How Guoxin Securities Built a Five‑Level IT Operations Maturity Standard

Part 1: Technical Operations Maturity Framework

Guoxin Securities created the "Information System Technical Operations Capability Maturity Standard" to improve fine‑grained management of information system operation. The standard integrates industry regulatory requirements, CAICT DevOps best practices, and internal operation management, balancing agile and stable applications, and enables graded construction and management of the operation assurance system.

Part 2: Maturity Level Classification

The maturity is divided into five levels (1‑5) based on comprehensive assessment of organization, processes, and tool platforms.

Part 3: Innovative Practices

The standard adds fault management, routine maintenance, and operational quality & efficiency domains. Fault management follows SRE theory with five capability items—discovery, response, location, recovery, and post‑mortem—and defines specific time requirements for each stage. Routine maintenance addresses health checks, system observability, data backup, and operational procedures to prevent risks and ensure continuity. Operational quality & efficiency combines ITIL service‑level management and SRE SLO practices, defining client and user SLIs, SLOs, and enforceable SLAs, plus a ranking system to drive continuous improvement.

Part 4: Future Planning

Guoxin Securities will continuously refine the standard, pilot key systems, expand departmental rollout, and optimize the framework. The aim is to improve resource allocation, reduce operational costs, and establish a long‑term mechanism for stable information systems.

Q&A with Yang Yang, head of system operations, covers the motivations for creating the standard, challenges faced, its significance for the company, and implementation plans for 2024‑2025.