Shenzhen Stock Exchange Leads with Dual ITU DevOps Certification – What It Means

On May 29, 2024, the Central Cyberspace Administration, the State Administration for Market Regulation, and the Ministry of Industry and Information Technology jointly issued the "Information Standard Construction Action Plan (2024‑2027)", emphasizing the internationalization of information standards, deep participation in ISO, IEC, ITU and other international bodies, and the alignment of national and international technical indicators.

The China Academy of Information and Communications Technology (CAICT) launched a synchronized assessment based on the ITU DevOps international standard and the domestic DevOps standard, achieving mutual recognition of standards. This assessment upgrades the evaluation scope, certificates, and reports, serving as a key implementation of the action plan.

On April 25, 2025, at the 25th GOPS Global Operations Conference and Research‑Operation Intelligence Technology Summit in Shenzhen, CAICT officially announced the dual certification results for the ITU DevOps international standard and the domestic DevOps standard.

The Shenzhen Stock Exchange’s project titled “Investigation and Analysis of the Trading Supervision System — Process Optimization” successfully passed the ITU DevOps international assessment and attained Level 3 of the Continuous Delivery Standard under the domestic "Research‑Operation Integration (DevOps) Capability Maturity Model", demonstrating leading domestic capabilities.

The assessment highlighted six key capability areas:

Organization & Culture: establishment of cross‑department DevOps collaboration teams with clear responsibilities for development, operations, and security, and regular fault‑review drills to embed agile culture.

Toolchain Standardization: adoption of industry‑recommended tools to build a unified R&O platform, enabling end‑to‑end automation from code commit to production release.

Process Standardization: strict enforcement of Git‑Flow branching strategy and gray‑release mechanisms, embedding code scanning and least‑privilege controls as security checkpoints in pipelines.

Security & Compliance: deep integration of regulatory requirements such as the "Securities and Futures Industry Network Security Management Measures" and the establishment of open‑source component admission standards.

Measurement & Improvement: definition of metrics like deployment frequency, change‑failure rate, and MTTR, forming a regular self‑assessment and improvement loop.

Industry Collaboration: promotion of a shared "DevOps case library" platform for best‑practice exchange.

The article also references related policy documents, including the CSRC’s 2024‑2026 "Three‑Year Action Plan for Strengthening Standardization in the Securities and Futures Industry", the Securities Association’s "Three‑Year Network and Information Security Improvement Plan (2023‑2025)", and the joint 2024 "Digital Finance High‑Quality Development Action Plan" that calls for cross‑technology and business task teams, underscoring the strategic importance of DevOps/BizDevOps in financial digital transformation.

Further background on the ITU DevOps international standard (ITU‑T Y.3525) and the domestic "Research‑Operation Integration (DevOps) Capability Maturity Model" is provided, describing their development history, scope covering the full DevOps lifecycle, and relevance to cloud computing and continuous delivery.

For detailed inquiries about DevOps standard assessments, contact CAICT representatives:

CAICT – Bai Hanhong Phone: 159 1076 9206 (WeChat) Email: [email protected]

CAICT – Zhang Jianyi Phone: 158 1031 7021 (WeChat) Email: [email protected]