CI/CD Best Practices for Secure and Reliable Digital Banking Platforms

References

[1] Beller, M., Gousios, G., Panichella, A., & Zaidman, A. (2017). Developer testing in the IDE: Patterns, beliefs, and behavior. IEEE Transactions on Software Engineering, 45(3), 261–284. https://doi.org/10.1109/TSE.2017.2776152

[2] Nagraj, A. (2024). Performance Optimization Techniques for High-Frequency Trading and Financial Platforms. Frontiers in Computer Science and Artificial Intelligence, 3(1), 90-95.

[3] Chen, L. (2015). Continuous delivery: Huge benefits, but challenges too. IEEE Software, 32(2), 50–54. https://doi.org/10.1109/MS.2015.27

[4] Debroy, V., Miller, S., & Wong, W. E. (2019). Security testing in DevOps: Current practices and future directions. IEEE Software, 36(6), 24–31. https://doi.org/10.1109/MS.2019.2933682

[5] Ebert, C., Gallardo, G., Hernantes, J., & Serrano, N. (2016). DevOps. IEEE Software, 33(3), 94–100. https://doi.org/10.1109/MS.2016.68

[6] Nagraj, A. (2025). Architecting Modern FinTech Systems with APIs: Approaches and Solutions. ISCSITR-INTERNATIONAL JOURNAL OF COMPUTER SCIENCE AND ENGINEERING (ISCSITR-IJCSE)-ISSN, 3067-7394.

[7] Erich, F., Amrit, C., & Daneva, M. (2017). A mapping study on cooperation between information system development and operations. Information and Software Technology, 53, 124–135. https://doi.org/10.1016/j.infsof.2017.01.003

[8] Forsgren, N., Kersten, M., Storey, M. A., Maddila, C., Zimmermann, T., Houck, B., & Butler, J. (2021). The SPACE of developer productivity. Queue, 19(1), 20–48. https://doi.org/10.1145/3454122.3454124

[9] Fowler, M. (2006). Continuous Integration. IEEE Software, 23(6), 18–20. https://doi.org/10.1109/MS.2006.145

[10] Nagraj, A. (2026, June). AI-Driven Continuous Compliance and Risk Detection in Large-Scale Brokerage and Asset Management Platforms. In 2026 4th International Conference on Inventive Computing and Informatics (ICICI) (pp. 1839-1846). IEEE. 10.1109/ICICI68773.2026.11580880

[11] Humble, J., & Molesky, J. (2011). Why enterprises must adopt DevOps to enable continuous delivery. Cutter IT Journal, 24(8), 6–12. https://doi.org/10.48550/arXiv.2201.12874

[12] Kim, G., Debois, P., Willis, J., & Humble, J. (2021). DevOps practices in enterprise software delivery: Evidence from industry. IEEE Software, 38(1), 92–99. https://doi.org/10.1109/MS.2020.3027047

[13] Lwakatare, L. E., Karvonen, T., Sauvola, T., Kuvaja, P., Olsson, H. H., Bosch, J., & Oivo, M. (2019). DevOps in practice: A multiple case study. Information and Software Technology, 114, 217–230. https://doi.org/10.1016/j.infsof.2019.06.010

[14] Nagraj, A. (2025). Implementing Continuous Integration and Deployment in Digital Banking and Payments. ISCSITR-INTERNATIONAL JOURNAL OF SCIENTIFIC RESEARCH IN INFORMATION TECHNOLOGY (ISCSITR-IJSRIT), 6(3), 6-21.

[15] Myrbakken, H., & Colomo-Palacios, R. (2017). DevSecOps: A multivocal literature review. Lecture Notes in Business Information Processing, 291, 17–29. https://doi.org/10.1007/978-3-319-64218-5_2

[16] Rahman, A. A., Williams, L., & Williams, L. (2020). Characterizing DevSecOps: A systematic mapping study. Proceedings of the ACM/IEEE International Symposium on Empirical Software Engineering and Measurement. https://doi.org/10.1145/3382494.3410688

[17] Shahin, M., Ali Babar, M., & Zhu, L. (2017). Continuous integration, delivery and deployment: A systematic review on approaches, tools, challenges and practices. IEEE Access, 5, 3909–3943. https://doi.org/10.1109/ACCESS.2017.2685629

[18] Nagraj, A. (2024). GraphQL in Wealth Management Platforms: Optimizing data access and performance. al-kindipublishers. org. 10.32996/bjmss.2024.3.1.3

[19] Soni, M. (2015). End to end automation on cloud with build pipeline: The case for DevOps and CI/CD. International Journal of Computer Applications, 132(1), 30–35. https://doi.org/10.5120/ijca2015907491

[20] Virtanen, T., Mikkonen, T., & Systä, K. (2023). Continuous software engineering in cloud-native systems: A systematic review. Journal of Systems and Software, 197, 111563. https://doi.org/10.1016/j.jss.2022.111563

@article{1720026,
      author = {Awogbade Kehinde, Asiyanbola Olaoluwa Ebenezer, Iyiola Ifeoluwa Johnson, Samson Precious Loveth, Omisope Abiodun Oluwasegun},
      title = {CI/CD Best Practices for Secure and Reliable Digital Banking Platforms},
      journal = {Iconic Research And Engineering Journals},
      year = {2026},
      volume = {10},
      number = {1},
      pages = {2522-2532},
      issn = {2456-8880},
      url = {https://www.irejournals.com/formatedpaper/1720026.pdf},
      abstract = {In today's software landscape, Continuous Integration and Continuous Deployment (CI/CD) are essential practices that allow companies to make their software updates quickly and consistently without compromising on quality and reliability. The use of secure and reliable CI/CD pipelines is especially critical within the digital banking space, the place applications are utilized for delicate monetary transactions, individual buyer information, and mission-critical providers. In order to satisfy both the expectations and requirements of both customers and authorities, and to keep pace with cyber security issues, banking platforms need to constantly be evolving and adapting to changing customer needs, whilst maintaining system availability and data integrity. The traditional software deployment methods include lengthy release cycles, manual testing and increased risks of deployment that result in compromising innovation and critical features delivery. The CI/CD overcomes all these with automation of code integration, testing, security validation and deployment. But, financial institutions have specific challenges with implementing CI/CD – the complex legacy infrastructure, cyber threats, and zero downtime deployments are just a few. The article summarizes the existing CI/CD approaches for secure and reliable digital banking CI/CD pipelines. It covers DevSecOps concepts, automated security testing, infrastructure as code, containers, continuous monitoring, compliance automation and cloud-native deployment. Moreover, a conceptual CI/CD framework is introduced, which is specific to digital banking platforms, to illustrate the integration of security all the way through the SDLC. The review highlights the benefits of implementing secure CI/CD practices, including increased software reliability, improved quality, increased operational efficiency, and a better ability to comply with regulations; and fostering customer confidence and organizational resilience.},
      keywords = {Continuous Integration, Continuous Deployment, CI/CD, DevSecOps, Digital Banking, Software Security, Secure Software Development, Cloud Computing},
      month = {July},
      doi = {https://doi.org/10.64388/IREV10I1-1720026}
  }