How to Start a DevOps Continuous Delivery Transformation in Financial Services
January 08, 2016

Derek Langone
XebiaLabs

DevOps is difficult to define, but is almost always considered to be a complicated mix of processes, people, and tools. For DevOps to succeed, teams must work in harmony with their processes and tools, and most importantly, share common goals.

In the field of financial services, transitioning to DevOps can be especially challenging for two main reasons. First, there is a strict separation of Development and Operations, a situation that inhibits but does not prevent the successful adoption of DevOps. The separation revolves around the notion that it is risky to allow developers to gain access to the production-side of the house ­ and to allow operations people to tinker with software development.

Secondly, there is the conservative, reactive mind-set that is endemic in the industry. Many executives and IT people believe that the software and hardware environments of financial services, companies particularly banks, are not compatible with DevOps.

Their arguments mostly focus on: the plethora of legacy-based mainframe applications that have run unaltered for years and do not need to be changed; and the industry-specific processes (such as automatic cash dispensing) that do not easily integrate with new software.

These outdated opinions are causing many financial services companies to fall behind their more nimble competitors that are offering flexible ways for consumers to interact with their firms and transact business. Releasing features and applications more efficiently and in a standardized way across platforms is becoming necessary for survival.

Enough with the challenges. Here are some practical ways for financial services companies and many other organizations to embrace DevOps successfully.

1. Keep Your Eye on the Business Drivers

Make sure that your transformation is driven by a critical business need such as keeping ahead of competitors, delivering better software faster to customers, reaching new markets, or improving business processes, or some combination of the above.

Don’t get bogged down in strictly Dev or Op concerns, such as reducing production incidents, cutting security incursions, or speeding up the time spent on testing.

2. Start Small with a Pilot Project and Measurable Goals

DevOps is a process that is best implemented in digestible and measurable bites. Focus on one application that will allow you to get up and running quickly. This is particularly vital in a large enterprise that requires large groups of people to work together to develop, qualify and deploy code.

Create a plan that all interested parties can contribute to and that unites the different IT groups.

Set some clear and realistic goals. Don't worry too much about whether those goals are in line with one particular philosophy of software development or another. However, bear in mind that you need to achieve your goals without negatively affecting the experiences of your customers and/or incurring serious financial loss.

Your success will depend on: taking baby steps; getting the right tools and infrastructure in place; and creating a test environment that enables the team to build, test, and deliver small apps or features that work in production.

3. Get Senior Execs on Board As Early as Possible

To move your plan forward to the next app, the next process or the next department, you will need to get leadership buy-in to make it happen quickly and smoothly and with the appropriate funding. You will need C-level support because the cost will rise relative to the changes you want to make.

The key here is to recognize that moving to DevOps is an organizational challenge that can only be solved with the participation of senior management.

To sell the concept of DevOps to senior management, people need to sell the business benefits first, and the technology ones second. A successful example of moving a single application to DevOps is an easy way to demonstrate benefits to senior management.

The business benefits to highlight are: improved processes, lower costs, faster time to market, and better software for end-users. Those benefits can only be achieved by leveraging best-of-breed DevOps practices; and using tools that facilitate the continuous delivery of software while giving instant, transparent visibility and control to all involved.

4. Involve Mid-Level Managers – It’s Vital

In most large-scale transformations, IT management and C-level management often overlook the value of engaging middle-level management. Big mistake.

Middle-level managers are the vital communications link between C-level execs and lower-level managers and non-management people. They can share the business and technical objectives of the transformation plan into language that lower-level managers and employees can easily understand.

But, even more importantly, they can play the role of investigative reporters by: asking tough questions of people at every level, exploring issues, and connecting the dots between the planned technology transformation and business objectives.

Fundamentally, middle-level managers are ideally positioned to remove organizational barriers, and to work with the executive team to prioritize issues to accelerate the adoption of DevOps throughout the organization.

5. Enforcing the Vision is a Team Sport

Naysayers will claim that making the move to continuous delivery is not easy. There are too many complicated factors, too many processes and tools, too many regulatory mandates. In many ways they are correct, but for many financial services companies, the move to DevOps has quickly gone from optional to necessary.

Moving an enterprise incrementally to an Agile and DevOps aligned process is one of the most impactful IT investments that can be made. The speed, quality and compliance gains that will be realized are massive. However, team commitment, clear goals and a willingness to take a step by step approach, are critical considerations for success.

The good news is that all of these items are well within the control of the IT organization and a wealth of knowledge and tools are now available to play the right supporting role.

Derek Langone is CEO of XebiaLabs.

Derek Langone is CEO of XebiaLabs
Share this

Industry News

May 01, 2024

Amazon Web Services (AWS) announced the general availability of Amazon Q, a generative artificial intelligence (AI)-powered assistant for accelerating software development and leveraging companies’ internal data.

May 01, 2024

Red Hat announced the general availability of Red Hat Enterprise Linux 9.4, the latest version of the enterprise Linux platform.

May 01, 2024

ActiveState unveiled Get Current, Stay Current (GCSC) – a continuous code refactoring service that deals with breaking changes so enterprises can stay current with the pace of open source.

May 01, 2024

Lineaje released Open-Source Manager (OSM), a solution to bring transparency to open-source software components in applications and proactively manage and mitigate associated risks.

May 01, 2024

Synopsys announced the availability of Polaris Assist, an AI-powered application security assistant on the Synopsys Polaris Software Integrity Platform®.

April 30, 2024

Backslash Security announced the findings of its GPT-4 developer simulation exercise, designed and conducted by the Backslash Research Team, to identify security issues associated with LLM-generated code. The Backslash platform offers several core capabilities that address growing security concerns around AI-generated code, including open source code reachability analysis and phantom package visibility capabilities.

April 30, 2024

Azul announced that Azul Intelligence Cloud, Azul’s cloud analytics solution -- which provides actionable intelligence from production Java runtime data to dramatically boost developer productivity -- now supports Oracle JDK and any OpenJDK-based JVM (Java Virtual Machine) from any vendor or distribution.

April 30, 2024

F5 announced new security offerings: F5 Distributed Cloud Services Web Application Scanning, BIG-IP Next Web Application Firewall (WAF), and NGINX App Protect for open source deployments.

April 29, 2024

Code Intelligence announced a new feature to CI Sense, a scalable fuzzing platform for continuous testing.

April 29, 2024

WSO2 is adding new capabilities for WSO2 API Manager, WSO2 API Platform for Kubernetes (WSO2 APK), and WSO2 Micro Integrator.

April 29, 2024

OpenText™ announced a solution to long-standing open source intake challenges, OpenText Debricked Open Source Select.

April 29, 2024

ThreatX has extended its Runtime API and Application Protection (RAAP) offering to provide always-active API security from development to runtime, spanning vulnerability detection at Dev phase to protection at SecOps phase of the software lifecycle.

April 29, 2024

Canonical announced the release of Ubuntu 24.04 LTS, codenamed “Noble Numbat.”

April 25, 2024

JFrog announced a new machine learning (ML) lifecycle integration between JFrog Artifactory and MLflow, an open source software platform originally developed by Databricks.

April 25, 2024

Copado announced the general availability of Test Copilot, the AI-powered test creation assistant.