Government-Sponsored Enterprise

National organization seeks to update software delivery life cycle

This government-sponsored enterprise works closely with a federal regulator to ensure liquidity, stability and affordability in the U.S. housing and mortgage markets.

Confronting challenges
Due to regulatory findings, the organization was required to perform a gap analysis and update its software delivery life cycle (SDLC) standard to ensure proper controls were in place to avoid operational issues and matters requiring attention (MRAs). Prior incidents had resulted in a misvaluation of securities.

Capco began the project by performing a gap analysis between the client’s current SDLC standard and industry standards, such as Information Technology Industry Library (ITIL), COBIT and ISO 27002 – Information Security standard. We then formed working groups to gather input and discover current best practices across the organization’s development teams. Using industry standards, we updated relevant controls and processes to improve system quality and reduce risks.

We developed a new SDLC standard and delivered it to federal regulators in time to meet regulatory requirements. To help IT project teams deliver according to the new standard, we established technology engineering centers and centers of excellence. In addition, we piloted a training program to help IT development teams learn the new standard.

Key benefits

  • Embedded controls in the SDLC standard for all project teams
  • Lowered the number of operational incidents
  • Reduced the amount of regulatory and audit matters requiring attention
  • Reduced the severity and frequency of problem tickets in production
  • Lowered the risk for month-end and year-end IT project closes