How Guotai Junan Achieved Top‑Tier DevOps Technical Operations Standards

Background and Motivation

According to a McKinsey study, technology companies succeed by focusing on two key factors: standardization and tool empowerment. Standards encapsulate best practices, and embedding them in tools helps teams deliver higher value.

2021 GOLF+ IT New Governance Leadership Forum

Held on December 24, the forum, organized by the China Academy of Information and Communications Technology (CAICT), explored "Balancing Governance and Effectiveness to Build a New Ecosystem for Technology Governance" and "XOPS Innovation to Lead Operations Development".

DevOps Technical Operations Standard Evaluation

CAICT announced the fifth batch of DevOps technical operations assessment results. Guotai Junan Securities (GTJA) became the first securities firm to achieve the DevOps Technical Operations 2+ level, confirming its alignment with CAICT’s DevOps principles.

Interview Highlights

Zeng Hongxiang (Data Center General Manager) explained that under the "Three‑Year‑Three‑Step" strategy, GTJA launched a comprehensive digital transformation focusing on growth, efficiency, experience, and security, and introduced the "SMART Investment Bank" vision.

Yu Feng (Chief Information Officer) emphasized that digital transformation must integrate technology, data, processes, and organization, combining top‑down customer‑centric initiatives with bottom‑up technology enablement.

Mao Mengfei (Deputy General Manager) described the intelligent operation management system built on big data, algorithms, data governance, and a middle‑platform architecture, providing unified monitoring, log analysis, capacity management, and automated cost recommendations.

Project Overview: Third‑Party Transaction Access Gateway System

The evaluated project is a third‑party transaction access gateway that unifies trading across spot, margin, and options, supports seamless switching between multiple trading desks, and implements centralized access control, enhancing stability, speed, and functionality for institutional clients.

Assessment Process and Improvements

Identified 7 capability domains and over 150 improvement points.

Cost Management: Developed a model linking capacity objects, cost items, and metrics, enabling automated scaling recommendations.

Emergency Command & ITSM Integration: Connected emergency command systems with ITSM to streamline incident handling and pre‑plan updates.

Full‑Link Monitoring: Added business‑chain drill‑down to trace single‑call latency, linking performance to resource consumption.

Future Plans

GTJA intends to extend the DevOps 2+ standards to other core systems, deepen capability levels, and continue enhancing its intelligent operation platform to support the "Digital Guotai" and "Open Securities" strategies.

Industry Statistics

As of December 24, 2021, the securities industry has evaluated numerous enterprises against the DevOps capability maturity model, with data available on the official assessment website.

DevOps Capability Maturity Model

The model, jointly developed by CAICT, the Cloud Computing Open Source Alliance, and leading internet and financial companies, covers agile management, continuous delivery, technical operations, application design, security, risk management, and tooling. It became the world’s first international DevOps standard when adopted by ITU‑T in July 2020.