How Shenzhen Stock Exchange Achieved Leading DevOps Standards Through Dual International and Domestic Certification

On May 29 2024, the Central Cyberspace Administration, the State Administration for Market Regulation, and the Ministry of Industry and Information Technology issued the Information Standard Construction Action Plan (2024‑2027) , emphasizing the internationalization of information standards and coordination between domestic and international standards such as ISO, IEC, and ITU.

China Academy of Information and Communications Technology (CAICT) launched a synchronized assessment based on the ITU DevOps international standard and the domestic DevOps standard, upgrading evaluation scope, certificates, and reports. This assessment implements the Action Plan’s requirement to promote international standardization.

On April 25 2025, at the 25th GOPS Global Operations Conference in Shenzhen, CAICT announced the dual‑certificate results for the ITU DevOps international standard and the domestic DevOps standard.

The Shenzhen Stock Exchange (SZSE) participated with the project "SZSE Trading Supervision System Investigation and Process Optimization" and successfully passed the ITU DevOps international standard assessment and the domestic Continuous Delivery Standard Level 3 , demonstrating leading domestic capabilities.

Key Capability Areas Demonstrated by SZSE

Organization & Culture: Established cross‑department DevOps teams, defined responsibilities for development, operations, and security, and conducted regular fault‑replay drills to embed agile culture.

Toolchain Standardization: Adopted industry‑recommended tools to build a unified R&O platform, achieving end‑to‑end automation from code commit to production release.

Process Standardization: Enforced Git‑Flow branching and gray‑release mechanisms, embedding code scanning and least‑privilege controls in pipelines.

Security & Compliance: Integrated the Regulations on Network Security Management for Securities and Futures into automated processes and set open‑source component admission standards.

Metrics & Improvement: Defined deployment frequency, change failure rate, and MTTR, establishing a regular DevOps maturity self‑assessment cycle.

Industry Collaboration: Contributed to the "DevOps Case Library" best‑practice sharing platform.

These capabilities align with multiple policy documents, including the CSRC’s 2024‑2026 Standardization Action Plan, the Securities Association’s network and information security improvement plan, and the 2024‑2025 BizDevOps guidelines, all emphasizing the integration of business and technology.

CAICT’s BizDevOps standard system builds on XOps technologies (DevOps, DevSecOps, FinOps) to create an end‑to‑end value‑creation framework from business goals to continuous service delivery and operation.

The ITU DevOps international standard originated from a 2018 meeting in Geneva, leading to the approval of ITU‑T Y.3525 (cloud service development and operation requirements) in July 2020. The domestic DevOps standard, the DevOps Capability Maturity Model , was jointly developed by CAICT, cloud computing alliances, and leading internet and financial enterprises, and has been adopted by many organizations.