How Minsheng Bank Achieved Leading DevOps Maturity Through Standardized Toolchains

Background and Event

On July 18, 2023, the China Academy of Information and Communications Technology (CAICT) hosted the 2023 XOps Industry Innovation Development Forum in Beijing, focusing on improving enterprise R&D‑operations capabilities and sharing XOps experiences. During the forum, CAICT announced the latest evaluation results for DevOps/AIOps standards.

Minsheng Bank’s Achievement

Minsheng Bank participated with its Software Engineering Support Platform (PSET) and received an "Excellent" rating for the DevOps System and Tool Standard – Pipeline module , indicating a leading domestic level in DevOps capabilities.

To date, the bank has passed three CAICT DevOps standard assessments: one for the system and tool standard, one for continuous delivery, and one for technical operations.

Platform Overview

The platform follows DevOps and "native security" concepts, constructing a DevSecOps ecosystem that covers requirement management, task management, code management, continuous integration, code scanning, testing, quality gates, artifact promotion, and continuous release across the entire software lifecycle.

Four core keywords define the bank’s DevSecOps approach: cloud‑native , automation , left‑shift , and quality gates . Cloud‑native enables containerized templates; automation drives pipelines that integrate build, code scan, security scan, unit and integration tests, and service health checks; left‑shift moves quality and security analysis earlier in development; quality gates embed security and quality requirements into the workflow, replacing manual controls with automated enforcement.

Q&A Highlights

Q: How does the platform support the bank’s digital transformation? A (Ma Bin): The platform provides an end‑to‑end, integrated toolchain that serves as the core infrastructure for IT efficiency, enabling faster, higher‑quality, and more reliable delivery of business value.

Q: Why is an end‑to‑end, process‑driven toolchain essential for DevOps? A (Ma Bin): It offers a one‑stop, user‑centric engineering environment, linking all development stages, optimizing feedback loops, and accelerating business value delivery.

Q: What changes resulted from the assessment? A (Ma Bin): Improved delivery speed, higher quality, reduced rework, and a stronger DevOps culture with clearer goals and enhanced team cohesion.

Q: What improvements were observed after the assessment? A (Liu Haibo): Enhanced quality gate controls, customizable pipeline templates, integrated security, a 105% pipeline growth rate, a 20% increase in successful deployments, and a 32% reduction in unit‑test execution time.

Q: What are the next steps for DevOps at the bank? A (Liu Haibo): Continue to refine the platform based on user needs, expand pipeline support to more project types, promote adoption across headquarters and branches, and strengthen DevOps talent development.

Q: What is the future direction of DevOps? A (Liu Haibo): Evolve toward BizDevSecOps, integrating business value, security, and quality throughout the delivery chain, and align with platform engineering trends to improve reusability, scalability, and governance.

Industry Context

The CAICT‑led DevOps Capability Maturity Model, co‑created with leading internet, finance, and telecom companies, is the first comprehensive DevOps standard series in China and has been adopted by many major enterprises. It was also finalized by the ITU‑T in July 2020 as the world’s first international DevOps standard.

Statistics

As of July 18, 2023, the number of assessments completed by joint‑stock banks is shown in the chart below.

DevOps Capability Maturity Model Overview

The model covers process management, continuous delivery, technical operations, application design, security and risk management, system and tool integration, business value management, collaborative development‑operations, continuous testing, performance measurement, platform engineering, and reliability engineering.