\n
![\"Comprehensive](\"https:\/\/intellias.com\/wp-content\/uploads\/2020\/04\/agtb-info-1.jpg\")
<\/p>\nThe banking industry has existed for years and now operates in an archaic way, forcing customers to adapt to banking systems. This is in stark contrast to the service industry, where service providers must adapt to their customers\u2019 needs and expectations.<\/p>\n
Our client, a digital bank headquartered in Abu Dhabi, decided to reimagine their approach to banking by delivering a revolutionary solution for online banking services. This solution is built on multiple integrated components, consists of cloud-native and serverless applications, and has a profound data storage and orchestration layer.<\/p>\n
The bank aimed to scale. But before taking any steps in that direction, the executives requested a third-party opinion on the maturity of their existing processes, systems, practices, documentation, and policies. Additionally, to ensure all platform components worked flawlessly, it was important to assess their integration and configuration.<\/p>\n
As our client\u2019s infrastructure was to evolve, cybersecurity procedures and policies needed to be in place not only to protect data but to identify and alert about attempts at unauthorized access. To safeguard customer data, our client needed to evaluate the efficiency of their cybersecurity practices.<\/p>\n
In addition, our client wanted to define the extent to which best practices were implemented in their development and testing processes. They also requested an assessment of their business analysis processes, IT architecture concept, and production environment capacity in terms of compliance with industry standards and best practices.
\n<\/p>\n
Based on our client\u2019s requests and needs, Intellias assessed six project areas: IT architecture, business analysis processes, testing practices, DevOps practices, cybersecurity, and operational readiness.<\/p>\n
Our first step was to get familiar with the general context of the company, the vision for the product, and the product roadmap through interviews with stakeholders and focus groups, environment reviews, documentation, and process analysis. After identifying gaps and risks, Intellias experts developed recommendations based on our company\u2019s knowledge base, the judgment of our experts, and industry best practices. All findings were documented, analyzed, and presented to our client in separate yet connected reports for each assessed domain.<\/p>\n
Cloud optimization Business analysis processes<\/b> Quality assurance practices<\/b> DevOps practices<\/b> The outcome of this domain assessment is a clear vision of actions needed to make sure software deployment activities don\u2019t impact the business and customer experience. Additional benefits of this assessment included preventing the loss of sensitive data through source code and ensuring faster and safer releases by automating deployment and configuration management.<\/p>\n Cybersecurity<\/b> To assess all areas of cybersecurity, we looked to international industry standards: ISO\u202f22301, the OWASP Testing Guide, ISO\u202f27001, the NIST 800 series, ISO\u202f27002, and ISACA recommendations.<\/p>\n Operational readiness<\/b> The comprehensive technology assessment Intellias conducted laid the foundation for a high-quality digital banking service<\/a>. It also provided bank executives with a clear vision of functional areas that were underperforming, performing as required, and overperforming, thereby allowing them to efficiently allocate business resources.<\/p>\n Intellias experts assisted our client in determining the needs within their organization, prioritizing those needs by value, and making necessary changes. These transformations resulted in\ufffc the decreased risk of cost loss caused by insufficient or failed internal processes and systems, a lack of properly skilled people, and external events. This, in turn, will make investments more efficient and accelerate the bank\u2019s growth.<\/p>\n
\n<\/b>During the assessment, we discovered that the most performant serverless databases are with high speed and scalability. So the architecture concept was robust and mature, yet with refinement opportunities. Having analyzed all architecture components, we revealed the same configuration applied to all environments. While such an approach ensured fast processing, there were still some data that didn\u2019t need such sophisticated storages. The Intellias team defined what data could migrate to simpler storage without compromising performance and security. Plus, we developed the cloud optimization roadmap<\/a> that would make database service costs more efficient.<\/p>\n
\nIntellias recommendations helped to clarify our client\u2019s business needs and objectives, thus decreasing the probability of scope creep and the risk of rework. Our assessment also revealed space for improvement in terms of the structure, traceability, and prioritization criteria at the levels of business, stakeholder, and non-functional requirements. The provided assessment report showed ways to eliminate the risk of rework thanks to clearly defined requirements, outlined an end-to-end idea validation process, and increased involvement of Product Owners in the business analysis processes. All in all, we created a roadmap for achieving strong business processes to drive an effective strategy and rapid growth.<\/p>\n
\nAs our client\u2019s digital bank platform was built of multiple modules, our experts suggested improving traceability between tests and requirements as well as between tests and software defects, creating a simpler and more user-friendly test reporting solution that provides a single entry point to testing results for relevant stakeholders. We also suggested introducing integration testing to verify the correctness of interfaces between third-party solutions that comprise software architecture.<\/p>\n
\nTo assess DevOps practices, we used our Enterprise DevOps Maturity assessment matrix, which combines industry standards and Intellias expertise. The matrix is focused on six categories: build, deployment and environments, test and validation, release, reporting and metrics, and culture. It also defines requirements for five maturity levels: initiated, managed, defined, advanced, and optimizing.<\/p>\n
\nImplementing improvements suggested in our assessment report helped our client enhance their cybersecurity requirements for various processes and systems as well as reduce their dependence on third-party service providers. This also increased our client\u2019s awareness of system vulnerabilities and led to more precise planning of the resources needed to efficiently detect new vulnerabilities that may arise. Thus, the information security governance of the bank was strengthened.<\/p>\n
\nImplementing suggested improvements helped our client define a consistent problem management approach and formalize their release planning procedure. As a result, this procedure became transparent for all involved parties. Furthermore, our recommendations helped our client respond to incidents faster and more efficiently, increasing customer satisfaction and decreasing the time necessary to restore services.<\/p>\nBusiness outcome<\/h2>\n