How China Galaxy Securities Achieved Leading‑Edge DevOps Maturity with CMDB Platform

Standardization and tool empowerment are key to enterprise success; the DevOps standards and a standards‑based continuous delivery pipeline can significantly improve quality, efficiency, safety, and market competitiveness.

On December 26, 2022, the China Academy of Information and Communications Technology (CAICT) announced the latest batch of DevOps standard assessment results.

China Galaxy Securities participated with its CMDB platform, which passed the CAICT "R&D‑Operations Integration (DevOps) Capability Maturity Model" system and tool standard Configuration Management module with an excellent rating, indicating a leading domestic level.

The assessment was conducted by CAICT.

On January 6, 2023, at the "2022 GOLF+IT New Governance Leadership Forum," the China Communications Standardization Association and CAICT awarded the enterprise.

We interviewed Luo Qingping, Deputy General Manager, and Zhang Bing, Head of the Basic Platform Team, to discuss the project details and share experiences.

- Q&A -

Q: Please introduce yourself, your company, and the project evaluated.

Luo Qingping explained that China Galaxy Securities is a leading comprehensive financial services provider with a full securities license, extensive domestic network, and overseas presence in nine countries, operating over 300 production systems. The CMDB platform, developed by the IT department, was the subject of the DevOps system and tool assessment.

The CMDB platform manages software, hardware, virtual assets, and infrastructure resources, establishing relationships across applications, servers, middleware, security, and network devices. It integrates with cloud management platforms, out‑of‑band systems, and supports scenarios such as innovation‑driven implementation tracking, security exercise asset trees, IP resource management, and digital twin of data centers.

Q: How did you feel after passing the DevOps standards assessment?

Luo said the excellent rating validates the CMDB platform’s capabilities, marking the first DevOps series assessment for the company and the first excellent‑level evaluation in the configuration management module. The preparation improved platform functionality and demonstrated the practical impact of DevOps on IT process management.

Q: What considerations led your enterprise to participate in the assessment?

The CMDB platform is part of an integrated operations portal that unifies multiple tools (CMDB, monitoring, ITIL, RPA) into a closed‑loop operation, ensuring efficient, safe, stable, and reliable system operation. The platform aligns closely with the DevOps Capability Maturity Model, especially in lifecycle management, automatic discovery, and third‑party integration.

Q: What changes did the assessment bring to your team?

The evaluation drove improvements in tool execution efficiency and support capabilities, prompting the team to refine processes, enhance data support, and standardize operations, leading to higher cross‑departmental collaboration.

Q: What are the next steps for DevOps work?

Zhang Bing highlighted two innovations—digital twin and IP resource management—recognized by the experts. The team will continue iterating the CMDB platform, aim for an excellence‑level assessment, and integrate intelligent knowledge bases for automated discovery, visual metadata, and anomaly remediation.

Q: What is your view on the future of DevOps?

Zhang noted that DevOps is expanding with fintech, and AI is transforming operations by enabling super‑automation, reducing manual intervention, and enhancing monitoring, thereby supporting digital transformation and rapid business value delivery.

The "R&D‑Operations Integration (DevOps) Capability Maturity Model" series standards were jointly developed by CAICT, the Cloud Computing Open Source Industry Alliance, the Efficient Operations Community, major internet companies, and leading financial and telecom enterprises. It is the most comprehensive and authoritative DevOps standard, endorsed by the Ministry of Industry and Information Technology and adopted by many top firms.

In July 2020, the DevOps standard was finalized by the United Nations ITU‑T, becoming the world’s first international DevOps standard. The model covers agile development management, continuous delivery, technical operations, application design, security, system and tool integration, business value management, collaborative development‑operations, and continuous testing.

For inquiries about DevOps standard assessments, contact CAICT (Liu Kaili, phone 15650786171, email [email protected]) or the Efficient Operations Community (Wei Huanxin, phone 18500255645, email [email protected]).