Maintaining insight and control on the cloud journey, with DigiRen expertise helping the bank uplift their compliance.
DigiRen helped a Big 4 bank boost cloud tagging compliance from 14% to 95% by simplifying the tagging schema, establishing ownership, and creating a governance forum. This improved cost allocation accuracy, reduced compliance burden, and enabled ongoing monitoring with detailed AWS and GCP reporting for better cloud management.
Our client is one of the “big 4” banks in Australia, providing banking and financial products and services to over 8.5 million retail and business customers across more than 30 markets in Australia, New Zealand, Asia, Pacific, Europe, America and the Middle East. As part of the bank’s ‘Simplification’ program launched in 2018/2019, the bank commenced a mass migration of applications to public cloud - AWS, Google Cloud and Microsoft Azure. That journey has involved migrating existing applications to the cloud and building new applications in the cloud.
Tagging/labelling is critical to maintaining insight and control in an efficient and automated public cloud environment. It is foundational to achieving compliance in downstream processes that rely on identity and ownership data such as cost allocation, shutdowns, patching, incident & problem management and policy application. With the ‘Simplification’ program effort focused on timely application migration execution, discipline around tagging/labelling was no longer at the level required, and as a result, dependent downstream processes were either not compliant or required a high degree of manual intervention to maintain compliance.
To restore compliance and confidence in the bank's cloud environment by designing a sustainable tagging and labelling framework which embeds compliance, automation and operational efficiency.
DigiRen’s approach to uplifting tagging/labelling began with an assessment against best practice to identify and prioritise areas for improvement.
To ensure sustainability and efficiency, DigiRen also established links to external programs and identified other component dependencies.
The action plan coming out of the assessment included:
Working with the banks internal team, DigiRen helped deliver the following outcomes: