requirements.  <\/p>\n<p>It\u2019s no secret that the financial industry is a prime target for cyber attacks \u2014 to the extent that financial services providers <a href=\"https:\/\/www.kaspersky.com\/blog\/how-the-financial-industry-reacts-to-cyberthreats\/6610\/\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">spend three times more<\/a> on cybersecurity compared to other businesses. While DevSecOps cannot fully replace proactive security measures, this movement helps ensure you are not leaving any loose ends an attacker might explore. In addition, DevSecOps promotes the establishment of automated governance and compliance in the development process \u2014 something <a href=\"https:\/\/www.sonatype.com\/hubfs\/Whitepaper-2020%20DevSecOps%20Community%20Survey\/DevSecOps%20Community%20Survey-Financial%20Vertical.pdf\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">63%<\/a> of mature DevSecOps teams in the financial sector already do.  <\/p>\n<p>The World Bank Group recently set a <a href=\"https:\/\/blog.sonatype.com\/the-world-bank-groups-cloud-journey-with-devsecops\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">course for DevSecOps<\/a> after successful adoption and scaling of the underlying DevOps practices. They broke down the adoption into two acts: <\/p>\n<ul>\n<li><b>Act I:<\/b> First, the team decided to automate cloud security testing. After assessing different scenarios, the team managed to automate over 400 security decisions. However, automation didn\u2019t eliminate operational security support. The DevSecOps team remained in charge of security monitoring and response.<\/li>\n<li><b>Act II:<\/b> Next, the financial institution decided to codify security controls for their infrastructure as code using the AWS Service Catalog.<\/li>\n<\/ul>\n<p>Finally, they combined the above practices into a secure pipeline built to match their operational and security requirements:<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/d17ocfn2f5o4rl.cloudfront.net\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-3-info.jpg\" alt=\"DevOps in Finance: Best Practices and Case Studies\" width=\"770\" height=\"760\" class=\"alignnone size-full wp-image-34911\" srcset=\"https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-3-info.jpg 770w, https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-3-info-300x296.jpg 300w, https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-3-info-768x758.jpg 768w, https:\/\/intellias.com\/wp-content\/uploads\/2019\/04\/bp-devops-in-finance-3-info-90x90.jpg 90w\" sizes=\"(max-width: 770px) 100vw, 770px\" \/><\/p>\n<p><em>Source: Sonatype \u2014 <a href=\"https:\/\/blog.sonatype.com\/the-world-bank-groups-cloud-journey-with-devsecops\" target=\"\u201d_blank\u201d\" rel=\"noopener noreferrer\">The World Bank Group\u2019s Cloud Journey with DevSecOps presentation<\/a><\/em><\/p>\n<p>Ultimately, the World Bank Group plans to move towards pipeline as code as well as security as code approaches to further strengthen their product security.<\/p>\n<h2>Why DevOps on AWS is THE choice<\/h2>\n<p>An always newfangled AWS platform makes the shift from the old-school gatekeeping to modern integrations that lead to secure financial management practices in perspective. The AWS has proven its capabilities in the real world, from optimized banking ops to security-sensitive payment services, to capital markets enablement to new level of insurance agility.  <\/p>\n<p>According to Statista, Amazon Web Services (AWS) dominates the DevOps market, with a 40% market share and is expected to remain the DevOps market leader in the coming years. <\/p>\n<p>Moving behind the scenes of business operations, productivity at speed, quality at scale and time to market \u2013 modern technology ecosystem does not accept the term \u2018compromise\u2019. Yesterday\u2019s digital product release can\u2019t be today\u2019s buggy snag, because tomorrow\u2019s new feature release is already in the pipeline. <\/p>\n<p>The adoption of DevOps on AWS model reaches far beyond cost optimization; nowadays it is a combination of timely software delivery, system\u2019s reliability, scalability, top security and improved cross-team collaboration.  <\/p>\n<p>Implementing DevOps on AWS enables automation at scale which powers finance teams to deliver new applications and features to market and respond to customer-driven sector\u2019s   dynamics faster. With AWS platform\u2019s superpowers in security-by-default features, DevOps and AWS DevSecOps teams leverage cloud-based infrastructure to maintain integrity of sensitive financial data, confidentiality and compliance with regulations. Collaboration is the very core of DevOps culture, when combined with developed network and AWS community, it encourages even deeper cooperation and agility between technology and business helping to break down silos and improve workflows for better business outcomes.<\/p>\n<h3>DevOps tools in the finance industry<\/h3>\n<p>Many think that tool adoption is the key to a successful DevOps transition. Yes and no.  <\/p>\n<p>Indeed, DevOps tools can deliver much-needed automation and repeatability \u2014 the key principles of DevOps. But the best software will fall short if it doesn\u2019t support the respective operational processes described above.  <\/p>\n<p>Once you\u2019ve set the above on the rails, you can start cherry-picking the missing tools in your chain. Some common tools include: <\/p>\n<ul>\n<li>Version control and source code management tools<\/li>\n<li>CI\/CD automation servers such as Jenkins, TeamCity, Bamboo, or GitLab CI\/CD<\/li>\n<li>Continuous testing tools such as Selenium, Appium, and Test Sigma<\/li>\n<li>Automated release and deployment tools (pipelines)<\/li>\n<li>Infrastructure as code tools for IT infrastructure automation (Puppet, Chef)<\/li>\n<li>Containerization and virtualization tools such as Docker, Kubernetes, and Vagrant<\/li>\n<li>Workload orchestration and scheduling tools<\/li>\n<\/ul>\n<div><a href=\"https:\/\/intellias.com\/it-automation-platform-orchestration\/\" class=\"cta-wrap \">\n                    <div class=\"left-col\">\n                        <p class=\"cta-title\">Read more about platform orchestration and its role in DevOps<\/p>\n                        <div class=\"cta-block__content\">\n                            <div class=\"description\"><\/div>\n                        <\/div>\n                    <\/div>\n                     <span class=\"btn-filled\">Read more<\/span>\n\t\t        <\/a><\/div>\n<h2>How to approach DevOps adoption?<\/h2>\n<p>DevOps is a cultural shift, requiring targeted action and dedication. First and foremost, DevOps is a practice that requires paced changes in how your teams approach software development, testing, security, and delivery.  <\/p>\n<p>Without strong Agile practices, adoption will likely stall. But then again, a rapid and imposed shift to the Agile way of doing things may not drive immediate results.  <\/p>\n<p>Choose your battles. Start small and adopt one best practice at a time. Begin with introducing CI\/CD and polish your baseline act. Then consider adding a greater degree of automated testing and self-service infrastructure provisioning. Assess and iterate on your performance and foster further improvements. DevOps isn\u2019t a destination \u2014 it\u2019s a journey.<\/p>\n<hr>\n<p><em><a href=\"https:\/\/intellias.com\/contact\/\">Contact Intellias DevOps practitioners<\/a> to receive preliminary guidance on DevOps adoption and more insights on how financial institutions can rethink their approach to software development.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>DevOps is no longer a buzzword for the financial sector but rather a tested path toward a better customer experience, compliance, and security <\/p>\n","protected":false},"author":6,"featured_media":56968,"template":"","class_list":["post-15685","blog","type-blog","status-publish","has-post-thumbnail","hentry","blog-category-cloud-devops","blog-category-digital-banking","blog-category-financial-services-and-insurance"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.4 (Yoast SEO v23.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>DevOps in finance: Best practices and case studies - Intellias Blog<\/title>\n<meta name=\"description\" content=\"Learn how to approach the adoption of DevOps in finance \u2014 including details of CI\/CD, continuous testing, IaC, and DevSecOps best practices \u2014 with examples from top banks.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DevOps in Finance: Best Practices and Case Studies\" \/>\n<meta property=\"og:description\" content=\"Learn how to approach the adoption of DevOps in finance \u2014 including details of CI\/CD, continuous testing, IaC, and DevSecOps best practices \u2014 with examples from top banks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/\" \/>\n<meta property=\"og:site_name\" content=\"Intellias\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-15T10:11:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/d17ocfn2f5o4rl.cloudfront.net\/wp-content\/uploads\/2021\/06\/BP-DevOps-in-Finance_-Best-Practices-and-Case-Studies-smm-featured-im.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/BP-DevOps-in-Finance_-Best-Practices-and-Case-Studies-smm-featured-im.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"14 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/\",\"url\":\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/\",\"name\":\"DevOps in finance: Best practices and case studies - Intellias Blog\",\"isPartOf\":{\"@id\":\"https:\/\/intellias.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/DevOps-in-Finance_-Best-Practices-and-Case-Studies_.jpg\",\"datePublished\":\"2021-06-17T11:48:32+00:00\",\"dateModified\":\"2023-06-15T10:11:13+00:00\",\"description\":\"Learn how to approach the adoption of DevOps in finance \u2014 including details of CI\/CD, continuous testing, IaC, and DevSecOps best practices \u2014 with examples from top banks.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/#primaryimage\",\"url\":\"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/DevOps-in-Finance_-Best-Practices-and-Case-Studies_.jpg\",\"contentUrl\":\"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/DevOps-in-Finance_-Best-Practices-and-Case-Studies_.jpg\",\"width\":1920,\"height\":600},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/intellias.com\/#website\",\"url\":\"https:\/\/intellias.com\/\",\"name\":\"Intellias\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/intellias.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/intellias.com\/#\/schema\/person\/7d2c47acfb66ddd0740b02cba383c3da\",\"name\":\"Oleksii Vyshnyk\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"DevOps in finance: Best practices and case studies - Intellias Blog","description":"Learn how to approach the adoption of DevOps in finance \u2014 including details of CI\/CD, continuous testing, IaC, and DevSecOps best practices \u2014 with examples from top banks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/","og_locale":"en_US","og_type":"article","og_title":"DevOps in Finance: Best Practices and Case Studies","og_description":"Learn how to approach the adoption of DevOps in finance \u2014 including details of CI\/CD, continuous testing, IaC, and DevSecOps best practices \u2014 with examples from top banks.","og_url":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/","og_site_name":"Intellias","article_modified_time":"2023-06-15T10:11:13+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/d17ocfn2f5o4rl.cloudfront.net\/wp-content\/uploads\/2021\/06\/BP-DevOps-in-Finance_-Best-Practices-and-Case-Studies-smm-featured-im.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_image":"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/BP-DevOps-in-Finance_-Best-Practices-and-Case-Studies-smm-featured-im.jpg","twitter_misc":{"Est. reading time":"14 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/","url":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/","name":"DevOps in finance: Best practices and case studies - Intellias Blog","isPartOf":{"@id":"https:\/\/intellias.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/#primaryimage"},"image":{"@id":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/#primaryimage"},"thumbnailUrl":"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/DevOps-in-Finance_-Best-Practices-and-Case-Studies_.jpg","datePublished":"2021-06-17T11:48:32+00:00","dateModified":"2023-06-15T10:11:13+00:00","description":"Learn how to approach the adoption of DevOps in finance \u2014 including details of CI\/CD, continuous testing, IaC, and DevSecOps best practices \u2014 with examples from top banks.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/intellias.com\/the-pros-and-cons-of-ci-cd-for-fintech\/#primaryimage","url":"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/DevOps-in-Finance_-Best-Practices-and-Case-Studies_.jpg","contentUrl":"https:\/\/intellias.com\/wp-content\/uploads\/2021\/06\/DevOps-in-Finance_-Best-Practices-and-Case-Studies_.jpg","width":1920,"height":600},{"@type":"WebSite","@id":"https:\/\/intellias.com\/#website","url":"https:\/\/intellias.com\/","name":"Intellias","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/intellias.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/intellias.com\/#\/schema\/person\/7d2c47acfb66ddd0740b02cba383c3da","name":"Oleksii Vyshnyk"}]}},"_links":{"self":[{"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/blog\/15685"}],"collection":[{"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/users\/6"}],"version-history":[{"count":12,"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/blog\/15685\/revisions"}],"predecessor-version":[{"id":60996,"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/blog\/15685\/revisions\/60996"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/media\/56968"}],"wp:attachment":[{"href":"https:\/\/intellias.com\/wp-json\/wp\/v2\/media?parent=15685"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}