FinDevSecOps

2023: Creation of FinDevSecOps

On October 12, 2023, the FinTech Association (AFL), together with the Moscow Exchange and key participants in the financial market, created an industry competence center (CC) for secure development - FinDevSecOps. The mission of the center is to create a community of specialists to exchange experience, implement open code methodologies and practices and secure development processes in the financial market.

The main objectives of the competence center are:

• Accelerate and simplify the implementation of secure development practices;
• Increase the security of the entire lifecycle of fintech solutions;
• Work with regulators to secure development and implement open source solutions.

Within the framework of the FinDevSecOps Central Committee, a knowledge base, a trusted code storage will be created, a single platform for communication of participants will be organized, as well as joint development and testing of industry-wide open source IT solutions. To place, store and verify open source solutions, it is planned to use the capabilities of the IT Solutions Repository for the financial industry created by the AFL, and the Central Committee's projects for the development of IT solutions based on open source software will be implemented on the AFL Technological Sandbox platform. At the FinDevSecOps Central Committee site, it is planned to hold regular meetings of participants in the format of mitapes and round tables, as well as organize case surveys and market research.

The implementation of DevSecOps practices allows organizations to optimize their costs for the development, implementation and operation of open source solutions, accelerate the launch of financial products on the market, and significantly reduce cyber risks. The creation of the FinDevSecOps Central Committee will contribute to improving the quality and security of IT solutions developed for the financial industry and, as a result, fulfilling the strategic task of achieving the required level of technological independence of financial organizations participating in the AFL, - said Oleg Morgun, head of the AFL technology development department.

FinDevSecOps is designed to be the platform where engineers and developers of the entire financial sector will exchange experience and best practices for secure development. This will help speed up their implementation for the entire industry, and make the implementation process as effective as possible for the market. We hope for the active and involved work of all community members, "said Karapet Manasyan, head of the MOEX Group production platform, leader of the FinDevSecOps program committee.