AS400 Change Management
THE BUSINESS NEED
Our customer wanted to apply Change Management procedures and standards to its Cards Management System in order to comply with the SOX-404 requirements. The CMS environment was in-house developed in an AS/400 platform but there were no distinct environments for Development, testing, QA and Production.
THE SOLUTION
CSS analyzed the existing AS/400 system and designed the conceptual model of the required environments for Development, Testing, QA and Production. The idea was to separate the development cycle from the QA and production cycle, having distinct roles for promoting code from Dev to QA and then to Production, with full logging throughout the whole process. The security of all levels (environment-system, libraries, objects, users-roles) was designed from scratch.
The model was tested thoroughly for its robustness and a software tool was implemented in order to facilitate the required change management process. The risk of the migration of all the existing in-house developed Card Management System (thousands of objects) to the new environments was also anticipated in order not to disrupt the Credit Cards business of the Bank.
BENEFITS
The migration was done smoothly within a weekend and the system runs since then, helping NBG to improve overall data security and comply with SOX-404 for its Credit Cards Environment.
