Financial Services
Your next exam asks for your last recovery test. We supply and integrate the second site, then test the failover.
Request a quoteThe Eurosystem's T2 payment system, February 27, 2025.
Two redundant ports failed at once. Per the ECB, the T2 payment system was down about 10 hours, and a first diagnosis held back the move to the second site. The cases on this page are public record, not our clients.¹
Lose a site.
Run again in 2 hours.²
Recovery.
Your examiner asks how fast you recover, and for the last test. We write into your requirement: we test the move for real, and name who can order it before the cause is known.
Recovery.
Your examiner asks how fast you recover, and for the last test. We write into your requirement: we test the move for real, and name who can order it before the cause is known.
What it asks.
Recovery objectives set, alternate processing arranged, recovery tested.
What we design.
A second site that can carry the whole estate.²
What we check before you buy.
Your last move to the second site: its date, its measured time, who gave the order.
Version in force.
IT Examination Handbook booklet, Nov 2019. Our design: recovery in 2 hours, tested twice a year.²
Covered by.
Version in force.
Second Amendment, Nov 2023; last phase in force Nov 1, 2025.
Our design.
Multi-factor sign-in for all interactive access, and at least 95% of devices reconciled from two sources.⁴
Version in force.
Issued Jun 6, 2023.
Our design.
Each key supplier reviewed at most 92 days apart, with exit terms in its contract.⁵
Every network change logged where nobody can alter it.
Records.
Your examiner asks how each record is kept, and how a changed one is traced. Our designs below give you the answers.
Control-plane logs held write-once for at least 400 days.⁶
Covered by. Cloud
What we supply.
We supply and integrate Dell PowerEdge or HPE ProLiant, whichever can deliver by your date.
Design study.
Two people.
The author never approves the change; a third person approves it in CloudVision.⁸
Design study.
Design study · Bank
A design to move a bank’s network in eight windows, at most 3 seconds of loss.¹⁶
60 VLANs
eight Saturday windows¹⁶
We supply Arista, Cisco, NetApp and more. No product answers your examiner alone. We recommend the right one, then deliver it.
Logs.
Your assessor asks how long card-system logs are kept, and how many months stay at hand. Our Security design answers both.⁹
- Published Jun 2024.
- What it asks: audit logs kept 12 months, 3 of them at hand.
- Our design: 12 months online, 24 in archive.⁹
- Scoping is your assessor's.
- Covered by. Security
Lost phone.
Wiped, or the bank's data removed, within 15 minutes of the report.¹⁰
Design study.
Tokens.
Sender-constrained only, by mutual TLS or DPoP, under FAPI 2.0.¹¹
Design study.
Every ICT supplier on one register.
DORA has applied to EU banks and insurers since January 17, 2025.¹²
Suppliers.
Your supervisor asks for the supplier register, the exit plans and a date for every quantum-weak key. Our designs below give you the answers.
A register of information for every ICT third-party arrangement, and an exit strategy for every ICT service behind a critical or important function.¹²
Our design: each critical supplier reviewed at most 92 days apart.¹²
Design study. Supplier-risk register for a bank under DORA
Target algorithms.
ML-KEM and ML-DSA, FIPS 203 and 204.¹³
Design study.
Unused seats.
A seat with no sign-in for 60 days is flagged to its owner within 7 days.¹⁴
Design study.
Design study · Bank
AI for bank documents, run in the bank's own data center.
2 racks
72 GPUs each¹⁵
Design study: a core network move in eight planned windows.¹⁶
Changes.
Your examiner asks who approved each change. PayPal, October 2022: New York's regulator said in January 2025 that a data change launched with no formal approval.¹⁷ We write into your requirement: no change reaches production without a named approver and a recorded test.
- What we check before you buy: who can approve a change, and the record of the last three approvals.
- Our design: the pilot VLAN moved, rolled back and moved again in window 1, with at most 3 seconds of loss per gateway cutover.¹⁶
- Design study. Data center network cutover for a bank
- Covered by. Implementation Services
Every rule owned.
Each rule carries a named owner after migration.¹⁸
Design study.
Register feed.
A monthly export of every account for the DORA register of information.¹⁹
Design study.
Every design has a name on it.
Principal architects Steve Phillips, David Morgan, Avinash Dhinakaran, Mark Winston and Diksha Shah.
Every design has a name on it.
Principal architects Steve Phillips, David Morgan, Avinash Dhinakaran, Mark Winston and Diksha Shah.
Security blueprint
The design behind sign-in and log keeping on this page.²⁰
Security blueprint
The design behind sign-in and log keeping on this page.²⁰
Under 1 µs.
Design study: port to port on a broker's trading VLANs.⁷
18 sites.
Design study: one firewall policy for a regional bank's branches and data centers.¹⁸
140 accounts.
Design study: one cloud landing zone for a bank, each account enrolled in its own window.¹⁹
Banks, brokers, insurers
Design studies in this sector
Talk to an expert about your requirement.
What must you buy before your next exam? Send it. You get a reply the same day, then a quote.²¹
Talk to an expert about your requirement.