TWM665240U - Comprehensive agile development risk management system - Google Patents

Abstract

A comprehensive agile development risk management system is applied to the Application Lifecycle Management platform for managing the application lifecycle. The system comprises a requirement communication module, a program development module, an automated process and deployment module, and an operations monitoring module. The requirement communication module is configured to collect user requirement data and convert it into development task data. The program development module is coupled with the requirement communication module to receive the development task data and program code. The automated process and deployment module is coupled with the program development module to receive the program and automate the detection process, conducting security checks and quality control for the program. The operations monitoring module is coupled with the automated process and deployment module to perform subsequent tracking and risk assessment based on the results of security checks and quality control.

Description

Comprehensive and agile development of risk management system

This work is about a risk management system, and in particular, a comprehensive agile development risk management system.

Digital technology is an important cornerstone of modern enterprise resilience. With the booming development of financial technology (FinTech), ensuring the security, stability and reliability of financial applications has become a top priority. In today's rapidly changing market environment, it is crucial to be able to respond and adapt quickly to incremental and extreme changes. To this end, companies must strengthen their investment in digital capabilities to maintain stable operations and respond flexibly to changes.

Currently, most companies will introduce Application Lifecycle Management (ALM) technology when developing financial applications. Application Lifecycle Management is a strategic process used to manage the entire software or product life cycle from initial concept ideation, design, development, testing, deployment to end of life. Application Lifecycle Management can help software engineering teams use proven agile working models and trustworthy latest information to efficiently collaborate on projects.

However, the current application lifecycle management process has many pain points at each stage, as follows:

1. Demand communication stage: User needs are usually communicated through emails, phone calls, etc. Such traditional communication methods can easily lead to unclear messages and missed needs, which in turn affects efficiency and slow response speed.

2. Program development stage: Most systems still need to be developed manually. When multiple people are involved in development, program version management becomes difficult. Version control relies on manual operations, increasing the risk of errors or inconsistencies.

3. Development and deployment stage: System deployment is still done manually, and program version control is unstable. When multiple people are developing, version integration and control must be done manually, which not only increases the risk of operational errors, but also increases the complexity of management.

4. Testing stage: Most tests are done manually and reports need to be manually integrated. Full automation of testing has not yet been achieved. In particular, quality assurance (QA) testing still requires a lot of human intervention, which reduces the overall testing efficiency. In addition, there is also manual intervention during installation process verification, which increases the risk of human error.

5. Online preparation stage: During this stage, the system needs to be redeployed for package and online operations, which not only causes delays, but also causes repeated manual operations, thereby reducing efficiency.

6. Program release stage: The release process involves manual operations by multiple people, which can easily lead to operational errors, further affecting overall efficiency.

7. Monitoring the operation stage: Due to the lack of real-time tracking of the processing progress of each stage, it is impossible to fully grasp the processing status of the demand from the proposal to the final launch, which hinders the timely resolution of problems.

The above problems lead to inefficiency in overall application lifecycle management, increase the risk of errors, and prolong the time to respond and resolve problems.

Therefore, it is necessary to develop a system that can improve the efficiency of application lifecycle management and reduce the risk of errors to solve the problems of previous technologies.

In view of this, this work provides a comprehensive agile development risk management system to solve the above-mentioned learning problems.

This invention provides a comprehensive agile development risk control system, which is applied to an application lifecycle management platform to manage an application lifecycle. The comprehensive agile development risk control system includes a demand communication module, a program development module, an automated process and deployment module, and a one-dimensional operation monitoring module. The demand communication module is used to collect demand data input by a user on a communication platform, and convert the demand data into pending development task data through an agile development method, wherein the communication platform is used to provide a user and a developer to communicate and collaborate on pending development tasks on the communication platform. The program development module is coupled to the demand communication module. The program development module includes a development environment. The program development module is used to receive pending development task data and a program. The program is generated by a developer developing a program in the development environment according to the pending development task data. The automation process and deployment module is coupled to the program development module, and is used to receive the program and automatically perform a detection process through a continuous integration unit in the automation process and deployment module to perform an information security detection and a quality control on the program to generate an information security detection result and a quality control result, wherein an execution status of the detection process is presented through the application lifecycle management platform. The maintenance and monitoring module is coupled with the automation process and deployment module to conduct follow-up tracking and risk assessment for the management of the application life cycle based on the information security detection results and quality control results of the program.

The program development module further includes a tracking unit. The tracking unit is used to provide users with real-time tracking of the progress of program development, and to establish a correlation between a program code and the user's required data, and to mark the correlation to generate traceability.

Among them, the automated process and deployment module further includes a process optimization unit. The process optimization unit is used to analyze a process problem in program development and generate a process optimization suggestion based on the process problem.

Among them, the detection process carried out through the automated process and deployment module includes serial testing, information security scanning, deployment and functional regression testing. Among them, the execution status of the detection process is presented in a visual and quantitative way through the application lifecycle management platform.

The maintenance and monitoring module further includes a security control submodule. The security control submodule is used to perform security testing, vulnerability scanning, and compliance checks, and is integrated into the continuous integration unit in the automation process and deployment module to ensure that the program development process complies with an industry security standard and a regulatory requirement.

The maintenance and monitoring module further includes an automated early warning system. The automated early warning system is used to monitor abnormalities in a project during program development and to issue an immediate warning of a potential risk through the application lifecycle management platform.

Among them, the all-round agile development risk control system further includes an all-round monitoring dashboard module. The all-round monitoring dashboard module is coupled with the maintenance monitoring module to integrate all data in the program development process and the management of the application life cycle.

Among them, the all-round monitoring dashboard module further includes a management interface. The management interface is used to provide tracking and management functions of the communication platform so that users can conduct unified monitoring and risk management.

In summary, this creation provides a comprehensive agile development risk management system, which deeply embeds security into the development and operation processes by introducing the application lifecycle management platform and integrating agile development and integrated development, security and operation methods. The comprehensive agile development risk management system effectively improves operation efficiency by automatically connecting all operation procedures, while ensuring compliance with strict safety standards and regulatory requirements of various industries. In addition, the introduction of the comprehensive monitoring dashboard module realizes comprehensive automated monitoring, allowing users to grasp the development status of projects or requirements in real time, further enhancing digital resilience and risk management capabilities.

1, 2, 3, 4, 5, 6: Comprehensive agile development of risk management system

11: Demand communication module

12: Programming development module

121: Tracking unit

13:Automated process and deployment module

131: Process Optimization Unit

14: Maintenance and monitoring module

141: Security control submodule

142:Automated early warning system

15: All-round monitoring instrument panel module

S1~S5: Steps

FIG1 is a functional block diagram of a comprehensive agile development risk management system according to one specific embodiment of the present invention.

Figure 2 is a functional block diagram of an all-round agile development risk management system according to another specific embodiment of the present invention.

FIG3 is a functional block diagram of an all-round agile development risk management system according to another specific embodiment of the present invention.

FIG4 is a functional block diagram of an all-round agile development risk management system according to another specific embodiment of the present invention.

FIG5 is a functional block diagram of an all-round agile development risk management system according to another specific embodiment of the present invention.

FIG6 is a functional block diagram of an all-round agile development risk management system according to another specific embodiment of the present invention.

FIG7 is a flowchart showing the steps of a comprehensive agile development risk control method according to one specific embodiment of the present invention.

FIG8 is a flowchart showing the steps of a comprehensive agile development risk control method according to another specific embodiment of the present invention.

In order to make the advantages, spirit and labels of this creation easier and clearer to understand, the following will be described and discussed in detail with specific embodiments and with reference to the attached drawings. It should be noted that these specific embodiments are only representative specific embodiments of this creation, and the specific methods, devices, conditions, materials, etc. cited therein are not used to limit this creation or the corresponding specific embodiments. In addition, the components in the figure are only used to express their relative positions and are not drawn according to their actual proportions. The step numbers of this creation are only used to separate different steps and do not represent the order of the steps, which should be explained first.

Please refer to FIG. 1, which is a functional block diagram of an all-round agile development risk control system 1 according to one specific embodiment of the present invention. The present invention provides an all-round agile development risk control system 1, which is applied to an application lifecycle management (ALM) platform to manage the application lifecycle. As shown in FIG. 1, the all-round agile development risk control system 1 includes a demand communication module 11, a program development module 12, an automated process and deployment module 13, and a maintenance monitoring module 14. The demand communication module 11 is used to collect demand data input by users on the communication platform, and convert the demand data into pending development task data through agile development methods, wherein the communication platform (not shown in the figure) is used to provide users and developers with communication and collaboration on pending development tasks on the communication platform. The program development module 12 is coupled to the demand communication module 11, and the program development module 12 includes a development environment (not shown in the figure). The program development module 12 is used to receive pending development task data and programs. Among them, the program is generated by the developer developing the program in the development environment according to the pending development task data. The automated process and deployment module 13 is coupled to the program development module 12, and is used to receive the program and automate the detection process through the continuous integration unit (not shown) in the automated process and deployment module 13, so as to perform information security detection and quality control on the program, and generate information security detection results and quality control results, wherein the execution status of the detection process is presented through the application lifecycle management platform. The maintenance monitoring module 14 is coupled to the automated process and deployment module 13, and is used to perform subsequent tracking and risk assessment on the management of the application lifecycle based on the information security detection results and quality control results of the program.

This work proposes a method to standardize the application lifecycle process and introduce process automation management tools, integrate agile development methodology, build automation tools to continuously monitor applications and systems, and detect and correct security vulnerabilities or abnormal behaviors in real time. By introducing the application lifecycle management platform and integrating agile development and integrated development, security and operation methods, security is deeply embedded in the development and operation process. The all-round agile development risk management system connects all operation procedures through automation, effectively improving operation efficiency, while ensuring compliance with strict safety standards and regulatory requirements of various industries.

The following will be used in conjunction with the all-round agile development risk control method to explain the functions of each module in the all-round agile development risk control system 1 of this specific embodiment. In practice, the demand communication module 11, program development module 12, automation process and deployment module 13, and maintenance monitoring module 14 in the all-round agile development risk control system 1 can be integrated into the central processing unit of the computer system or cloud system, or integrated into an integrated chip.

Please refer to FIG. 1 and FIG. 7 together. FIG. 7 is a flowchart showing the steps of the all-round agile development risk control method according to a specific embodiment of the present invention. Please note that the steps of the all-round agile development risk control method of FIG. 7 can be achieved through the all-round agile development risk control system 1 of FIG. 1. Therefore, the following describes the steps of the all-round agile development risk control method in the specific embodiment of FIG. 7 by using the architecture of the all-round agile development risk control system 1 of FIG. 1. As shown in FIG. 7 , in this specific embodiment, the all-round agile development risk control method includes step S1: collecting the demand data input by the user on the communication platform through the demand communication module 11, and converting the demand data into pending development task data through the agile development method, wherein the communication platform is used to provide users and developers with communication and collaboration on pending development tasks on the communication platform; step S2: receiving the pending development task data and the program through the program development module 12, and the program is developed by the developer in the development environment of the program development module 12 according to the pending development task data. Generated by program development; Step S3: Receive the program through the automated process and deployment module 13 and automate the detection process through the continuous integration unit in the automated process and deployment module 13 to perform information security detection and quality control on the program to generate information security detection results and quality control results, wherein the execution status of the detection process is presented through the application lifecycle management platform; Step S4: Perform subsequent tracking and risk assessment on the management of the application lifecycle based on the information security detection results and quality control results of the program through the maintenance monitoring module 14. The all-round agile development risk management system 1 of this specific embodiment can perform a test process including serial testing, information security scanning, deployment and functional regression testing through the automated process and deployment module 13, wherein the execution status of the test process is presented in a visual and quantitative manner through the application lifecycle management platform.

In this specific embodiment, a project demand platform can be established through the demand communication module 11 for users (business units) and program developers to collaborate, so that the team can respond to market demands and changes more quickly and correctly. User demands are broken down into user stories (User Stories) as development tasks to be done by developers, so that system development can focus more on the program user's vision and experience. Agile development methods can be agile development methods such as Scrum and Kanban. Agile development methods can improve the project's adaptability to rapid changes in market demands, reduce unnecessary function development, and allow services to be delivered faster and easier to maintain; and through highly visible agile team development performance, the management team can more effectively track project progress and find process bottlenecks for process optimization. In practice, the selection of agile development methods is not limited to this and can also be selected according to user needs. Program developers can directly receive development tasks for business requirements (User Stories) through the integrated development environment (IDE) of the program development module 12, and establish a relationship between User Stories and code when the code is committed (Commit) to improve demand traceability. This allows each version update to be traced back to the requirements for verification and change impact analysis. The system also supports multiple version control systems, such as Git, Bitbucket, SVN, and Dimensions, allowing project teams to choose the most suitable tools for development. In addition, developers can directly view the status of the automated execution of the continuous integration pipeline (CI Pipeline) on the ALM platform. The continuous integration pipeline refers to a series of steps that connect the automated construction, testing, and deployment processes of the code in software development. This process is designed to ensure that after the code is committed, it can be automatically compiled, tested, and scanned for security, ensuring that each submitted code will not destroy the existing system functions and can quickly and stably enter the next development stage. In addition, quality information is quantified through visual methods to quickly discover problems and analyze quality trends. The automated process connects the continuous integration (CI) of the test area and the continuous delivery or deployment (CD) of the formal area, solving the physical isolation problem between development testing and operational deployment, and meeting the security standards and regulatory requirements of the financial industry, effectively improving work efficiency, shortening work time, and reducing the incidence of human errors. In addition, through the maintenance monitoring module 14, the system can track requirements, tests, and risks from a management perspective, helping project managers cope with the complexity and compliance challenges of financial industry projects. By integrating security testing, vulnerability scanning, and compliance checks into the continuous integration/continuous delivery (CI/CD) process, it ensures that product development meets the security standards and regulatory requirements of the financial industry.

In addition, the all-round agile development risk control system of this creation may have other forms in addition to the above forms. Please refer to Figure 2 and Figure 8 together. Figure 2 is a functional block diagram of an all-round agile development risk control system 2 according to another specific embodiment of this creation. Figure 8 is a step flow chart of an all-round agile development risk control method according to another specific embodiment of this creation. As shown in Figure 2, the all-round agile development risk control system 2 in this specific embodiment may further include an all-round monitoring dashboard module 15. The all-round monitoring dashboard module 15 is coupled to the maintenance monitoring module 14 to integrate all data in the program development process and the management of the application life cycle.

In this specific embodiment, each step of the method of FIG. 8 can be achieved through the system architecture of FIG. 2 , so the steps of FIG. 8 are explained below by using the system architecture in FIG. 2 . As shown in FIG. 8 , the difference between this specific embodiment and the aforementioned specific embodiment is that the all-round agile development risk control method of this specific embodiment further includes step S5 executed after step S4. Step S5: Integrate all data in the program development process and in the management of the application life cycle through the all-round monitoring dashboard module 15. This specific embodiment realizes all-round automated monitoring through the introduction of the all-round monitoring dashboard module 15, so that users can grasp the development status of projects or requirements in real time, and further enhance digital resilience and risk management capabilities. Please note that the other steps in the all-round agile development risk control method of this specific embodiment are roughly the same as the corresponding steps in the aforementioned specific embodiment, so they will not be repeated here.

In another specific embodiment, the all-round monitoring dashboard module 15 may further include a management interface (not shown). The management interface is used to provide tracking and management functions of the communication platform so that users can perform unified monitoring and risk management. In another specific embodiment, the all-round monitoring dashboard module 15 may further include a real-time monitoring unit (not shown). The real-time monitoring unit is used to provide real-time monitoring of an operating status of the all-round agile development risk management system based on a daily battle situation report. In this specific embodiment, by integrating the data of the ALM platform and the version control platform, a comprehensive monitoring dashboard module 15 is built to focus on daily battle situation reports, and to understand the system operation status, defects and progress in real time, so that managers can track and manage on a single platform.

The all-round agile development risk control system of this creation includes other forms. Please refer to Figures 2 to 6 in sequence. Figure 3 is a functional block diagram of an all-round agile development risk control system 3 according to another specific embodiment of this creation. Figure 4 is a functional block diagram of an all-round agile development risk control system 4 according to another specific embodiment of this creation. Figure 5 is a functional block diagram of an all-round agile development risk control system 5 according to another specific embodiment of this creation. Figure 6 is a functional block diagram of an all-round agile development risk control system 6 according to another specific embodiment of this creation. As shown in FIG3 , the difference between this specific embodiment and the aforementioned specific embodiment is that the program development module 12 in the all-round agile development risk control system 3 of this specific embodiment further includes a tracking unit 121. The tracking unit 121 is used to provide users with real-time tracking of the progress status of program development, and to establish a correlation between a program code and the user's required data, and mark according to the correlation to generate a traceability.

As shown in FIG4 , the difference between this specific embodiment and the aforementioned specific embodiment is that the automated process and deployment module 13 in the all-round agile development risk management system 4 of this specific embodiment further includes a process optimization unit 131. The process optimization unit 131 is used to analyze a process problem of program development and generate a process optimization suggestion based on the process problem.

As shown in FIG5 , the difference between this specific embodiment and the aforementioned specific embodiment is that the maintenance monitoring module 14 in the all-round agile development risk management system 5 of this specific embodiment further includes a security control submodule 141. The security control submodule 141 is used to perform security testing, vulnerability scanning and compliance checks, and is integrated into the continuous integration unit in the automation process and deployment module to ensure that the program development process complies with a security standard and a regulatory requirement of an industry.

As shown in FIG6 , the difference between this specific embodiment and the aforementioned specific embodiment is that the maintenance monitoring module 14 in the all-round agile development risk control system 6 of this specific embodiment further includes an automated early warning system 142. The automated early warning system 142 is used to perform abnormal monitoring on a project in program development and to immediately warn of a potential risk through the application lifecycle management platform. Please note that the other modules in the all-round agile development risk control system 3 to 6 of this specific embodiment have roughly the same functions as the corresponding modules in the aforementioned specific embodiment, so they will not be described here in detail.

In summary, this creation provides a comprehensive agile development risk management system, which deeply embeds security into the development and operation processes by introducing the application lifecycle management platform and integrating agile development and integrated development, security and operation methods. The comprehensive agile development risk management system effectively improves operation efficiency by automatically connecting all operation procedures, while ensuring compliance with strict safety standards and regulatory requirements of various industries. In addition, the introduction of the comprehensive monitoring dashboard module realizes comprehensive automated monitoring, allowing users to grasp the development status of projects or requirements in real time, further enhancing digital resilience and risk management capabilities.

The above detailed description of the preferred specific embodiments is intended to more clearly describe the label and spirit of this creation, and is not intended to limit the scope of this creation by the preferred specific embodiments disclosed above. On the contrary, its purpose is to cover various changes and arrangements with equivalents within the scope of the patent scope to be applied for this creation. Therefore, the scope of the patent scope applied for this creation should be interpreted in the broadest sense according to the above description, so as to cover all possible changes and arrangements with equivalents.

1: Comprehensive and agile development of risk management system

11: Demand communication module

12: Programming development module

13:Automated process and deployment module

14: Maintenance and monitoring module

Claims (8)

A comprehensive agile development risk management system is applied to an application lifecycle management platform to manage an application lifecycle. The comprehensive agile development risk management system includes: A demand communication module is used to collect demand data input by a user on a communication platform, and convert the demand data into pending development task data through an agile development method, wherein the communication platform is used to provide the user and a developer with communication and collaboration on the pending development task on the communication platform; A program development module coupled to the demand communication module, the program development module includes a development environment, the program development module is used to receive the pending development task data and a program, the program is generated by the developer developing a program in the development environment according to the pending development task data; An automated process and deployment module coupled to the program development module, for receiving the program and automatically performing a detection process through a continuous integration unit in the automated process and deployment module, so as to perform a security detection and a quality control on the program, so as to generate a security detection result and a quality control result, wherein an execution status of the detection process is presented through the application lifecycle management platform; and The one-dimensional operation monitoring module is coupled to the automation process and deployment module to perform follow-up tracking and risk assessment on the management of the application life cycle based on the information security detection results and the quality control results of the program. As described in Item 1 of the patent application scope, the all-round agile development risk management system, wherein the program development module further includes: A tracking unit is used to provide the user with real-time tracking of the progress status of the program development, and to establish a correlation between a program code of the program and the user's requirement data, and to mark according to the correlation to generate traceability. As described in Item 1 of the patent application scope, the all-round agile development risk management system, wherein the automated process and deployment module further includes: A process optimization unit is used to analyze the process problems of the program development and generate process optimization suggestions based on the process problems. As described in Item 1 of the patent application scope, the comprehensive agile development risk control system, wherein the detection process performed through the automated process and deployment module includes serial testing, information security scanning, deployment and functional regression testing, wherein the execution status of the detection process is presented in a visual manner and a quantitative manner through the application lifecycle management platform. As described in Item 1 of the patent application scope, the all-round agile development risk management system, wherein the maintenance and operation monitoring module further includes: A security control submodule is used to perform security testing, vulnerability scanning and compliance checking, and is integrated into the continuous integration unit in the automation process and deployment module to ensure that the program development process complies with an industry security standard and a regulatory requirement. As described in Item 1 of the patent application scope, the all-round agile development risk management system, wherein the maintenance and operation monitoring module further includes: An automated early warning system is used to monitor an abnormality of a project in the program development and to issue a warning of a potential risk in real time through the application lifecycle management platform. The all-round agile development risk management system as described in Item 1 of the patent application scope further includes: A comprehensive monitoring dashboard module is coupled to the maintenance monitoring module to integrate all data in the program development process and the management of the application life cycle. As described in Item 7 of the patent application scope, the all-round agile development risk control system, wherein the all-round monitoring dashboard module further includes: A management interface is used to provide tracking and management functions for the communication platform, so that the user can conduct unified monitoring and risk management.

Images