How Chinese Securities Firms Reach Top DevOps Maturity: Key Insights from 2023‑2024 Assessments

Amid a broad digital‑transformation wave, Chinese enterprises are adopting DevOps to boost IT efficiency; the 2023 China DevOps Survey shows continued maturity growth, with 60% of firms reaching a comprehensive maturity level.

The China Information and Communication Technology Academy (CAICT) leads the "R&D Operations Integration (DevOps) Capability Maturity Model" series standards, which were formalised as ITU‑T Y.3525 in July 2020. Since the first assessment in 2018, the model has covered more than 20 industries and over a hundred enterprises by early 2024.

Agile Development Management (Standard 2) Compliance

China Merchants Securities became the first securities firm to pass the standard, demonstrating rapid iteration capacity, reduced defect rates, and a shift from waterfall to value‑flow delivery. Key outcomes include faster iteration capacity, shorter story‑to‑delivery cycles, and fewer defects.

Value‑fast flow through priority‑claim, WIP risk alerts, role conversion, continuous integration and release.

Quality assurance moved left with "Definition of Done" and test‑driven development.

Continuous Delivery (Standard 3) Compliance

Guoxin Securities – Jin‑Tai‑Yang Information Platform achieved the standard using a self‑developed micro‑service framework (Zebra) and the Simba R&D efficiency platform, cutting average delivery from 1.5 months to one week, raising unit‑test coverage from 40% to 84.39%, and achieving 100% automation success rates.

Dongguan Securities – Zhangzheng‑Bao Service Platform introduced a DevOps platform covering requirement, code, build, test, and deployment, reaching >60% existing unit‑test coverage, >80% incremental coverage, 100% success rates, and average daily integrations of 6.54 with mean red‑light fix time under 30 minutes.

Technical Operations (Standard 4) Compliance

Guoxin Securities – Jin‑Tai‑Yang Mobile APP & Qian‑Kun Centralised Operations Platform leveraged a self‑developed micro‑service architecture and private‑cloud deployment to achieve rapid, multi‑active, high‑availability operations, improving capacity management and reducing incident response times.

Security and Risk Management (Standard 6) Compliance

Guoxin Securities built a development security platform and intelligent security operation system, establishing a complete security monitoring and response framework that moves risk management toward automation, process‑orientation, tooling, and standardisation.

System and Tools (Standard 8) Compliance

China Merchants Securities – Tian‑Gong R&D Management Platform passed the DevOps System and Tools assessment for pipeline and continuous integration modules, providing end‑to‑end lifecycle management across 15+ R&D sub‑domains and supporting the firm’s digital transformation.

China International Capital Corp – DevOps Platform achieved an "Excellent" rating for its pipeline module, enabling automated end‑to‑end workflows from code commit to deployment and testing.

Guoxin Securities – Jin‑Tai‑Yang Information Platform reported over 1,600 万 registered users, 700 万 securities customers, and more than 50% of transaction volume, with the platform now fully micro‑service‑enabled and supporting high‑availability operations.

The model’s overall architecture spans agile development, continuous delivery, technical operations, security, system & tool integration, business value management, collaborative development, continuous testing, performance measurement, platform engineering, and reliability engineering.

For assessment inquiries, contact the CAICT representatives (email and phone provided in the original source).