Megcsinálom egyedül: FRANKENSTEIN SECURITY a digitális banki szolgáltatásokhoz (Irina Latushkina)

We live the time when garage inventions are not really possible anymore – everything truly great should be created by at least medium-size teams of top-professionals. Nowadays banks and fintechs have become real centers of technology and innovations, having
very strong tech teams onboard. Obviously, they want to do everything on their own. But when we are talking about security solutions development, such an approach has several underwater rocks that should be taken into consideration.

Nem lesz olcsóbb

One of the most common arguments we’ve heard from the client side is that it will be cheaper to develop their own solution having their strong team onboard. This is a very popular point of view but in fact it’s a trap. You will need to hunt quite niche tech
brains with strong experience in development of security solutions. For example, our company is focusing on no-OTP mobile authentication. So, we can openly say that to develop such a solution – even the lite version – you will need firstly some strong cryptographic
specialists, which are able to develop a proper keys distribution scheme. If your security solution operates on iOS and Android, then you will need to find not only Android and iOS developers but also guys understanding all the guts of both the platforms.
It is also expected the hiring of backend developer, testers, analytics having competence in this specific topic and for sure you definitely need an architect.

Gondolom, néhányan meglepődtek, és már kiszámolták a költségeket

Túl sok idő

Everyone who’s ever launched a product knows, that it is not that fast. But the point is that you don’t have this time. If you face security issues right now, you need to solve them as soon as possible. Otherwise, you could lose more money of your clients
waiting for your own internal development would be finished. Obviously, money loss is equal to reputational loss and your clients will simply move to another bank. Perhaps, meanwhile you will finish testing of your new Frankenstein.

Moreover, nothing is made in stone. I believe some of you had a situation when initial development team left the company. For sure, in an ideal world you will stay with all the product manuals so that new team members will be easily included into the process
of support. But expectations and reality do not always coincide. When you need to make some amends, launch a new version or adopt to new requirements, then your team suddenly have to come back to the manuscripts of initial development team.

Újra fejlődni?

Nem lehet egyszer kifejleszteni valamit, és örökre úgy hagyni, ahogy van – frissítenie kell, támogatnia kell, külső tolltesztelési szolgáltatást kell kérnie stb.

Ezenkívül új funkciókat kell hozzáadnia. Ügyfeleinkkel mindig találunk új érdekes eseteket – például így hoztuk létre QR-szkenneléssel az internetbanki bejelentkezést. Egyik meglévő ügyfelünk csak annyit mondott: „could you make it as secure,
as you do now but without inputting even username?” Hasonló módon fejlesztettük ki az off-line módú hitelesítést és számos egyéb szolgáltatást, amely jelenleg a megoldásunkban található.

Talking about security, it’s hard to stop – hackers are smart and fast at looking for new vulnerabilities, so we have to be pro-active, catching security trends, predicting the latest security risks. That is how we have added adaptive authentication, conflict
resolving tool for friendly-fraud cases, device-fingerprinting to enrich anti-fraud, special cases for secure access renewal and others.

Oké, végre kifejlesztetted. Majd egy idő után áthelyezi ügyfeleit egy új alkalmazásba vagy szolgáltatásba – igen, valószínűleg át kell vennie vagy újra kell építenie biztonsági megoldását. Újra.

Ügyfélközpontú megközelítés

It seems to be quite obvious but when you have an experienced development team onboard – you are lucky, you can focus on client services, you can collect feedback, check and improve many things in their user-experience. This will take quite a lot of time
and efforts as it is a never-ending process. Focus on your clients, share the feedback and let security solution developers do their work and support your internal development team. For us your feedback and requests is a good way to catch some new trends.

Tapasztalatainkból

In our experience we had prospects that planned to create their own security solution after getting quite a deep understanding of our products. We used to smile when we deal with such clients as key points described above are actually taken from our experience
with them. Almost all the stories usually end with good partnership and successful projects. Now, we came to a point that garage development era is over and it is the best time – time to
együttműködik.