Regulatory Testing

Regulatory testing refers to test management processes which are mandated by regulatory agencies.

In order to achieve the goal of fulfilling the specified regulations – e.g. MaRisk AT 7.2 and AT 8.1, BAIT 10 and 41, DSGVO Art. 1 - and implementing them successfully in the organization, Sixsentix had defined certain objectives and work packages that had to be delivered first, such as central test plan, concepts for system integration test requirements, bundling and impact analysis etc.

The implementation procedure for each of the work packages was always the same: Sixsentix developed a multi-layered, multi-staged process to discuss the feedback with the respective stakeholders from the client's business departments, IT (development and operations) and internal compliance / worker's council.

Phases:
1. Assessment
Assessment of Status quo and individual regulatory requirements.

2. High level concept
Definition of high level concept with a focus on regulatory requirements.

3. Detailed concept
Definition of detailed concept which fulfils the regulatory requirements and defines the required processes.

4. Rollout
Communication of the implemented processes within the organisation and establishment of a continuous improvement process.

Reference Customers:

Banking

Ready-to-use interfaces to other tools and systems:

Test Management, Release Management, IT Life Cycle Management

History:

November 18, 2021: Rollout

Coordinate the rollout of the aligned concept and enable the client
to deliver software that meets the regulatory demands.

July 29, 2021: Conduct workhops for all concepts

Obtain feedback from affected stakeholders and validate the
concepts and processes. Derive findings and prioritized
recommendations to be implemented.

June 17, 2021: Assessment of status quo

Define key principles for steady state and baseline expectations for
the to defined concepts.

General information:

Project start: July 17, 2021
Project end: February 3, 2022
Business Unit: IT Quality
Keyword: Software Testing
Type: Best Practice / Use Case
Patented: No

Contact of the Organization:

Sixsentix Deutschland GmbH
Gervinusstrasse 17
60322 Frankfurt
Germany
Tel.: 06987008900
Email: