Application Release & Deployment for Dummies®, 3Rd IBM Limited

36 Understanding Credit Risk For Dummies, Graydon Special Edition Monitor Customers with a CIP Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six Applicationmonths ago is still relevant. If your credit information pro - vider doesn’t have a monitoring system in place, shop around for a new one! And if you don’t have a credit information provider, get one! LoopRelease in Line Management & Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your Deploymentconcerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’

Continue3rd to IBM Fight Limited Fraud Edition Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better by yet,Eric utilise Minick, a credit information Allan provider Wagner, (such as Graydon UK Ltd), which featuresClaudia a specialist Ring fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts, but you’ll avoid most of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36ApplicationUnderstanding Release Credit & Deployment Risk For Dummies, For Dummies Graydon® Special, Edition 3rd IBM Limited Edition

Published by JohnMonitor Wiley & Sons, Inc. Customers with a CIP 111 River St. Hoboken, NJ 07030-5774 www.wiley.com Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have Copyright © 2017 by John Wiley & Sons, Inc. a monitoring system that automatically alters a rating (either No part of this publicationup or down) may be based reproduced, on an stored event in a changeretrieval system– perhaps or transmitted the filing in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permittedof new under accounts Sections 107 or or changes108 of the 1976 in directors. United States Using Copyright that Act, system without the prior writtencan permission let you of know the Publisher. if the Requestscredit limitto the youPublisher set for permission a customer should six be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011,months fax ago (201) is 748-6008, still relevant. or online If at your http://www.wiley.com/go/permissions credit information pro- . vider doesn’t have a monitoring system in place, shop around Trademarks: Wiley, For Dummies, the Dummies Man logo, The Dummies Way, Dummies.com, Making Everythingfor Easier,a new and one! related And trade if you dress don’t are trademarks have a creditor registered information trademarks of John Wiley & Sons, provider, Inc. and/or get its one! affiliates in the United States and other countries, and may not be used without written permission. IBM and the IBM logo are registered trademarks of International Business Machines Corporation. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc., is not associated with any product or vendor mentionedLoop in this book.in Line Management LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY: THE PUBLISHER AND THE AUTHOR MAKE NO REPRESENTATIONSDon’t OR keep WARRANTIES that new WITH information RESPECT TO THE you’ve ACCURACY collected OR COMPLETENESS all to your- OF THE CONTENTSself! OF Liaise THIS WORK with AND your SPECIFICALLY boss and DISCLAIM other ALLsenior WARRANTIES, management INCLUDING and WITHOUT LIMITATIONkeep them WARRANTIES apprised OF FITNESSabout FORthe A company’s PARTICULAR PURPOSE. NO clients. Voice WARRANTY your MAY BE CREATED OR EXTENDED BY SALES OR PROMOTIONAL MATERIALS. THE ADVICE AND STRATEGIES concerns.CONTAINED HEREIN No one MAY likes NOT BE nasty SUITABLE surprises! FOR EVERY Here’s SITUATION. THIS your chance WORK IS to SOLD WITH THEbecome UNDERSTANDING a hero THAT– or THEat least PUBLISHER to say, IS NOT ‘I ENGAGEDtold you IN RENDERINGso!’ LEGAL, ACCOUNTING, OR OTHER PROFESSIONAL SERVICES. IF PROFESSIONAL ASSISTANCE IS REQUIRED, THE SERVICES OF A COMPETENT PROFESSIONAL PERSON SHOULD BE SOUGHT. NEITHER THE PUBLISHER NOR THE AUTHOR SHALL BE LIABLE FOR DAMAGES ARISING HEREFROM. THE FACT THAT AN ORGANIZATION OR WEBSITE IS REFERRED TO IN THIS WORK AS A CITATION AND/OR ContinueA POTENTIAL SOURCE OF FURTHER to INFORMATIONFight DOES Fraud NOT MEAN THAT THE AUTHOR OR THE PUBLISHER ENDORSES THE INFORMATION THE ORGANIZATION OR WEBSITE MAY PROVIDE OR RECOMMENDATIONS IT MAY MAKE. FURTHER, READERS SHOULD BE AWARE THAT INTERNET WEBSITES LISTEDDespite IN THIS all WORK your MAY due HAVE diligence, CHANGED ORyou DISAPPEARED may still BETWEEN be taken WHEN in THISby a WORK WAS WRITTENfraudster. AND WHENFraud IT happensIS READ. all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows For general informationno signs on ofour abating. other products And and it coversservices, everyor how toindustry create a custom sector, For not Dummies book forjust your fast‐moving business or organization, consumer please goods contact (FMCG). our Business Don’t Development become Department in thecomplacent. U.S. at 877-409-4177, Ensure contact detection [email protected] methods ,are or visit in placewww.wiley.com/ or, better go/custompub. For information about licensing the For Dummies brand for products or services, contact [email protected], utilise a credit information. provider (such as Graydon UK ISBN: 978-1-119-41595-4Ltd), which (pbk); features ISBN: 978-1-119-41594-7 a specialist fraud-detection (ebk) team. Manufactured in the United States of America 10 Stick9 8 7 6 5 to4 3 2Your 1 Guns Publisher’sAs Acknowledgments a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be Some of the rushedpeople who into helped opening bring an thisaccount book to– even market if youinclude have the the following: head Project Editor:of sales Carrie breathing A. Burchfield down yourBusiness neck. BeDevelopment diligent and thorough, ensure that everyone follows theRepresentative: procedures, Sueand Blessing don’t agree Editorial Manager:to credit Rev account Mengle facilities until you’re 100 per cent sure. You Production Editor: Siddique Shaik Acquisitionswon’t Editor: totally Steve avoid Hayes bad debts, but you’ll avoid most of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36TableUnderstanding of Credit ContentsRisk For Dummies, Graydon Special Edition Monitor Customers with a CIP INTRODUCTION...... 1 AboutTop‐notch This Book credit...... information providers have monitoring sys-1 Iconstems Used for clients’in This Book use...... Many credit information providers have2 a monitoring system that automatically alters a rating (either Beyond the Book...... 2 up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system CHAPTER 1: What Drives Effective Release can let you know if the credit limit you set for a customer six andmonths Deployment? ago is still relevant...... If your credit information pro- 5 Continuousvider doesn’t Delivery have and a monitoring Continuous system Feedback in place,...... shop around5 Continuousfor a new Integrationone! And if andyou thedon’t Continuous have a credit Delivery information Pipeline provider,...... get one! 7 Deploying what you have, virtualizing what you don’t...... 8 Decreasing expensive failures...... 9 Scaling complex releases and deployments...... 10 LoopEliminating in Line the Release Management Weekend and Improving TeamDon’t Morale keep ...... that new information you’ve collected all to your-12 self! Liaise with your boss and other senior management and CHAPTER 2: Bestkeep Practices them apprised for about Deployment the company’s clients. Voice your Automationconcerns. No one and likes Release nasty surprises! Management Here’s your...... chance 13to Thebecome Four Pillars a hero of – Gold-Standard or at least to say,Deployment ‘I told you...... so!’ 13 Use the same process...... 14 Automate, automate, automate...... 15 ContinueDeliver incremental to Fight changes ...... Fraud 15 Release what you test...... 16 TheDespite Positive all Effects your due of diligence,Gold-Standard you mayDeployment still be...... taken in by a16 fraudster.Automating Fraud and happensusing the all same the deploymenttime, and no process one is .immune...... 17 Commercial fraud is a multi‐billion‐pound threat that shows Performing incremental releases...... 17 no signs of abating. And it covers every industry sector, not Managing defects and decreasing risk...... 17 just fast‐moving consumer goods (FMCG). Don’t become complacent.Release what Ensure you test detection...... methods are in place or, better18 yet, utilise a credit information provider (such as Graydon UK CHAPTER 3: TheLtd), Next which Step features in Applicationa specialist fraud-detection Deployment team. Automation and Release Management Adoption...... 19 StickUnderstanding to Your and Preparing Guns for Changes...... 20 Defining roles and identifying changes in responsibilities...... 20 AsModifying a credit processprofessional, to increase you hold effectiveness a great responsibility for theand good efficiency of your...... company. Never forget that! Refuse to be 21 rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts, but you’ll Tableavoid of most Contents of them! iii

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingWhich Deployment Credit Risk Automation For Dummies, Solution Graydon Is Right Special for You? Edition...... 21 Supporting current and future technologies...... 22 Provisioning environments on demand...... 22 Selecting the Right Release Management Solution for You...... 24 MonitorWe don’t Customers need no stinkin’ spreadsheets with...... a CIP 24 Top‐notchUnderstanding credit the information impact of changeproviders...... have monitoring sys25- temsMaking for theclients’ auditors use. happyMany ...... credit information providers have25 a monitoring system that automatically alters a rating (either CHAPTER 4: Rollingup or down) Out basedSolutions on an event...... change – perhaps the filing 27 Puttingof new the accounts Continuous or changes Delivery in Puzzle directors. Together Using...... that system 27 Implementingcan let you knowan Application if the credit Deployment limit you set for a customer six Automationmonths ago Solution is still...... relevant. If your credit information pro- 29 viderChoose doesn’t the ideal have time a monitoring for deployment system...... in place, shop around29 forEnsure a new a one!production-like And if you environmentdon’t have a ...... credit information 30 provider,Design for get production one! first...... 31 Implementing a Release Management Solution...... 32 Identify a realistic release model...... 32 LoopChoose in Line an implementation Management path...... 33

CHAPTER 5: TenDon’t Myths keep that about new informationApplication you’ve Release collected all to yourself! Liaise with your boss and other senior management and and Deployment...... 35 keep them apprised about the company’s clients. Voice your Automatingconcerns. DeploymentNo one likes Means nasty surprises!Writing Scripts Here’s...... your chance 35to Whobecome Needs a Anhero Ops – orTeam? at least...... to say, ‘I told you so!’ 36 Complex Releases Can Be Easily Managed without Specialized Solutions...... 37 Continuous Delivery Means Constant Production Releases...... 37 ContinueAutomation Compromises to Fight Controls Fraud like Separation of Duties...... 37 Despite all your due diligence, you may still be taken in by a A Spreadsheet Is a Good Release-Management Tool...... 38 fraudster. Fraud happens all the time, and no one is immune. OneCommercial Large Release fraud Is isLess a multi‐billion‐pound Risky Than Several Smallthreat Ones that...... shows39 Releaseno signs Automation of abating. Is AndSeparate it covers from every the Build industry Process sector,...... not39 A Backlogjust fast‐moving of Deployables consumer Doesn’t goods Indicate (FMCG). a DevOps Don’t become Problemcomplacent...... Ensure detection methods are in place or, better40 Releaseyet, utilise Coordination a credit informationSolutions Fix providerAll Problems (such...... as Graydon UK40 Ltd), which features a specialist fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You iv Applicationwon’t Release totally & avoidDeployment bad debts, For Dummies, but you’ll 3rd IBMavoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36IntroductionUnderstanding Credit Risk For Dummies, Graydon Special Edition Monitoroftware Customers applications are large with drivers of a business CIP revenue, and the timely release and deployment of those applications Top‐notchhas become credit a informationcritical part ofproviders the business have life monitoring cycle. After sys all,- Stems for clients’ use. Many credit information providers have what good is it to create an innovative application if you can’t a monitoring system that automatically alters a rating (either deploy it to test environments efficiently or deliver it to users on up or down) based on an event change – perhaps the filing schedule?of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six Traditionally, deployment automation is defined as applying a set months ago is still relevant. If your credit information pro- of application changes to an environment. Release management vider doesn’t have a monitoring system in place, shop around encompasses the governance and coordination of delivering these for a new one! And if you don’t have a credit information changes provider, through get one! environments seeking to ensure safe delivery into production. Release management and deployment automation differ but have the same objective: to continuously deliver Loopincremental in Line change asManagement quality applications to the end-user. Because release management and deployment automation have similarDon’t keep goals, that the new terms information are often you’ve used collected interchangeably. all to your- For purposesself! Liaise of with this your book, boss we andrefer other to releasesenior managementmanagement and and deploymentkeep them apprised automation about as definedthe company’s in the clients. preceding Voice your paragraph andconcerns. distinguish No one them likes as nasty required surprises! throughout Here’s the your remainder chance toof thisbecome book. a hero – or at least to say, ‘I told you so!’

Throughout the book, we give you insight into the differences between release management and deployment automation. We Continuealso show you to how Fight to leverage releaseFraud management and deploy- mentDespite automation all your duesolutions diligence, to help you your may organization still be taken speed in by time a tofraudster. market, driveFraud down happens cost, alland the reduce time, risk. and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not About Thisjust fast‐moving Book consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK WeLtd), wrote which this features book to aserve specialist as a relatively fraud-detection simple introduction team. to what can be a very complex topic. Use it as a reference, not as a manual. If you’re interested in certain topics but not in others, feel free to read only certain chapters. Also feel free to skip around. StickYou todon’t Yourhave to read Guns the chapters in order. As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts, but you’ll avoidIntroduction most of them! 1

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36IconsUnderstanding Used inCredit This Risk ForBook Dummies, Graydon Special Edition MonitorYou’ll find Customers the following icons in thewith margins aof thisCIP book: The Tip icon points out helpful information. Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either Anythingup or down) that basedhas a Remember on an event icon change is something – perhaps that the you’ll filing want toof keep new inaccounts mind. or changes in directors. Using that system can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information provider doesn’t have a monitoring system in place, shop around You don’t have to read Technical Stuff material unless you want for a new one! And if you don’t have a credit information deeper understanding of a topic. provider, get one!

LoopBe insure toLine read anything Management marked with a Warning icon, which alerts you to risk. Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your Beyondconcerns. the Book No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Throughout this book, we talk about the benefits of application deployment automation, and release management solutions. We include a few industry success stories as well as best practices. ContinueAs you begin to your Fight journey to growFraud deployment automation and releaseDespite management all your due skills, diligence, we suggest you may that still you be take taken advantage in by a of thefraudster. many assets Fraud available happens on all IBM the developerWorkstime, and no one in is the immune. Urban- CodeCommercial Developer fraud Center is a multi‐billion‐pound website: http://developer.ibm.com/ threat that shows urbancodeno signs of. Watch abating. some And of it the covers many every videos industry or read sector,the tech not tips, productjust fast‐moving documentation, consumer and how-togoods (FMCG). guides to Don’t grow becomeskills quickly. complacent. Ensure detection methods are in place or, better Youyet, canutilise also a credit find information more information provider on (such application as Graydon release UK and deploymentLtd), which by features visiting a the specialist following fraud-detection web pages: team. »» IBM DevOps: http://ibm.com/devops »» IBM UrbanCode Deploy product page: http://ibm.co/ Stick toUCDeploy Your Guns As» »aIBM credit UrbanCode professional, Release you product hold a page:great http://ibm.co/responsibility for the goodUCRelease of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 2 Applicationwon’t Release totally & Deploymentavoid bad debts,For Dummies, but you’ll 3rd IBM avoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding»» 7 Proven Credit Practices Risk For to Dummies, Strengthen Graydon Release Special Management: Edition http://ibm.co/7ProvenPractices »» The ABCs of Continuous Release and Deploy in a DevOps MonitorApproach: Customers http://ibm.co/ABCsRaD with a CIP Finally,Top‐notch you credit can read information other For providers Dummies have titles monitoring from the sysIBM- Limitedtems for Editionclients’ use.eBook Many Series. credit Visit information http://ibm.biz/devops providers have dummiesbooksa monitoring systemfor titles that such automatically as alters a rating (either up or down) based on an event change – perhaps the filing of» new» DevOps accounts For Dummies, or changes 3rd IBM in Limiteddirectors. Edition Using that system can let you know if the credit limit you set for a customer six months»» Agile agoFor Dummies,is still relevant. 3rd IBM IfLimited your creditEdition information provider»» DevOps doesn’t from have APIs a to monitoring z Systems For system Dummies, in IBMplace, Limited shop around for aEdition new one! And if you don’t have a credit information provider, get one! »» Service Virtualization For Dummies, 2nd IBM Limited Edition »» Hybrid Cloud For Dummies, IBM Limited Edition Loop in Line Management Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Continue to Fight Fraud Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts, but you’ll avoidIntroduction most of them! 3

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. IN THIS CHAPTER 36 Understanding Credit Risk» »ForLooking Dummies, at the Graydon DevOps movement Special Edition »» Understanding the business benefits of effective software delivery Monitor Customers»» Understanding with the technical a practicesCIP that accelerate application delivery Top‐notch credit information providers have monitoring systems for clients’ use.»» DiscoveringMany credit the information cultural implications providers of have a monitoring system automatingthat automatically software alters deployments a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information pro- Chapter vider doesn’t have a monitoring system in place, shop around for a new1 one! And if you don’t have a credit information What provider, Drives get one! EffectiveLoop in Line ManagementRelease and Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your Deployment?concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’

n today’s competitive world, being first to market can be the Continuedifference to between Fight success andFraud failure. For companies focused Ion developing software to achieve their business objectives, manyDespite are all exploring your due the diligence, DevOps you movement may still as be a taken way to in achieve by a morefraudster. reliable Fraud and happensrepeatable all deployment the time, and automation no one is and immune. release managementCommercial capabilitiesfraud is a multi‐billion‐pound as they work to become threat more that agileshows and eliminateno signs of waste. abating. Being And able it covers to deliver every software industry faster sector, and not at a lowerjust fast‐moving cost is a competitive consumer advantage goods (FMCG). as companies Don’t becomelook for ways tocomplacent. increase revenue, Ensure disrupt detection the marketmethods or aredeliver in place that nextor, better inno- vativeyet, utilise software a credit solution. information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Continuous Delivery and ContinuousStick to YourFeedback Guns As a credit professional, you hold a great responsibility for Whatthe good does ofContinuous your company. Delivery Never and Continuous forget that! Feedback Refuse to mean be to rushed into opening an account – even if you have the head the business? Being able to quickly and efficiently release incre- of sales breathing down your neck. Be diligent and thorough, ments of software innovation to the market shortens the time in ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’tCHAPTER totally 1avoid What bad Drives debts, Effective but you’llRelease avoid and Deployment?most of them! 5

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingunderstanding Credit how Risk end-users For Dummies, view theGraydon solution, Special use the Edition solution, and what enhancements they would like next. What a company does with this new information and how it analyzes the feedback is incredibility important. Delivering the minimal viable product Monitorand capturing Customers feedback for a release with will expose a whether CIP you are onTop‐notch the right credit track orinformation perhaps hit providers the “bull’s have eye.” monitoring This feedback sys- alsotems indicates for clients’ if there’s use. Many room credit for improvement.information providers The faster have you understanda monitoring the system sentiment that ofautomatically end-users, the alters faster a rating you can (either react andup ordeliver down) the based functionality on an event they changecrave. – perhaps the filing of new accounts or changes in directors. Using that system Unfortunately,can let you know the ifeffort the credit to deliver limit youapplications set for a is customer often plagued six withmonths numerous ago is bottlenecksstill relevant. that If yourmanifest credit themselves information as delays pro- in thevider release doesn’t cycle have due ato monitoring a variety of system reasons: in place, shop around for a new one! And if you don’t have a credit information provider,»» Manual get deployments one! and hand-offs »» Lack of environments for testing »» Inconsistency between environments Loop» in» Inefficient Line processes Management Don’t»» Reliance keep that on the new “Super-Hero” information to saveyou’ve the collected day all to yourself! Liaise with your boss and other senior management and Automatingkeep them apprisedthe deployment about theof applicationscompany’s clients.and improving Voice your how teamsconcerns. execute No one against likes thenasty release surprises! plan Here’s can reduce your thechance delays to associatedbecome a withhero manual – or at handoffs.least to say, Treating ‘I told infrastructureyou so!’ as code, including leveraging cloud technologies to stand up (or tear down) environments on demand, provides organizations the flexibility, Continuescalability, andto reliability Fight they Fraud need to succeed. Deploying with consistency across the entire delivery pipeline can help organiza- tionsDespite improve all your processes due diligence, and reduce you relying may still on bethe taken “Super-Hero” in by a tofraudster. solve production Fraud happens issues. all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows Adoptingno signs of a solidabating. automation And it covers deployment every industry solution sector, coupled not with continuousjust fast‐moving testing consumer practices enablesgoods (FMCG). the delivery Don’t team become to not only measurecomplacent. the quality Ensure of detection the software methods to be released,are in place but or, also better vali- dateyet, theutilise means a credit by which information that software provider is being (such deployed. as Graydon UK Ltd), which features a specialist fraud-detection team. Continuous Delivery is a term used to describe an approach to software development where the delivery team incrementally pro- duces new software functionality that can be released at any time. StickThis to includes Your building, Guns deploying, and testing the application to beAs released a credit with professional, greater efficiency, you hold a accuracy, great responsibility and consistency. for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 6 Applicationwon’t Release totally & Deploymentavoid bad debts, For Dummies, but you’ll 3rd IBMavoid Limited most E ditionof them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingIn a DevOps Credit world, Risk Continuous For Dummies, Delivery Graydon is complimented Special Edition by the related principal of Continuous Feedback. Continuous Feedback closes the learning loop by quickly getting information about customer experience back into the hands of business stakeholders Monitorand the deliveryCustomers team. This principle with helps toa improve CIP decision making,Top‐notch leading credit to informationpredictability providers with greater have accuracy. monitoring It is syshard- totems achieve for clients’ business use. objectives Many credit when information you don’t consider providers how have the end-usera monitoring reacts system to your that offering. automatically Success altersis not aonly rating measured (either in developingup or down) software based onbetter, an event cheaper, change and –faster, perhaps but thealso filing it must delightof new theaccounts end-users or changes who use in it. directors. Using that system can let you know if the credit limit you set for a customer six Continuousmonths ago feedback is still relevant. isn’t limited If your to credit an exchange information between pro- the businessvider doesn’t and the have end-user. a monitoring In a DevOps system worldin place, of experimentashop around- tionfor aand new learning, one! And continuous if you don’t feedback have a acrosscredit theinformation delivery pipeline provider, is critical get forone! more efficient execution during each phase of the software development life cycle. The continuous delivery and feedback cycles are shown in Figure 1-1. Loop in Line Management Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Continue to Fight Fraud FIGURE 1-1:Despite all The your Continuous due diligence, Delivery and you may still be taken in by a Continuousfraudster. Feedback Fraud happens loop. all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not Continuousjust fast‐moving Integration consumer goods and (FMCG). the Don’t become Continuouscomplacent. Delivery Ensure detection Pipeline methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. The adoption of Agile and the need to become leaner, more efficient, in the way that software is developed drove a need for continuous integration. A practice where a software change commits Stickto the to trunk, Your creating Gunsa new version of that software, triggers the execution of a build, the execution of unit tests (we hope) and As a credit professional, you hold a great responsibility for the creation of a deployable build package. This process improve- the good of your company. Never forget that! Refuse to be mentrushed through into opening automation, an account while – even helping if you the have programmers the head becomeof sales morebreathing efficient, down your exposed neck. Benew diligent bottlenecks and thorough, further out in ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’tCHAPTER totally 1avoid What bad Drives debts, Effective but you’llRelease avoid and Deployment?most of them! 7

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingthe delivery Credit pipeline. Risk ForThe Dummies, first of whichGraydon was Special delays inEdition deploying the build package for the purposes of testing.

Continuous Integration is facilitated by the use of a solution that Monitorautomatically Customers builds newly integrated with changes a CIP when they’re checked in. Often, automatic verification testing accompanies the Top‐notch credit information providers have monitoring sys- automatic build so that defects can be found and addressed faster. tems for clients’ use. Many credit information providers have This feature is especially powerful when combined with Continu- a monitoring system that automatically alters a rating (either ousup orDelivery, down) discussedbased on inan the event next change section. – perhaps the filing of new accounts or changes in directors. Using that system Deployingcan let you know what if the credit you limit have, you set for a customer six virtualizingmonths ago is still what relevant. you If your don’t credit information provider doesn’t have a monitoring system in place, shop around Eliminatingfor a new one! the And testing if you bottleneck don’t have can a credit greatly information improve one’s chances provider, of getshortening one! the delivery cycle and help organizations get their innovative software products into the hands of the end- user much faster than they could in the past.

LoopUnfortunately, in Line for manyManagement organizations, Testers could spend up to 50 percent (or more) of their time standing up test environ- Don’t keep that new information you’ve collected all to your- ments which may or may not be an accurate representation of the self! Liaise with your boss and other senior management and production environment — the environment where this software keep them apprised about the company’s clients. Voice your willconcerns. eventually No onereside. likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Organizations need to be able to start testing their software end to end much sooner to validate quality and get feedback to the programming team so that the delivery team, programmers, and Continuetesters are working to Fight in sync. Fraud ADespite deployment all your automation due diligence, solution you can may go astill long be way taken to eliminat in by a - ingfraudster. this bottleneck Fraud happens and enabling all the teamstime, and to beginno one testing is immune. earlier orCommercial shifting testing fraud tois a the multi‐billion‐pound left. Using infrastructure threat that as codeshows and blueprintingno signs of abating.to stand Andup (or it tearcovers down) every environments industry sector, on demand not canjust quickly fast‐moving provide consumer a production goods like (FMCG). test environment. Don’t become The time sinkcomplacent. testers faced Ensure is eliminated. detection Externalmethods systems, are in place or parts or, better of the systemyet, utilise that aaren’t credit yet information ready can beprovider modeled (such using as a Graydon service vir UK- tualizationLtd), which solution. features a specialist fraud-detection team.

Using a deployment automation solution which offers integration with test data management functionality, service virtualization Sticktechnologies to Your and test Gunsautomation can shorten the test cycle giv- ingAs feedbacka credit professional, on the quality you of the hold latest a great build responsibility at speeds never for seen before.the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 8 Applicationwon’t Release totally & Deploymentavoid bad debts, For Dummies, but you’ll 3rd IBMavoid Limited most E ditionof them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingImagine a Credit world Riskwhere For a codeDummies, commit Graydon from an Special application Edition devel - oper automatically triggers a build in your automated build solution. The automated build is run including the execution of unit tests. The build passes and is shared to a deployment automation Monitorsolution Customers with a CIP Top‐notch credit information providers have monitoring sys- Combined with Agile development practices, Continuous Inte- tems for clients’ use. Many credit information providers have gration is another step toward high-frequency, high-quality a monitoring system that automatically alters a rating (either releases.up or down) It allows based development on an event teams change to –produce perhaps testable the filing builds atof a new very accounts high rate. or It alsochanges puts inmore directors. pressure Using on operations that system teams tocan deploy let you more know frequently if the credit to later limit environments. you set for a customer six months ago is still relevant. If your credit information pro- A deployment automation solution integrated with the other vider doesn’t have a monitoring system in place, shop around technologiesfor a new one! delivers And if what you don’tmodern have test a teams credit need: information provider, get one! »» The ability to reset the test databases as a step in the deployment automation process »» The ability to activate virtual services and simulate missing Loop insoftware Line and services Management for end-to-end testing Don’t»» The keep ability that to newlaunch information a set of automated you’ve testscollected validating all to the yourself! functionalityLiaise with ofyour an applicationboss and otherend to seniorend management and keep them apprised about the company’s clients. Voice your Nowconcerns. stop imagining, No one likes because nasty this surprises! capability Here’s is available your chance today toin thebecome IBM UrbanCode a hero – or deployment at least to say,automation ‘I told you solution. so!’

With the right application release and deployment methods, both upstart and established companies can quickly and consistently Continuedeploy their applicationto Fight on demand. Fraud As effective software delivery isDespite a key to all becoming your due leaner diligence, and business you may success, still be takenequipping in by your a releasefraudster. and Frauddeployment happens teams all withthe time, the right and people,no one process,is immune. and toolsCommercial can make fraud the is difference a multi‐billion‐pound between threatlong-term that showssuccess and failure.no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become Decreasingcomplacent. Ensure expensive detection methods failures are in place or, better yet, utilise a credit information provider (such as Graydon UK TheLtd), cost which of a featuresdeployment a specialist failure depends fraud-detection on the environment team. in which the failure occurred. For the most part, failures in early environments, such as DEV and SIT, are far less expensive than failures in production. Finding an application error in these Stickenvironments to Your allows youGuns to make a correction that may prevent aAs critical a credit break professional, in production you —hold or a worse, great responsibility a critical breakdown for forthe users. good Forbes.comof your company. noted that Never in theforget summer that! Refuseof 2013, to Amazon be experiencedrushed into a opening 30-minute an accountoutage that – even resulted if you in have a projected the head loss ofof $66,240 sales breathing per minute, down or youralmost neck. $2 million Be diligent in total and lost thorough, revenue. ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’tCHAPTER totally 1avoid What bad Drives debts, Effective but you’llRelease avoid and Deployment? most of them! 9

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding Credit Risk For Dummies, Graydon Special Edition ESTIMATING THE MonitorCOST OFCustomers FAILURE with a CIP A failure not only can cause a loss of revenue but also can cost your organizationTop‐notch morecredit money information to fix the providers failure. You have can begin monitoring estimating sys - tems for clients’ use. Many credit information providers have the cost of failure of an application release by calculating an hour’s a monitoring system that automatically alters a rating (either pay for an engineer who is responsible for correcting the problem. A up or down) based on an event change – perhaps the filing rough calculation of additional costs is 20 percent to 40 percent of of new accounts or changes in directors. Using that system salary.can let Here’s you theknow formula: if the credit limit you set for a customer six Estimatedmonths agoannual is stillsalary relevant. / 52 weeks If peryour year credit / 40 hours information per week pro * 1.3- vider doesn’t have a monitoring system in place, shop around Iffor you a have new an one! engineer And if who you makes don’t $80,000, have a forcredit example, information a reason- able provider, estimate get of one!hourly total cost is

80,000 / 52 / 40 * 1.3 = $50

Now use this formula for every person on the recovery team, and Loopmultiply in the Line result by theManagement average number of hours spent taking cor- rectiveDon’t action.keep thatIf a six-person new information cleanup team you’ve spends collected ten hours all fi xingto your- a brokenself! Liaise release, with for yourexample, boss the and cost other is $3,000 senior for that management single release. and Thatkeep cost them is merely apprised productivity about cost,the company’showever; it doesn’t clients. account Voice for your opportunityconcerns. cost: No theone loss likes in revenue nasty surprises! or the intangible Here’s potential your chance loss of to credibilitybecome duea hero to the – orfailure. at least to say, ‘I told you so!’

The cost of failure certainly drives the need for improved applica- Continuetion release andto deployment Fight practices. Fraud In later chapters, we look atDespite ways to all prevent your due these diligence, failures youfrom may occurring. still be taken in by a fraudster. Fraud happens all the time, and no one is immune. ScalingCommercial complex fraud is a multi‐billion‐pound releases threat that shows no signs of abating. And it covers every industry sector, not andjust fast‐moving deployments consumer goods (FMCG). Don’t become Organizationscomplacent. Ensure now tend detection to have methods more deployment are in place targets or, better than everyet, beforeutilise ona credit a variety information of devices: provider local, cloud-based, (such as Graydon and physi UK- calLtd), and which virtual features machines. a specialist Scaling a highlyfraud-detection manual process team. up to an efficient, enterprise-wide system of interdependent application releases while maintaining security, traceability, and visibility is Sticka difficult to Your task. Guns TheAs anumber credit professional,of manual steps you thathold go a greatinto a responsibility single application’s for releasethe good may of your make company. up a laborious Never process,forget that! but Refuse the application to be inevitablyrushed into ends opening up in an production. account – even With if larger, you have more the complex head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 10 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most Eofdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingreleases, riskCredit grows Risk withFor Dummies, the number Graydon of interdependent Special Edition appli - cations being released. Manual processes combined with primi- tive release tracking solutions such as spreadsheets invite human Monitorerror and, Customersinevitably, costly failure. with a CIP As applications scale to enterprise complexity, release teams Top‐notch credit information providers have monitoring sys- often scale to dozens or hundreds of people, adding another layer tems for clients’ use. Many credit information providers have of complexity. When IT teams scale to manage application com- a monitoring system that automatically alters a rating (either plexity,up or down) job responsibilities based on an event and specialtieschange – perhaps become morethe filing siloed, andof new communication accounts or becomes changes less in directors. frequent as Using teams that perform system their respectivecan let you processes. know if the Silos credit occur limit due youto job set specialization for a customer as sixwell asmonths differences ago is still in relevant.time zones, If your cities, credit informationand countries. pro - Distributed teamsvider usingdoesn’t different have a monitoringsolutions and system processes in place, often shop discover around that thesefor a new differences one! And ifdouble you don’t or triple have a their credit effortsinformation and make them unable provider, to deliver get one! on time.

The coordination of each deployment, each process, and each associated set of manual steps requires herculean efforts and Loopexpensive in Line planning andManagement spreadsheet creation. Using a specialized tool that promotes visibility can help you plan more quickly, and executeDon’t keep more that fluidly new andinformation accurately. you’ve collected all to yourself! Liaise with your boss and other senior management and Ifkeep you themhave apprisedten steps aboutto deploy the company’san item to aclients. server, Voice and you your go fromconcerns. one to No ten one servers, likes nastyyou go surprises! from having Here’s ten manualyour chance steps toto havingbecome 100. a hero Then, – orif you at least go from to say, having ‘I told one you deployment so!’ item to ten items, you have another factor of ten, producing 1,000 manual steps. Manual processes won’t scale as these three levels of com- Continueplexity (number to of Fight items deployed, Fraud number of servers, and number of steps per deployment) come together to push exponential growth.Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. OrganizationsCommercial fraud that can is a establishmulti‐billion‐pound an efficient threat release that and shows deploy - mentno signs process of abating. can keep And up itwith covers the paceevery of industry development sector, and not can releasejust fast‐moving smaller batches consumer of applications, goods (FMCG). or even Don’t single become changes or versions,complacent. at a Ensuretime. Efficiency detection methodsreduces risk are inand place allows or, the better orga- nizationyet, utilise to focus a credit on timelyinformation satisfaction provider of business (such as needs Graydon instead UK ofLtd), process. which features a specialist fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’tCHAPTER totally 1 avoid What badDrives debts, Effective but you’llRelease avoidand Deployment? most of them! 11

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36EliminatingUnderstanding Creditthe Risk Release For Dummies, Weekend Graydon Special Edition and Improving Team Morale Monitor Customers with a CIP Working weekends to deploy the latest software release isn’t somethingTop‐notch on credit anyone’s information “top ten providers list” of favorite have monitoring things they sys like- totems do asfor a clients’ member use. of Manythe release credit team. information Very little providers could be have less rewardinga monitoring than system spending that the automatically entire weekend alters at thea rating office (either only to haveup or to down) roll-back based a deploymenton an event duechange to quality – perhaps issues. the However, filing thisof new is the accounts reality for or many.changes in directors. Using that system can let you know if the credit limit you set for a customer six Asmonths many agoof today’s is still softwarerelevant. deployments If your credit are information done manually, pro- an organizationvider doesn’t typically have a monitoringneeds to have system all hands in place, on deck shop to aroundexecute thefor manya new manual one! And steps if you involved don’t havein deploying a credit software information and testing provider, the quality get one! of the deployment. Often a spreadsheet is circu- lated amongst the team where each person completes specific (or collection of) tasks and signs off on that task before handing off Loopto thein next Line person on Management the list. Delays in this manual handoff process are the norm. It is because of this manual effort and manual handoffsDon’t keep a releasethat new will information often take anyou’ve entire collected weekend. all to yourself! Liaise with your boss and other senior management and Ifkeep one them step apprised is missed about or incorrectly the company’s executed, clients. the Voice entire your team jumpsconcerns. into Noaction one to likes try nastyand figure surprises! out Here’swhere the your process chance broke to down.become Revisiting a hero – steps or at andleast confirming to say, ‘I told each you step so!’ was done cor- rectly is counterproductive and unrewarding because the entire team would prefer to be spending quality time with their families.

ContinueIncreasing efficiency,to Fight accuracy, Fraud and consistency by automating deployments can essentially eliminate the dreaded weekend. The Despite all your due diligence, you may still be taken in by a Release Team is able to reduce what used to take the entire week- fraudster. Fraud happens all the time, and no one is immune. end down to a matter of minutes. As components are delivered to Commercial fraud is a multi‐billion‐pound threat that shows theirno signs target of servers abating. faster And andit covers testing every can commence industry sector, quicker not than before,just fast‐moving software quality consumer can goodsbe measured (FMCG). delivering Don’t become faster feed- backcomplacent. on whether Ensure the deploymentdetection methods is stable are enough in place to shareor, better with theyet, external utilise auser credit community, information requires provider a software (such patchas Graydon to resolve UK anLtd), issue, which or needs features to be a rolledspecialist back. fraud-detection team.

This goes a long way to improving morale, which in turn can improve employee retention for a company as teams move from Stickbeing to reactive Your to executing Guns on more proactive tasks while learning, experimenting, and getting better at deploying the software theAs businessa credit professional,depends on to you meet hold its objectives.a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 12 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most Eofdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. IN THIS CHAPTER Understanding Credit Risk» »ForRecognizing Dummies, the Graydon four pillars Special of a gold- Edition 36 standard deployment process

»» Realizing the benefits of a gold-standard Monitor Customersdeployment processwith a CIP Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information pro- Chapter vider doesn’t have a monitoring system in place, shop around for a new2 one! And if you don’t have a credit information Best provider, Practices get one! forLoop Deployment in Line Management Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and Automationkeep them apprised about and the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to Releasebecome a hero Management – or at least to say, ‘I told you so!’ Continue to Fight Fraud n this chapter, we focus on addressing both business and Despitetechnology all your drivers due bydiligence, applying you the may gold-standard still be taken deployment in by a fraudster.process. AtFraud the end happens of the allchapter, the time, we showand no how one applying is immune. these ICommercial fraud is a multi‐billion‐pound threat that shows gold-standards can increase the success rate of releases. no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better The Fouryet, utilisePillars a credit of information Gold-Standard provider (such as Graydon UK DeploymentLtd), which features a specialist fraud-detection team.

To ensure a successful application release, teams should start Stickby adoptingto Your the four Guns pillars of the gold-standard deployment process:As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed»» Use intothe same opening process. an account – even if you have the head of» sales» Automate, breathing automate, down automate. your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTER 2won’t Practices totally for Deployment avoid bad Automation debts, but and you’ll Release avoid Management most of them! 13

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding»» Deliver Credit incremental Risk For changes. Dummies, Graydon Special Edition »» Release what you test. MonitorWe discuss Customers these pillars in detail in with the following a sections.CIP UseTop‐notch the credit same information process providers have monitoring systems for clients’ use. Many credit information providers have Onea monitoring of the main system problems that withautomatically scaling application alters a rating deployments (either toup more or down) complex based scenarios on an event and changehigher –volumes perhaps is the that filing siloed teamsof new and accounts specialists or changes often create in directors. custom Using processes that tosystem fit their owncan letresponsibilities. you know if the Developers credit limit are you often set taskedfor a customer with writing six deploymentmonths ago instructions is still relevant. for operations If your credit to use information in production pro- but deployvider doesn’t to their have own a environments monitoring system using simplifiedin place, shop scripts. around The differentfor a new needsone! Andoften if youmanifest don’t in have the followinga credit information pattern: provider, get one! »» Developers want to deploy and test quickly to implement more application changes. They often create shortcuts in the deployment process by writing scripts or by skipping Loop inburdensome Line steps Management that may be required for application Don’tperformance keep that newin production. information you’ve collected all to yourself!»» TestingLiaise withteams your strive boss to mimic and theother pace senior of development management and keepteams, them butapprised they understand about the the company’s need to take clients. their time Voice in your concerns.testing Nothe oneapplications. likes nasty These surprises! teams often Here’s create your their chance own to becomedeployment a hero processes– or at least to get to say,to testing ‘I told faster you and so!’ avoid delays. »» Operations teams can tolerate a slower pace as they strive Continuefor stability. to Because Fight they’re responsibleFraud for keeping business-critical systems running, they can’t endure the risks Despite all your due diligence, you may still be taken in by a associated with rapid deployments. Their deployment fraudster. Fraud happens all the time, and no one is immune. process is designed to keep the production environment Commercial fraud is a multi‐billion‐pound threat that shows running smoothly. no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become Whencomplacent. deployment Ensure processes detection differ methods between are teams in place and or, their better tar- getyet, environments, utilise a credit the information chance of errorsprovider increases. (such asUndocumented Graydon UK steps,Ltd), whichenvironmental features differences, a specialist fraud-detectionand lack of input team.from all teams increase the chances of deployment failure.

To reduce the risk that comes from using different deploy- Stickment to processes, Your the bestGuns practice is to be consistent using the same deployment process when promoting from environment toAs environment a credit professional, throughout you the hold continuous a great responsibility delivery pipeline for to production.the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 14 Applicationwon’t Release totally & avoidDeployment bad debts, For Dummies, but you’ll 3rd IBM avoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingConsistency Credit in Riskhow Fordeployments Dummies, Graydonare performed Special Editionresults in increased confidence as you are now testing both the application and the deployment process. MonitorAutomate, Customers automate, with automate a CIP ManualTop‐notch or half-scripted credit information steps inproviders a deployment have monitoringprocess increase systems for clients’ use. Many credit information providers have the risk of deployment failure. Even skilled operators make mis- a monitoring system that automatically alters a rating (either takes, and error is more probable when humans must run through up or down) based on an event change – perhaps the filing a long list of manual steps. A deployment process (automated or of new accounts or changes in directors. Using that system manual)can let you should know include if the predefined credit limit qualityyou set gates for aor customer approvals six that amonths team must ago perform is still relevant. or meet forIf your the deployment credit information to enter prothe -next stage.vider doesn’tBy automating have a monitoringthe deployment system process in place, (or atshop least around what youfor acan new of one!it), you And may if you add don’t compliance have a creditand auditability information through increased provider, visibility get one! into

»» What components are included in the deployment Loop» in» Who Line deployed whatManagement application »» Where was the application deployed Don’t keep that new information you’ve collected all to yourself!»» WhatLiaise version with your of the boss application and other was deployedsenior management and keep»» When them the apprised application about was the deployed company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to There’sbecome a adifference hero – or betweenat least toautomating say, ‘I told and you writing so!’ a few scripts that an expert still has to kick off. True automation removes risks of changing parts and allows authorized stakeholders to kick off a deployment with the click of a button. In addition, true automa- Continuetion provides to self-service Fight deployment Fraud capabilities, visibility, and traceability.Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. DeliverCommercial incremental fraud is a multi‐billion‐pound changes threat that shows no signs of abating. And it covers every industry sector, not Thejust third fast‐moving pillar of consumera gold-standard goods deployment (FMCG). Don’t process become is making incrementalcomplacent. application Ensure detection changes. methods Deploying are onlyin place what or, changed better meansyet, utilise being a able credit to deployinformation more often provider and on(such demand as Graydon while low UK- eringLtd), risk.which This features reduction a specialist in risk comes fraud-detection from deploying team. only what has changed, implementing quality gates to ensure a certain level of quality is met prior to deploying into the next environment, and automating an approval process. These smaller deployments Stickare usuallyto Your faster as well.Guns As a credit professional, you hold a great responsibility for If you’re using the same process for every deployment, making the good of your company. Never forget that! Refuse to be small application changes is both possible and desirable. Smaller rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTER 2won’t Practices totally for Deployment avoid bad Automation debts, but and you’ll Release avoid Management most of them! 15

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingapplication Credit changes Risk should For Dummies, be easy toGraydon pass through Special testing Edition envi - ronments and into production environments.

When you’re performing incremental changes, you may not be Monitorusing the Customerscomplete deployment process.with To amake CIP incremental changes, set up the gold-standard deployment process that runs Top‐notch credit information providers have monitoring sys- only the steps required to deploy what has changed. tems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either Releaseup or down) what based on you an event test change – perhaps the filing Inof mostnew accountssoftware shops,or changes it’s assumed in directors. that youUsing will that test system a change beforecan let releasing you know it ifinto the production.credit limit youHowever, set for release a customer managers six months ago is still relevant. If your credit information pro- often learn late in the testing cycle that one component of a larger vider doesn’t have a monitoring system in place, shop around system will not be ready to ship. Other teams may say that they for a new one! And if you don’t have a credit information can still release without the updates from the component that provider, get one! won’t ship. Often they will be correct. Other times issues will sur- face in production. LoopFor inexample, Line the Inventory Management Tracker component of an e-commerce application might be held back while updates to the Shopping Cart componentDon’t keep arethat cleared new information for release. you’ve This pillar collected demands all to that your- the releaseself! Liaise manager with ensureyour boss that and Shopping other seniorCart component management be tested and againstkeep them the prior apprised version about of the the inventory company’s tracker clients. before Voice releasing. your concerns. No one likes nasty surprises! Here’s your chance to Thisbecome may abe hero non-obvious. – or at least In to an say, integrated ‘I told you system so!’ many of the tests are implicitly validating the Shopping Cart and Inventory Tracker work together. The testing up to this point may have only validated that the version of the Inventory Tracker that won’t ship Continueworks with theto Shopping Fight Cart. NobodyFraud may have actually tested theDespite interaction all your between due diligence, old Tracker you may and still new be Cart. taken To in releaseby a withoutfraudster. the Fraud additional happens testing all thewould time, mean and releasingno one is somethingimmune. untestedCommercial and exposefraud is the a multi‐billion‐pound business to additional threat risk. that shows no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become The Positivecomplacent. Effects Ensure detection of methodsGold-Standard are in place or, better yet, utilise a credit information provider (such as Graydon UK DeploymentLtd), which features a specialist fraud-detection team.

Employing the four pillars of a gold-standard deployment pro- Stickcess to(see theYour preceding Guns section) can help you begin to align your organization’s business needs with its technical needs, which can haveAs a positivecredit professional, effects on the you application hold a great release. responsibility This section for dis- cussesthe good some of ofyour those company. effects. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 16 Applicationwon’t Release totally & avoidDeployment bad debts, For Dummies, but you’ll 3rd IBM avoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding Credit Risk For Dummies, Graydon Special Edition AVOIDING THE MONDAY MonitorMORNING Customers EFFECT with a CIP The Monday Morning Effect occurs the Monday following a major releaseTop‐notch weekend credit where information the release providersteam may face have numerous monitoring prob -systems for clients’ use. Many credit information providers have lems, such as a break in production or defects in the application. The a monitoring system that automatically alters a rating (either release team is required to take heroic, immediate corrective action. up or down) based on an event change – perhaps the filing Restarting the release, correcting the mistake or mistakes, and ruling of new accounts or changes in directors. Using that system outcan other let you possibilities know if without the credit incurring limit a yousubstantial set for system a customer outage six aremonths nearly agoimpossible. is still Torelevant. avoid the If Mondayyour credit Morning information Effect, deplo proy- - mentsvider mustdoesn’t be automated have a monitoring and consistent, system changes in place, should shop be intro around- ducedfor a incrementally,new one! And and if yourelease don’t activity have must a credit be visible information to everyone involved provider, with get the one! release.

LoopAutomating in Line Managementand using the same deployment process Don’t keep that new information you’ve collected all to your- Whenself! Liaise you use with the your same boss automated and other deployment senior management process across and multiplekeep them application apprised lifeabout cycles, the company’s you greatly clients. affect Voice the your overall releaseconcerns. in a Nopositive one likesway. nastyThe release surprises! is less Here’s error-prone your chance and takes to muchbecome less a time hero to – perform.or at least to say, ‘I told you so!’ Performing incremental releases ContinuePerforming ato large Fight deployment canFraud be risky by itself, but deploying a large release of dependent applications is even more danger- ous.Despite By deploying all your due small diligence, batches ofyou change, may still teams be takencan minimizes in by a riskfraudster. while making Fraud happensthe deployments all the time, easier and to manage.no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows Tono release signs of and abating. deploy And on demand,it covers youevery must industry have asector, streamlined not processjust fast‐moving in place. consumerFor this reason, goods continuously(FMCG). Don’t improving become your standardcomplacent. deployment Ensure detectionprocess and methods automating are in error-prone place or, better tasks areyet, the utilise keys a to credit successful information incremental provider deployments (such as Graydonand smooth UK releases.Ltd), which features a specialist fraud-detection team. Managing defects and decreasing risk StickThere to are Yourthree contributors Guns to defects: code, configuration, and complexity.As a credit Complexityprofessional, here you refers hold to a greatthe number responsibility of interdepen for - dencies,the good or of relationships, your company. in the Never release forget package. that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTER 2won’t Practices totally for Deployment avoid bad Automation debts, but and you’ll Release avoid Management most of them! 17

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingWhereas Credit code andRisk configurationFor Dummies, Graydon defects Special increase Edition risks lin- early as batch sizes increase, complexity defects increase risks quadratically.

MonitorFor organizations Customers that use manual withdeployment a processes CIP or slow releases to gain better control of quality, the risk of failure has Top‐notch credit information providers have monitoring sys- grown exponentially. Larger release batches laden with interde- tems for clients’ use. Many credit information providers have pendent applications carry the risk of multiple failures. Using the a monitoring system that automatically alters a rating (either sameup or deployment down) based process on an and event automating change – manual perhaps tasks the increases filing efficiencyof new accounts while loweringor changes the in potential directors. for Usingerror, thatdelivering system incre - mentalcan let changes you know at aif higher the credit frequency limit you also set contributes for a customer to reducing six riskmonths to the ago business. is still relevant. If your credit information provider doesn’t have a monitoring system in place, shop around Releasefor a new one! what And if you don’t test have a credit information provider, get one! We strongly suggest readers follow this simple rule when it comes to testing a release: The Granularity of Release Equals the Granu- larity of Test. In simpler terms, adopting this rule means that if Loopit needsin toLine be tested Management together, it needs to be released together. This implies that integration testing is now a necessity to ensure thatDon’t all keep the partsthat newof a informationcomposite application you’ve collected are proven all to to your- work together —self! Liaise thewith changed your boss and andunchanged other senior pieces — management the entire comand- positekeep thembusiness apprised application about can the only company’s be deployed clients. with Voice confidence your concerns. No one likes nasty surprises! Here’s your chance to as one unit. become a hero – or at least to say, ‘I told you so!’ If teams are deploying multiple dependent applications as part of a release, they then must rely on system integration testing to Continueensure these toindividual Fight applications Fraud also work together as a cohe- sive unit. Managing this type of release becomes even more chal- lengingDespite as all the your application due diligence, dependencies you may not still only be increase taken in the by size a offraudster. the release Fraud but also happens the amount all the of time, risk andassociated no one to is the immune. release. Commercial fraud is a multi‐billion‐pound threat that shows Oneno signsdoesn’t of abating.have to look And that it covers far back every in time industry to remember sector, notsome storyjust fast‐movingon the Internet consumer sharing goods details (FMCG). of a software Don’t become release that wentcomplacent. poorly and Ensure the impact detection it had methods on the business.are in place However, or, better the levelyet, utiliseof risk acan credit be reduced information if this provider larger release (such unit as Graydon is a known, UK versionedLtd), which set features of interrelated a specialist applications fraud-detection which have team. been tested and proven to work together delivering a sufficient level of quality to minimize potential impact to the business. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 18 Applicationwon’t Release totally & avoidDeployment bad debts, For Dummies, but you’ll 3rd IBM avoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. IN THIS CHAPTER Understanding Credit Risk» »ForUnderstanding Dummies, Graydon and preparing Special for Edition 36 changes

»» Choosing the deployment automation Monitor Customerssolution that’s with right for youa CIP »» Selecting the right Release Management Top‐notch credit informationsolution for providers your organization have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information pro- Chapter vider doesn’t have a monitoring system in place, shop around for a new3 one! And if you don’t have a credit information The provider,Next get one! Step in ApplicationLoop in Line Management Deployment Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and Automationkeep them apprised about and the company’s Release clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to Managementbecome a hero – or at least to Adoption say, ‘I told you so!’ Continue to Fight Fraud anaging your application, or multiple applications, Despite throughall your duethe diligence,delivery pipeline you may with still automation,be taken in bywhile a fraudster.orchestrating Fraud happens and allcoordinating the time, andthe nooverall one isrelease immune. pro- MCommercial fraud is a multi‐billion‐pound threat that shows cess requires a change in process, evolving roles, and specialized no signs of abating. And it covers every industry sector, not tools. While application deployment automation and release just fast‐moving consumer goods (FMCG). Don’t become managementcomplacent. solutionsEnsure detection are designed methods to get are applications in place or, to better cus- tomersyet, utilise as quickly a credit as informationpossible, your provider delivery (suchprocess as itself Graydon must UK be evaluated,Ltd), which including features one’s a specialist role in thatfraud-detection process, to use team. those tools effectively.

In this chapter, we discuss how to prepare your organization for Stickthe changesto Your that deployment Guns automation and release management solutions will introduce. Then we present basic criteria for evaluatingAs a credit these professional, solutions. you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 3 Deployment totally avoid Automation bad debts, and Release but you’ll Management avoid most Adoption of them! 19

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36UnderstandingUnderstanding Credit Riskand For PreparingDummies, Graydon Special Edition for Changes Monitor Customers with a CIP Before you begin to look for a solution, remember the goals of deploymentTop‐notch creditautomation information and release providers management have monitoring solution sysfrom- thetems business for clients’ perspective: use. Many Speed credit time information to market with providers less risk have and cost —a monitoring increasing system the frequency that automatically of software alters delivery a rating with increased (either end-userup or down) satisfaction, based on reduced an event time change to feedback, – perhaps reduced the filing manual labor,of new and accounts fewer errors or changes with higher in directors. quality. Also,Using recall that thesystem goal of deploymentcan let you automationknow if the andcredit release limit managementyou set for a customersolutions from six themonths technical ago isperspective: still relevant. Achieve If your repeatable, credit information reliable, auditable pro- processes —vider doesn’t defining have a monitoringa consistent system process in to place, be used shop by aroundmultiple for a new one! And if you don’t have a credit information people or teams, executed repeatedly with very few (or no) errors, provider, get one! implementing well defined quality and user controls. Achieving both business and technical goals requires acknowledging the changes required for individual team members, interactions, pro- Loopcesses, in andLine solutions. Management Acclimating your people to the proposed cultural changes may be the longest and most difficult step in the implementationDon’t keep that process,new information but it’s required you’ve collected for streamlined, all to your- fully automatedself! Liaise deployments with your boss and and well-managed other senior releases. management and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to Definingbecome a hero roles – or at leastand to identifying say, ‘I told you so!’ changes in responsibilities Some of the most important changes you’re going to be mak- Continueing involve individualto Fight team member’s Fraud tasks and the interactions among team members. Taking a note from the Agile Manifesto, youDespite and yourall your team due members diligence, should you maybe ready still beto adjusttaken inmethods by a offraudster. interaction, Fraud the happens frequency all of the those time, interactions, and no one and is immune. who they interactCommercial with. fraudThey must is a multi‐billion‐pound also be ready to accept threat automation that shows solu - tionsno signs and theof abating. new roles And that it they covers will every play within industry the sector,organization. not just fast‐moving consumer goods (FMCG). Don’t become Discusscomplacent. changing Ensure team detection members’ methods roles and are responsibilities in place or, better with managementyet, utilise a creditto get informationtheir buy in. provider This is critical(such asin Graydonhelping theUK employeesLtd), which accept features that a thespecialist automation fraud-detection solutions will team. help them perform their day-to-day job responsibilities. It is important that both management and the delivery team members understand Stickthat tothe solutionYour isn’t Guns meant to replace human talent; instead, it’s used to help facilitate the outcome the organization wants toAs achieve a credit by professional, reducing the you amount hold aof great risky responsibility repetitive tasks for and enablingthe good team of your members company. to focus Never on forget the tasks that! that Refuse require to be more creativerushed thinking.into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 20 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd IBMavoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingTry to find Credit an internal Risk For (ideally, Dummies, executive) Graydon champion Special Editionwho sees the benefits associated with the change. He or she can present the business objectives and share how the entire team contributes to achieving those objectives often provides focus, support, and per- Monitorspective onCustomers the long-term effects with of the asolution. CIP An executive championTop‐notch who credit is on information board with providers the new solution have monitoring gives manage sys-- menttems a for chance clients’ to hear use. the Many benefits credit from information someone providers who can providehave nota monitoring only financial system support that automaticallybut also air cover alters during a rating the transition (either whenup or there down) are based inevitable on an bumps event inchange the road. – perhaps the filing of new accounts or changes in directors. Using that system Youcan shouldlet you introduce know if the this credit cultural limit shift you of set evolving for a customer roles as early six asmonths possible. ago Chapter 4 is still relevant. gives you If youra rough credit idea information of how long pro various- changesvider doesn’t may take. have a monitoring system in place, shop around for a new one! And if you don’t have a credit information Modifying provider, get one! process to increase effectiveness and efficiency In a DevOps approach to software development, continuous Loopexperimentation in Line and Management learning is one of the underlying principles. FromDon’t these keep experimentsthat new information and learning you’ve exercises, collected individuals all to your- and interactionsself! Liaise withmay yourevolve boss to achieve and other business senior needs management or goals. andThis maykeep also them mean apprised that day-to-day about the businesscompany’s functions clients. change. Voice yourWhen introducingconcerns. No the one solution likes younasty want surprises! to use, be Here’s aware your that chanceyou’ll face to somebecome resistance. a hero –Keep or at your least team to say, motivated ‘I told you while so!’ executing in a no-blame culture. While encouraging this cultural shift of continuous experimentation and continuous learning, organizations must be prepared and plan for periods of troubleshooting. Getting Continuethrough the tofirst Fightmajor project Fraud using the solution and continu- ouslyDespite testing all your the dueprocess diligence, to achieve you greatermay still efficiency be taken in will by aforce everyonefraudster. to Fraud challenge happens the new all the solution time, andand nonew one process. is immune. How- ever,Commercial lessons learnedfraud is along a multi‐billion‐pound the way will drive threat out ways that teams shows can becomeno signs more of abating. effective And and it coversefficient every in industryhow they deliversector, software. not Teamsjust fast‐moving must also consumerremember goods to constantly (FMCG). review Don’t becometheir process lookingcomplacent. for opportunities Ensure detection to optimize. methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Which Deployment Automation SolutionStick toIs RightYour for Guns You? ApplicationAs a credit professional,deployment automationyou hold a greatsolutions responsibility manage applifor - cationthe good components of your company. (and their Never versions), forget track that! whichRefuse version to be is deployedrushed into to which opening environment, an account and– even log ifwho you deployedhave the whathead to of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 3 Deployment totally avoid Automation bad debts, and Release but you’ll Management avoid most Adoption of them! 21

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingwhere. Due Credit to the Risk complexity For Dummies, of today’s Graydon applications, Special Editionthese solu - tions are essential in achieving continuous delivery. MonitorSupporting Customers current and with a CIP future technologies Top‐notch credit information providers have monitoring sys- Whentems foryou’re clients’ looking use. Manyfor a creditdeployment information automation providers solution, have dependinga monitoring on yoursystem business that automatically goals, you should alters seek a ratingout a solution, (either whichup or down)not only based supports on an deployment event change to –your perhaps current the environfiling - mentsof new but accounts also has or the changes following in directors.capabilities: Using that system can let you know if the credit limit you set for a customer six months»» Reuses ago deployment is still relevant. processes If your across credit environments information provider doesn’t have a monitoring system in place, shop around Coordinates application deployments across multiple tiers for» »a new one! And if you don’t have a credit information provider,»» Integrates get one!with existing technologies »» Easily extendable to support future technologies »» Provides role-based security and approval gates Loop» in» Maintains Line logs ofManagement all commands executed in deployments Don’t»» Tracks keep who that deployed new information which version you’ve of a certaincollected deployable all to yourself! artifactLiaise withto which your target boss and other senior management and keep them apprised about the company’s clients. Voice your Deploys infrastructure, middleware, database, networking concerns.»» No one likes nasty surprises! Here’s your chance to and storage configurations (Infrastructure as Code) become a hero – or at least to say, ‘I told you so!’

Prioritize the features that your organization needs most to achieve the desired business goal. Your organization may want to Continueensure auditability to Fight and governance, Fraud for example, or to minimize the effort required to pass audits. In such a case, the solution’s capabilityDespite all to your provide due role-baseddiligence, you security may stilland bemaintain taken in deploy by a - mentfraudster. logs is Fraud more happensimportant all than the itstime, other and capabilities. no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not Provisioningjust fast‐moving consumer environments goods (FMCG). onDon’t demand become Withcomplacent. Cloud rolling Ensure in detectionand becoming methods critical are in in an place organization’s or, better abilityyet, utilise to deliver a credit software information innovation provider with speed, (such the as daysGraydon of wait UK- ingLtd), for which physical features infrastructure a specialist to befraud-detection ordered, shipped, team. installed, wired in, configured, and made available for use are quickly dis- appearing. Deployment automation solutions now need to offer Stickthe tocapability Your of provision Guns these environments with minimal effort and at a lower cost eliminating one of today’s biggest deliv- eryAs bottlenecks.a credit professional, Hello “Infrastructure you hold a greatas Code.” responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 22 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd IBMavoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding Credit Risk For Dummies, Graydon Special Edition SUCCESSFUL DEPLOYMENT WITH MonitorIBM URBANCODE Customers DEPLOY with a CIP A financial organization was developing a new trading platform to serveTop‐notch as the lifeblood credit information of the organization. providers The development have monitoring team systems for clients’ use. Many credit information providers have used Agile development practices to produce results faster, but the a monitoring system that automatically alters a rating (either process of deploying applications across hundreds of servers con- up or down) based on an event change – perhaps the filing sisted of a mostly manual operation with customization required for of new accounts or changes in directors. Using that system eachcan application.let you know Introducing if the credit Agile developmentlimit you set practices for a customer actually six causedmonths changes ago is to still build relevant. up for the If operations your credit team, information whose deploy pro- - mentvider process doesn’t wasn’t have equipped a monitoring to handle system frequent in changes.place, shop This probaround- lemfor eventuallya new one! brought And ifdevelopment you don’t haveto a halt. a credit information The provider, financial get institution one! still wanted to achieve the benefits of Agile development methodologies. After carefully evaluating numerous solutions, the organization replaced its manual deployment practices Loopwith in IBM UrbanCodeLine Deploy,Management which provided several benefits: •Don’t Deployment keep that times new went information from three daysyou’ve to two collected hours. all to your- •self! The Liaise organization with your saved boss more and than other $2 million senior in the management first year alone and keepby eliminating them apprised the cost about of manual the company’sdeployments. clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to •become The organization a hero – achieved or at least compliance to say, ‘Iand told gave you teams so!’ a self- service option for deploying applications.

ContinueInfrastructure to as CodeFight is a concept Fraud where environment patterns or “blueprints” are constructed pre-defining what an environ- mentDespite should all your contain due ordiligence, provide. youThese may blueprints still be taken are then in by used a fraudster. Fraud happens all the time, and no one is immune. to provision on demand. From a click of a button, teams can now Commercial fraud is a multi‐billion‐pound threat that shows stand up complete and realistic environments leveraging cloud no signs of abating. And it covers every industry sector, not technologies and virtual computing resources. This capability just fast‐moving consumer goods (FMCG). Don’t become goescomplacent. a long way Ensure to on-boarding detection new methods resources, are in reducing place or, the better typi- calyet, dev/test utilise environmenta credit information availability provider bottlenecks, (such andas Graydon eliminating UK scalabilityLtd), which and features stability a issuesspecialist in production. fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 3 Deployment totally avoid Automation bad debts, and Release but you’ll Management avoid most Adoption of them! 23

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36SelectingUnderstanding the Credit Right Risk For Release Dummies, Graydon Special Edition Management Solution for You Monitor Customers with a CIP The management of a release isn’t a trivial matter. Understand- ingTop‐notch the dependencies credit information between applications providers have and makingmonitoring sure sys that- thetems correct for clients’ version use. of eachMany is credit released information into each providersenvironment have in aa timely monitoring manner system while that offering automatically visibility altersthroughout a rating the (either deploy- mentup or process down) based — end on to an end event — change can be the– perhaps difference the filing between delightingof new accounts customers or changes with new in directors. business Usinginitiatives that systemor losing money.can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information provider doesn’t have a monitoring system in place, shop around Wefor a don’tnew one! need And if you no don’t stinkin’ have a credit spreadsheets information Planning, provider, managing, get one! and executing a major application release is typically done with the help of spreadsheets or release documents that dictate the tasks, their owners, and the sequence required for a successful release. The problem with executing a release in Loopthis in manner Line is that there’sManagement no way of tracking who did what, what codeDon’t was keep deployed that new where, information and when you’ve the release collected happened. all to yourself! Liaise with your boss and other senior management and Releasekeep them management apprised about solutions the company’s are designed clients. to helpVoice in your the planningconcerns. and No executionone likes nastyof a release surprises! by providingHere’s your collaborative chance to releasebecome planning a hero – thator at encompasses least to say, ‘Iapplication told you so!’ and infrastructure changes. Ideally, a solution provides full visibility into the release process as well as end-to-end planning and execution Continuecapabilities. to Fight Fraud When evaluating a release coordination solution, you should searchDespite for all a yoursolution due that diligence, can do theyou following: may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows Streamline the release of multiple applications in a release no» »signs of abating. And it covers every industry sector, not just»» Updatefast‐moving the release consumer plan on goods the fly (FMCG). Don’t become complacent.Display the Ensure progress detection of the release methods in real are time in place or, better yet,»» utilise a credit information provider (such as Graydon UK Ltd),»» Track which changes features in applications a specialist and fraud-detection infrastructure team. »» Notify stakeholders of release escalation Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 24 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd IBMavoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding»» Sequence Credit and Risk coordinate For Dummies, automated Graydon activities Special and manual Edition activities in the release workflow, all relationships among activities, and all related communications to people and Monitorautomated Customers systems with a CIP »» Automatically promote applications that meet the entrance Top‐notchcriteria ofcredit lower information environments providers have monitoring systems for clients’ use. Many credit information providers have Althougha monitoring doing system so isn’t that necessary, automatically it’s advisable alters ato rating use a (eitherdeploy- mentup or automation down) based solution on an with event your change release – managementperhaps the solution.filing Justof new as applicationaccounts or release changes and in deployment directors. Usingsolutions that often system work togethercan let you toward know the if samethe credit goal, limitrelease you management set for a customer and deploy six - mentmonths automation ago is still solutions relevant. often If your work credit together information to help buildpro- an automatedvider doesn’t delivery have pipeline. a monitoring Release system management in place, solutions shop around inte- gratefor a withnew deploymentone! And if youautomation don’t have solutions a credit to kickinformation off automated deployments provider, get of one! multiple applications during release time. Understanding the impact of change LoopWhen in multiple Line applications Management are included in a release, it’s extremelyDon’t keep important that new toinformation know if all you’ve the changes collected in alleach to your-of the applicationsself! Liaise with has beenyour successfullyboss and other completed. senior managementManually tracking and developmentkeep them apprised work items about for theeach company’s of the applications clients. Voice and quickly your gainingconcerns. an understandingNo one likes nasty of the surprises! situation Here’sto make your that chance go/no-go to decisionbecome cana hero be very– or timeat least consuming. to say, ‘I Betold sure you to so!’ investigate and select a Release Management solution that offers integration to your existing change management system. In short order, you should and need to be able to see the status of all work items for Continueall applications to that Fight make of a release.Fraud Despite all your due diligence, you may still be taken in by a Makingfraudster. Fraud the happens auditors all the happy time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows Capturing execution details for each step of the release plan, no signs of abating. And it covers every industry sector, not across all applications included in a release, goes a long way to just fast‐moving consumer goods (FMCG). Don’t become meetingcomplacent. the needs Ensure of detectionthe audit methodsteam. Providing are in placethem or,with better easy accessyet, utilise to the a creditinformation information describing provider who (suchdid or as who Graydon approved UK whatLtd), along which the features way can a easespecialist their pain.fraud-detection Having an understanding team. of what may have gone wrong along the way and sharing that you are aware and actively “working the problem” so it doesn’t repeat Stickitself to should Your decrease Gunstime to being compliant. One client shared (without solicitation) that the level of infor- mationAs a credit captured professional, in IBM UrbanCode you hold aRelease great responsibility during a pilot forproj - ectthe resulted good of in your the company.Auditors mandating Never forget the that!use of Refuse the IBM to releasebe managementrushed into openingsolution anacross account the entire – even organization. if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 3 Deployment totally avoid Automation bad debts, and Release but you’ll Management avoid most Adoption of them! 25

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding Credit Risk For Dummies, Graydon Special Edition SUCCESSFUL RELEASES WITH MonitorIBM URBANCODE Customers RELEASE with a CIP A not-for-profit organization was spending far too much time plan- ningTop‐notch and coordinating credit information releases. Team providers members have were usingmonitoring spread- sys- tems for clients’ use. Many credit information providers have sheets to track release activities and meeting multiple times to review a monitoring system that automatically alters a rating (either the plans and changes in plans. The organization wanted to achieve up or down) based on an event change – perhaps the filing better visibility into release efforts and to cut down on meeting time of new accounts or changes in directors. Using that system duringcan let the you release know process. if the Itcredit eventually limit selected you set IBM for UrbanCod a customere six Release,months the ago first is stillsolution relevant. designed If yourspecifically credit for information complex applica pro- - tionvider releases. doesn’t IBM have UrbanCode a monitoring Release enabledsystem thein place,organization shop taroundo reducefor a new release one! meetings And if byyou 50 don’t percent, have reduce a credit the length information of each meeting provider, by 50get percent, one! and add visibility to the entire release. By the end of their second release with the solution, team members had a good release template in place. By the end of the third run, the team leader who implemented the solution felt so comfortable with the Loopsolution in that Line he went onManagement vacation during the release. Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Continue to Fight Fraud Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 26 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd IBMavoid Limited most Edition of them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. IN THIS CHAPTER Understanding Credit Risk» »ForPutting Dummies, an application Graydon deployment Special Edition 36 automation solution to work

»» Introducing a release management Monitor Customerssolution with a CIP Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information pro- Chapter vider doesn’t have a monitoring system in place, shop around for a new4 one! And if you don’t have a credit information Rolling provider, Outget one! Solutions Loop in Line Management fter your organization selects the best application release Don’t keep that new information you’ve collected all to your- and deployment solutions for its needs (see Chapter 3), self! Liaise with your boss and other senior management and you face the task of implementing those solutions. This Akeep them apprised about the company’s clients. Voice your chapterconcerns. gives No you one some likes pointers. nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Putting the Continuous Delivery PuzzleContinue Together to Fight Fraud Despite all your due diligence, you may still be taken in by a Deploymentfraudster. Fraud automation happens and all release the time, management and no one tooling is immune. fits into aCommercial broader DevOps fraud tool is achain multi‐billion‐pound focused on continuous threat thatdelivery. shows The deploymentno signs of abating.automation And solution it covers in every particular industry is dependent sector, not on actuallyjust fast‐moving having something consumer to goodsdeploy. (FMCG). Deployment Don’t automation become and releasecomplacent. management Ensure tooling detection fits methods into a broader are in placeDevOps or, tool better chain focusedyet, utilise on continuous a credit information delivery. See provider Figure 4-1 (such for as an Graydon example UK of continuousLtd), which delivery features pipeline. a specialist fraud-detection team.

As we mention in Chapter 2, the goals of automation include traceability and visibility via a solution that tracks changing software Stickcomponents to Your from build Guns to through production release. Knowing whatAs a thosecredit things professional, are sure you helps. hold So a you great need responsibility to have the thingsfor tothe deploy good and of your know company. what is in Never them. forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts,CHAPTER but you’ll 4 Rolling avoid Out mostSolutions of them! 27

MonitorFIGURE 4-1: AnCustomers example continuous delivery with pipeline. a CIP Top‐notch credit information providers have monitoring sys- Changestems for will clients’ generally use. Manystart with credit developers information who providers deliver changes have intoa monitoring source control. system That that source automatically will then alters be built a rating into working(either softwareup or down) by a buildbased automation on an event tool change known – asperhaps a Continuous the filing Inte - grationof new (CI)accounts server. or changes in directors. Using that system can let you know if the credit limit you set for a customer six Themonths output ago of isthat still process, relevant. the If build, your willcredit need information to be stored pro some-- wherevider safedoesn’t and havemanaged a monitoring so it isn’t changedsystem in when place, you shop aren’t around looking.for a While new one! well-structured And if you don’t areas have on a a file credit share information are often used, it’s provider, best to get use one! a dedicated repository to hold deployable software. These are broadly known as Artifact Repositories. There are numerous repositories available, including open source options. LoopIBM in UrbanCode Line Deploy Management also includes a repository out of the box. Your CI server should provide traceability between changes in sourceDon’t keepcontrol that and new the information versions registered you’ve incollected your artifact all to reposi your-- self! Liaise with your boss and other senior management and tory. The application deployment automation solution will then be keep them apprised about the company’s clients. Voice your responsible for providing visibility between what is in the reposi- concerns. No one likes nasty surprises! Here’s your chance to tory and what has been deployed to the various environments — become a hero – or at least to say, ‘I told you so!’ on the servers. This simple tool-chain delivers auditable visibility from code change to product release. ContinueDevelopers workto Fighton code that’s Fraud delivered to source control. A continuous integration server transforms the code into a deployableDespite all artifact your due or “build.” diligence, The you CI servermay still ensures be taken that inthe by build a isfraudster. registered Fraud in an artifacthappens repository. all the time, The and deployment no one is automation immune. solutionCommercial is either fraud informed is a multi‐billion‐pound of the new version threat or thatdiscovers shows the version.no signs It of then abating. performs And the it covers deployments every industrythrough the sector, remaining not environments.just fast‐moving If thoseconsumer deployments goods (FMCG). need to Don’tbe coordinated become with othercomplacent. applications, Ensure a releasedetection management methods are solution in place provides or, better that greateryet, utilise level a of credit orchestration. information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. To implement a deployment automation solution successfully, you must have a consistent, reliable build process in place. If your builds are inconsistent or unreliable, deployment automation Stickmay to find Yourthe flaws ofGuns that process sooner, but the intrinsic qual- ityAs issue a credit remains. professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 28 Applicationwon’t Release totally &avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most ofEdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36ImplementingUnderstanding Credit an Risk ApplicationFor Dummies, Graydon Special Edition Deployment Automation Solution Monitor Customers with a CIP We have seen organizations be successful rolling out a deploy- mentTop‐notch automation credit solutioninformation in a providersnumber of have ways. monitoring The most syscon-- sistentlytems for successfulclients’ use. approach Many credit is to information find the right providers project, have at the righta monitoring time, with system the healthy that automatically infrastructure. alters In thisa rating section, (either you alsoup or look down) at some based pitfalls on an and event how change to avoid – them.perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six Choosemonths ago the is still ideal relevant. time If your for credit deployment information pro- Whenvider you’redoesn’t moving have a forward monitoring with system the implementation, in place, shop your around two majorfor a newchallenges one! And are if overcoming you don’t have resistance a credit from information your team and finding provider, the get project one! or application that has the qualities you need for automation. These two challenges are intertwined. Choos- ing the wrong application for automation creates resistance, and automation that’s poorly planned or poorly documented is likely Loopto fail.in Line Management Don’t keep that new information you’ve collected all to your- Theself! best Liaise practice, with your therefore, boss and is to other choose senior the right management time to deploy and thekeep application them apprised or project about in question.the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to Onebecome ideal atime hero is – duringor at least a greenfield to say, ‘I toldproject, you when so!’ a new application has a deployment plan that requires automation. An ideal project would be one that is important, under heavy development, Continueand in need ofto help. Fight Fraud You have to take a deep look to tell whether your project or appli- cationDespite is all ready your for due automation. diligence, you Ideal may applications still be taken have in a by well- a documented,fraudster. Fraud repeatable happens deployment all the time, process. and no If you’reone is lookingimmune. at aCommercial greenfield fraudproject, is it a multi‐billion‐poundmay use an application threat that’s that similar shows to a previouslyno signs of released abating. application, And it covers or itsevery existing industry deployment sector, not plan canjust simply fast‐moving be moved consumer to the automationgoods (FMCG). solution. Don’t The become same rules applycomplacent. to an established Ensure detection project. If methods you have are a manual in place deployment or, better yet, utilise a credit information provider (such as Graydon UK process in place and are feeling pressure to deliver faster, you can Ltd), which features a specialist fraud-detection team. move the process to an automation solution.

Figure 4-2 shows the tasks that you should be thinking about to Stickget anto idea Your of how to planGuns and roll out your solutions. As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts,CHAPTER but you’ll4 Rolling avoid Out mostSolutions of them! 29

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding Credit Risk For Dummies, Graydon Special Edition Monitor Customers with a CIP Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either FIGURE 4-2:up or down) An example based ofon an an implementation event change and – rollout perhaps timeline. the filing of new accounts or changes in directors. Using that system Ensurecan let you a know production-like if the credit limit you environmentset for a customer six months ago is still relevant. If your credit information pro- Asvider soon doesn’t as you have have a your monitoring project systemin mind, in youplace, should shop ensure around a production-likefor a new one! Andenvironment if you don’t as a have starting a credit point information for development. If provider, test environments get one! are too different, the validity of testing is questionable. Developers are famously chastised for “It works on my machine” excuses, and you don’t want to be asking, “It Loopworked in inLine Test; why Managementis it broken in Production?” This environment will likely be smaller but should use the same Don’t keep that new information you’ve collected all to your- operating systems, middleware, and configurations as the pro- self! Liaise with your boss and other senior management and duction environment. Production resources that are unavailable keep them apprised about the company’s clients. Voice your toconcerns. test environments No one likes should nasty be surprises! simulated Here’s through your service chance virtu to- alization,become aif hero possible. – or at least to say, ‘I told you so!’ For more information on service virtualization, see Service Virtualization For Dummies, IBM Limited Edition, at http://ibm. Continuebiz/devopsdummiesbooks to Fight. Fraud ADespite production-like all your due environment diligence, you improves may still the be accuracy taken in of by your a testingfraudster. for Fraudboth the happens application all the and time, deployment and no one processes. is immune. You canCommercial simplify yourfraud environments is a multi‐billion‐pound as you work threat your that way shows back to earlierno signs environments of abating. Andand removeit covers unnecessary every industry components. sector, not just fast‐moving consumer goods (FMCG). Don’t become Thecomplacent. DevOps team Ensure members detection from methods the Operations are in placegroup or,should better be broughtyet, utilise into a creditthe deployment information process provider discussion (such as very Graydon early on.UK TheirLtd), whichunderstanding features ofa specialistcorporate fraud-detectionstandards around team. technology and the configuration of that technology are key when building production-like environments. The best practice is to first con- struct the production-like environment and work backwards. StickIt would to beYour silly not toGuns tap into the knowledge and expertise of whatAs a credit that production-like professional, you environment hold a great looks responsibility like or how for it is configured —the good of your knowledge company. and Never expertise forget offered that! Refuse by the toOperations be teamrushed members. into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 30 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most ofEdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingThis shift Creditin thought Risk andFor Dummies,process is Graydonthe essential Special goal Edition of DevOps. It forces Development to collaborate with Operations, with both groups taking each other’s concerns into consideration throughout the SDLC instead of just at deployment time. Development Monitorthen has Customers access to production environmentwith a expertise, CIP which enablesTop‐notch them credit to develop information and test providers against have a more monitoring realistic syssys-- tem,tems like for the clients’ one that use. users Many will credit use. Operationsinformation teams providers also benefit have bya monitoringgetting a preview system of that how automatically their environment alters awill rating react (either to the applicationup or down) and based where on support an event enhancements change – perhaps can be themade. filing of new accounts or changes in directors. Using that system Designcan let you for know production if the credit limit firstyou set for a customer six months ago is still relevant. If your credit information pro- Ifvider you wantdoesn’t to fail,have automate a monitoring how systemdevelopers in place, deploy shop to their around test environments,for a new one! andAnd then if you try don’t to scale have that a credit toward information production. The developer provider, styleget one! deployment will often take critical shortcuts that don’t matter in development but would be catastrophic in production. The classic example is dropping the database tables and rebuilding them from scratch. In production, your data tends to Loopbe ain bit moreLine valuable. Management

Instead,Don’t keep you that want new to information create production you’ve stylecollected deployment all to your- pro- cesses,self! Liaise and executewith your them boss in andthe (simpler)other senior development management environ and- mentkeep first.them It’sapprised better aboutto consider the company’s how you handleclients. a loadVoice balancer your concerns. No one likes nasty surprises! Here’s your chance to and then skip those steps in early environments, then to not con- become a hero – or at least to say, ‘I told you so!’ sider production concerns until you get there.

Working in these early environments is a good place to flex your ContinueDevOps muscles. to OperationsFight teams Fraud will be key to understanding the production deployment, while developers and testers are the keyDespite “customers” all your lookingdue diligence, for speed you and may self-service. still be taken in by a fraudster. Fraud happens all the time, and no one is immune. DesigningCommercial the fraudprocess is for a multi‐billion‐pound production first provides threat several that shows benefits: no signs of abating. And it covers every industry sector, not just»» Itfast‐moving allows teams consumer to test their goods deployment (FMCG). process Don’t before become the complacent.critical final Ensure deployment detection (see methodsthe preceding are insection). place or, better yet, utilise a credit information provider (such as Graydon UK It allows teams to refine and further streamline the process. Ltd),»» which features a specialist fraud-detection team. Automation furthers this goal by stabilizing previously manual steps in a complex process and reduces unnecessary effort in future deployments. Stick» »toIt drives Your alignment Guns between development and operations and provides an opportunity for them to work together As a credit professional, you hold a great responsibility for the goodwithout of theyour stress company. of a major Never production forget deploymentthat! Refuse event. to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts,CHAPTER but you’ll 4 Rolling avoid Out most Solutions of them! 31

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingDevelopers Credit focus Risk on testing For Dummies, their individual Graydon contributions Special Edition and the representative piece of the entire application that applies to their function in the project. For this reason, developers often don’t take into consideration or don’t know what’s needed to keep Monitorproduction Customers environments stable and with functional. a Due CIP to the mag- nitudeTop‐notch and scale credit of informationwhat needs to providers be tested have and functional monitoring in syspro-- duction,tems for the clients’ deployment use. Many process credit shouldn’t information be designed providers by teamshave thata monitoring aren’t familiar system with that the automatically production environment. alters a rating (either up or down) based on an event change – perhaps the filing Toof newfully accountsalign your or teamschanges and in facilitatedirectors. collaboration Using that system from the startcan letof ayou project, know you if the must credit recognize limit you the set importance for a customer of starting six withmonths the mostago is complicated still relevant. processes If your creditand removing information steps pro to sim- - plifyvider them. doesn’t It’s have easier a tomonitoring remove steps system than in to place, add during shop arounda crisis orfor when a new a deploymentone! And if youhas faileddon’t havein production. a credit information provider, get one! Implementing a Release ManagementLoop in Line Solution Management Don’t keep that new information you’ve collected all to your- Releaseself! Liaise management with your is boss ideal and for otherorganizations senior management that release muland- tiplekeep applications them apprised at the about same the time company’s or that desire clients. more Voice visibility your intoconcerns. a complex No onerelease likes process. nasty surprises! As we mention Here’s in your Chapter 3, chance you to canbecome use a arelease hero – managementor at least to solutionsay, ‘I told with you or so!’without deployment automation solutions.

The first decision teams need to make is whether they will imple- Continuement release to management Fight on itsFraud own or with a move to deploy- mentDespite automation. all your due While diligence, concerns you around may still tracking be taken changes in by aon theirfraudster. way to Fraud production happens will all be the similar, time, andmigrating no one manual is immune. steps fromCommercial spreadsheets fraud to is releasea multi‐billion‐pound management tool threat only that to immedishows - atelyno signs migrate of abating. them to And automation it covers can every be wasted industry effort. sector, not just fast‐moving consumer goods (FMCG). Don’t become Identifycomplacent. aEnsure realistic detection release methods are model in place or, better yet, utilise a credit information provider (such as Graydon UK ToLtd), achieve which success features with a specialista release management fraud-detection solution, team. you need to be familiar with your current process, the applications being released, and the complexity of those applications. You should start with a small release and work your way up to the release of Stickmany to applications. Your Even Guns in a small or sample release, you should still know the application(s) and feature(s) being released and whoAs a is credit involved professional, in the typical you process. hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 32 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most ofEdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingThe key to Credit this concept Risk For is Dummies,scale. You wantGraydon to begin Special with Edition the small - est logical model of a typical release process. You should use a release that, though small, will be useful in scaling up to future releases by representing your ideal process from the beginning, Monitorwhich means Customers including the people with who will bea part CIP of the most complexTop‐notch releases. credit information providers have monitoring systems for clients’ use. Many credit information providers have Don’t bog yourself down with “what-if” scenarios, because you a monitoring system that automatically alters a rating (either won’tup or bedown) able tobased predict on everythingan event change until you – perhaps actually the begin filing using theof newsolution accounts and discover or changes areas in for directors. improvement. Using You that and/or system your teamcan let should you knowfind theif the way credit to implement limit you setthe forrelease a customer management six solutionmonths thatago providesis still relevant. the greatest If your value. credit information provider doesn’t have a monitoring system in place, shop around Choosefor a new one! an And implementation if you don’t have a credit path information provider, get one! After you choose a release to serve as a baseline for future releases, you should identify a logical path toward implementation. Three main paths provide a smooth transition to the use of a release Loopmanagement in Line solution: Management

Don’t»» Use keep the that new new solution information in parallel you’ve with thecollected existing all to yourself! process.Liaise with The yourfirst bosspath is and to useother the seniorsolution management in parallel with and keep them apprised about the company’s clients. Voice your an existing release process. This path enables the release concerns. No one likes nasty surprises! Here’s your chance to team to map an existing process to the process in the become a hero – or at least to say, ‘I told you so!’ release solution while they’re both running. In practice, this means conducting a release in the legacy fashion while running the release in the new solution to see how tasks Continuediffer usingto the Fight tool. This practice Fraud not only helps the team acclimate to the idea of the new process, but also provides a Despiteno-risk all dryyour run due for diligence,first-time use,you thereby may still reducing be taken anxiety in by a fraudster.about theFraud next happens release, demonstrating all the time, and the parallelno one tasks is immune. in Commercialeach method fraud of isrelease, a multi‐billion‐pound and providing a before-and-after threat that shows no signspicture of ofabating. the process. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent.»» Conduct aEnsure post-release detection run. methodsThe second are path in placeis to conduct or, better yet, autilise post-release a credit run information by using the provider solution to (such model as a recentlyGraydon UK Ltd),completed which features release — a specialist that is, releasing fraud-detection an application team. by using the current-standard process and then using the same process to release an application with a release management solution. Much like running the solution parallel to a Stick torelease Your in progress, Guns this practice gives the team a before- As aand-after credit professional, picture of the you process hold and a great a safe responsibility way to use the for the goodsolution of foryour the company. first time. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts,CHAPTER but you’ll 4 Rolling avoid Out mostSolutions of them! 33

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingThe first Credit two Risk paths For are Dummies, exercises thatGraydon provide Special realistic Edition use cases for the solution and give team members a chance to realign their expectations and interactions. »» Dive into the deep end. The third path, which is less Monitorconservative Customers than the first two withpaths, is to divea into CIP the deep Top‐notchend and credit simply information use the new solutionproviders for havea live release.monitoring You sys- temsshould for clients’ set up use.your Manyteams forcredit success information by choosing providers a small have a monitoringrelease that system you know that they automatically can execute withalters the a solution.rating (either up orTake down) the selected based on release an event down change to its minimum – perhaps representa the filing- of newtive accounts state of complexity or changes and in give directors. it to your Usingteam as that a low-risk system can letlive youfirst know use of if the the solution. credit limit you set for a customer six months ago is still relevant. If your credit information provider doesn’t have a monitoring system in place, shop around for a new one! And if you don’t have a credit information provider, get one! Loop in Line Management Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Continue to Fight Fraud Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 34 Applicationwon’t Release totally &avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most ofEdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. IN THIS CHAPTER Understanding Credit Risk» »ForSeeing Dummies, why automation Graydon Specialcan help, Edition not 36 hinder

»» Understanding what a specific solution Monitor Customerscan and can’t with do a CIP Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information pro- Chapter vider doesn’t have a monitoring system in place, shop around for a new5 one! And if you don’t have a credit information Ten provider,Myths get one! about ApplicationLoop in Line Management Release Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and and keepDeployment them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ ometimes, the best way to understand what’s true about a concept is to understand what’s false about it. In that spirit, ContinueShere are to ten mythsFight about application Fraud deployment and release management. Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows Automatingno signs of Deployment abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become Meanscomplacent. Writing Ensure Scripts detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK AlthoughLtd), which kicking features off individuala specialist deployment fraud-detection scripts team. may work for small deployments to a few servers, that technique won’t hold up under the scale and complexity of deploying interdependent Stickenterprise to Your applications. Guns Relying on a subject-matter expert (SME) to kick off deployment As a credit professional, you hold a great responsibility for scripts puts a strain on the whole deployment team and espe- the good of your company. Never forget that! Refuse to be ciallyrushed on intothe personopening who an accountowns that – evenresponsibility. if you have If thatthe headSME is of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 5totally Ten Myths avoid about bad Application debts, but Release you’ll andavoid Deployment most of them! 35

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingunavailable Credit to kick Risk off For the Dummies, script (or Graydon is no longer Special employed Edition by the organization when a change is ready to advance), the team can miss deadlines or miss the step entirely. In addition, if the SME is responsible for running the scripts for multiple deployments, the Monitorchance of errorsCustomers increases as the likelihood with of bugsa CIPincreases with batchTop‐notch size. Then credit one information must consider providers the human have monitoringconstraints syssuch- astems fatigue, for clients’ anxiety, use. and Many nerves credit that information affect performance providers have when a persona monitoring is performing system a thatlong automaticallyseries of repetitive alters and a ratinghigh-pressure (either tasks.up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system Thecan bestlet you solution know ifis theto letcredit an applicationlimit you set deployment for a customer automa six - tionmonths solution ago isexecute still relevant. the deployments. If your credit If yourinformation chosen prosolution- (forvider example, doesn’t IBMhave UrbanCodea monitoring Deploy) system can in effectivelyplace, shop aroundintegrate withfor a your new existingone! And tools, if you you don’t should have be a creditable to information create a deploy - ment provider, process get usingone! a simple process designer that does not rely on writing scripts. Effective integration with other technologies, through plugins, and defining process steps in a drag-and-drop process designer can remove most or all scripting from your Loopdeployment in Line process. Management Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and Who Needskeep them An apprised Ops about Team? the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to Developersbecome a hero know – howor at anleast application to say, ‘I shouldtold you work so!’ but may not know how the application topology in a production environment works, because they don’t need to. Assigning the development Continueteam the job toof designing Fight a release Fraud process is likely to result in a plan that neglects key operational concerns or production-specific configurationsDespite all your duesuch diligence, as clustering, you may load still bebalancers, taken in byand a - integra tionsfraudster. with operational Fraud happens systems all thesuch time, as monitoring and no one and is immune.backup. Commercial fraud is a multi‐billion‐pound threat that shows Startingno signs to of plan abating. the deployment And it covers process every in industry collaboration sector, with not the Operationsjust fast‐moving team for consumer a production goods release (FMCG). allows Don’t the become development teamcomplacent. to test theEnsure application detection against methods a realistic are in placeproduction-like or, better environmentyet, utilise a throughoutcredit information the delivery provider pipeline. (such It asalso Graydon allows theUK developmentLtd), which featuresand operations a specialist teams fraud-detection to test the deployment team. process early and often. The best deployment processes are the result of collaboration among development, operations, and release Stickengineering. to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 36 Applicationwon’t Release totally &avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most ofEdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36ComplexUnderstanding Releases Credit Risk For Can Dummies, Be GraydonEasily Special Managed Edition without Specialized Solutions Monitor Customers with a CIP Sure, you can manage simple application releases with various methods,Top‐notch such credit as informatione-mails, run-book providers documents, have monitoring spreadsheets, sys- andtems deployment for clients’ automation use. Many creditsolutions. information The first providers three methods, have however,a monitoring don’t system provide that traceability automatically or collaborative alters a rating release (either planning,up or and down) none based of these on an methods event changecan be scaled– perhaps to accommodate the filing theof newcomplexity accounts of anor interdependentchanges in directors. enterprise Using release. that system can let you know if the credit limit you set for a customer six Althoughmonths agoit’s ispossible still relevant. to use Ifa yourdeployment credit informationautomation prosolution- tovider manage doesn’t a release, have a monitoringit’s better tosystem use a in release place, shopmanagement around solution.for a new Release one! And management if you don’t solutions have a credit are designedinformation to assist in provider, planning get and one! executing a release of multiple dependent applications by providing collaborative release planning that encom- Looppasses in both Line application Management and infrastructure changes. ContinuousDon’t keep Delivery that new information Means you’ve Constant collected all to yourself! Liaise with your boss and other senior management and Productionkeep them Releases apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Continuous Delivery (CD) isn’t continuous release. Instead, it focuses on speeding a new version through the delivery pipeline as fast as possible and then waiting for the business to decide Continuewhen to release. to TheFight same technology Fraud is used for the production deployments, but the decision is a human one. Despite all your due diligence, you may still be taken in by a Forfraudster. most organizations, Fraud happens their all automated the time, andtests no are one insufficient is immune. for validatingCommercial that fraud a new is aversion multi‐billion‐pound is ready for production. threat that For shows them, Continuousno signs of Deliveryabating. And minimizes it covers the every friction industry caused sector, by moving not versionsjust fast‐moving through consumerenvironments goods and (FMCG). maximizes Don’t the become productivity ofcomplacent. testing teams. Ensure detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Automation Compromises Controls likeStick Separation to Your of GunsDuties As a credit professional, you hold a great responsibility for Automation boosts quality because it leverages computing capa- the good of your company. Never forget that! Refuse to be bilities to consistently run repetitive tasks that can be botched rushed into opening an account – even if you have the head when performed manually. of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 5totally Ten Myths avoid about bad Applicationdebts, but Release you’ll avoidand Deployment most of them! 37

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 UnderstandingControls areCredit also Risk improved. For Dummies, The deployment Graydon Special button Edition is behind role-based security, and approval and quality-gate rules can be enforced automatically. When you have a full audit trail showing who configured a process and who ran it, you know exactly what Monitorhappened Customersat all times. with a CIP Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have A Spreadsheeta monitoring system Is a thatGood automatically alters a rating (either up or down) based on an event change – perhaps the filing Release-Managementof new accounts or changes Tool in directors. Using that system can let you know if the credit limit you set for a customer six Manymonths release ago isteams still relevant. manage toIf yourfunction credit by information using spreadsheets, pro- butvider this doesn’t method have of coordination a monitoring almost system always in place, results shop in aroundhuman errorfor a newand one!delay. And Spreadsheets if you don’t dohave enable a credit management information of the provider, get one! release process at the highest level, but they do not automate the tasks, which increases the chance of error, and they also require constant maintenance to ensure that all members of the Looprelease in team Line are on Managementtrack. Finally, as team locations vary, teams grow, and applications become more complex and inter-reliant, spreadsheetsDon’t keep that become new informationmore error-prone you’ve and collected less useful all to because your- theyself! don’tLiaise scale with with your release boss and complexity. other senior management and keep them apprised about the company’s clients. Voice your Unlikeconcerns. spreadsheets, No one likes release nasty surprises!management Here’s solutions your chance capture to interdependenciesbecome a hero – orand at determineleast to say, the ‘I mosttold youeffective so!’ deployment strategy. They also alert members of the release time when certain milestones in the process have been met or when certain Continueteam members’ to skills Fight are required. Fraud ReleaseDespite management all your due solutionsdiligence, are you highly may still advised be taken for organiza in by a - tionsfraudster. that haveFraud a happens complex releaseall the time, process and or no distributed one is immune. teams, orCommercial that have tried fraud and is faileda multi‐billion‐pound to manage their threatrelease that process shows with spreadsheets.no signs of abating. This will And also it makecovers your every auditors industry happy. sector, not just fast‐moving consumer goods (FMCG). Don’t become Releasecomplacent. management Ensure detectionsolutions canmethods be used are without in place deployment or, better automationyet, utilise asolutions, credit information but it’s advisable provider to use(such both as toGraydon reduce theUK risksLtd), associated which features with repetitivea specialist manual fraud-detection tasks and team.to speed time to market. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 38 Applicationwon’t Release totally & avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most ofEdition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36OneUnderstanding Large Release Credit Risk For Is Dummies, Less GraydonRisky Special Edition Than Several Small Ones Monitor Customers with a CIP In fact, large releases carry increasingly higher risk with the num- berTop‐notch of interdependencies credit information included providers than small, have frequentmonitoring releases sys- do.tems If you for streamlineclients’ use. the Many release credit and information deployment providersprocess by haveusing automationa monitoring solutions, system youthat free automatically your people alters to improve a rating the (either process itselfup or and down) enable based the onorganization an event change to get feedback– perhaps from the thefiling end- userof new faster accounts instead or of changesexperiencing in directors. the delays Using associated that system to having tocan perform let you highly know repetitive if the credit manual limit tasks.you set for a customer six months ago is still relevant. If your credit information pro- Smallervider doesn’t releases have have a monitoring fewer pieces system and fewerin place, independencies. shop around Errorsfor a new caused one! byAnd misunderstanding if you don’t have aor credit poorly information accounting for interdependency provider, get one! are dramatically reduced in a smaller release.

Incremental changes through true CD are the ultimate goals of any organization that wants to deliver value by delivering new Loopfeatures in atLine a faster rateManagement than its competitors do. Small, frequent changesDon’t keep delivered that new through information automation you’ve solutions collected are theall tofirst your- step inself! reducing Liaise thewith cost your and boss risk and associated other senior with traditional management releases. and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to Releasebecome Automation a hero – or at least Is to Separate say, ‘I told you so!’ from the Build Process Continue to Fight Fraud Unfortunately, until you reach the minimum requirements of a workingDespite artifactall your repository, due diligence, dependency you may management, still be taken and in byhigh- a qualityfraudster. output Fraud from happens your build all the process, time, andyou’re no notone ready is immune. to look intoCommercial deployment fraud automation. is a multi‐billion‐pound Deployment itemsthreat mustthat shows be ver - sionedno signs or of ready abating. to be And versioned it covers to every allow industry for tracking sector, of what’s not beingjust fast‐moving deployed and consumer where the goods deployment (FMCG). item Don’t is become deployed. To completecomplacent. successful Ensure releasesdetection that methods provide are visibility in place acrossor, better the entireyet, utilise delivery a credit pipeline, information you need providerto make sure (such that as dependencies Graydon UK areLtd), manageable, which features visible, a specialistand evident fraud-detection as part of your team.build process.

You usually can achieve the required minimum state with the help of a Continuous Integration (CI) server that also provides Stickversioning to Your and self-service Guns capabilities for deploying to test- ingAs aenvironments. credit professional, Manual you forms hold of aCI great can responsibilitygive you a leg forup on deploymentthe good of automation your company. but lack Never the forgetfull visibility that! Refuse that we to recom be - mendrushed achieving. into opening The primary an account goal –of even a streamlined if you have build the processhead of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 5totally Ten Myths avoid about bad Application debts, but Release you’ll andavoid Deployment most of them! 39

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingis to create Credit working Risk For builds Dummies, that are Graydon versioned Special and readyEdition to be deployed through a number of testing stages onto production.

Some application deployment automation solutions provide a Monitorversioning Customers capability with a proprietary with artifact a repository.CIP This capability allows you to skip versioning your own builds and use Top‐notch credit information providers have monitoring sys- the application deployment automation solution to incorporate tems for clients’ use. Many credit information providers have that step. One such solution is IBM UrbanCode Deploy. a monitoring system that automatically alters a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system A Backlogcan let of you Deployables know if the credit limit Doesn’t you set for a customer six months ago is still relevant. If your credit information pro- Indicatevider a doesn’t DevOps have a monitoringProblem system in place, shop around for a new one! And if you don’t have a credit information If provider, you claim get to one!be practicing CD, but your operations team is fac- ing a huge backlog from development, you have a DevOps problem, and you aren’t really practicing CD. DevOps practices and solutions help you seize market opportunities and reduce time Loopto customerin Line feedback Management by enabling true CD. When you decide to implementDon’t keep release that new and information deployment you’ve solutions, collected you should all to prepare your- toself! work Liaise in a withDevOps your culture, boss andwhich other involves senior changes management for individu and- als,keep interactions, them apprised processes, about andthe solutionscompany’s (see clients. Chapter 1 Voice for your more onconcerns. DevOps). No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ When you’ve minimized differences between development and operations environments, standardized your release and deployment process, and automated most or all of your manual tasks, Continueyou have a DevOpsto Fight solution in place.Fraud This DevOps solution accel- eratesDespite software all your delivery;due diligence, reduces you time may tostill customer be taken feedback;in by a improvesfraudster. governance; Fraud happens and balances all the time, quality, and cost, no one and is speed. immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not Releasejust Coordination fast‐moving consumer goodsSolutions (FMCG). Don’t become complacent. Ensure detection methods are in place or, better Fix All Problemsyet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. The move from a completely or mostly manual release and deployment process to an automated one is difficult, and it Stickrequires to severalYour considerations. Guns One of the most important long- term changes is in the culture of your organization. Your people andAs ainteractions credit professional, must be alignedyou hold with a great the newresponsibility method of for work the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You 40 Applicationwon’t Releasetotally &avoid Deployment bad debts, For Dummies, but you’ll 3rd avoid IBM Limited most of Edition them!

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understandingand potentially Credit shifting Risk For responsibilities. Dummies, Graydon You shouldSpecial prepare Edition your teams for the shift, expect resistance, empower them to make decisions, and remain aware of what works and what doesn’t Monitorwork for yourCustomers organization. with a CIP When you’ve selected the right project to implement applica- Top‐notch credit information providers have monitoring sys- tion deployment automation and release management capabili- tems for clients’ use. Many credit information providers have ties, your teams will have no choice but to collaborate. Preparing a monitoring system that automatically alters a rating (either themup or as down) much based as possible on an for event the change,change –however, perhaps will the make filing the transitionof new accounts easier andor changes will help in youdirectors. reach Usingyour business that system objec - tives.can let Just you as knowaddressing if the buildcredit and limit CI youissues set reduce for a customer bottlenecks six in deploymentmonths ago and is still CD, relevant.you may beginIf your to credit see other information opportunities pro- for improvementvider doesn’t in have your a monitoringSDLC after yousystem introduce in place, deployment shop around and releasefor a new solutions. one! And if you don’t have a credit information provider, get one! Loop in Line Management Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Continue to Fight Fraud Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You CHAPTERwon’t 5totally Ten Myths avoid about bad Applicationdebts, but Release you’ll avoidand Deployment most of them! 41

These materials are © 2017 John Wiley & Sons, Inc. Any dissemination, distribution, or unauthorized use is strictly prohibited. 36 Understanding Credit RiskNotes For Dummies, Graydon Special Edition Monitor Customers with a CIP Top‐notch credit information providers have monitoring systems for clients’ use. Many credit information providers have a monitoring system that automatically alters a rating (either up or down) based on an event change – perhaps the filing of new accounts or changes in directors. Using that system can let you know if the credit limit you set for a customer six months ago is still relevant. If your credit information provider doesn’t have a monitoring system in place, shop around for a new one! And if you don’t have a credit information provider, get one! Loop in Line Management Don’t keep that new information you’ve collected all to yourself! Liaise with your boss and other senior management and keep them apprised about the company’s clients. Voice your concerns. No one likes nasty surprises! Here’s your chance to become a hero – or at least to say, ‘I told you so!’ Continue to Fight Fraud Despite all your due diligence, you may still be taken in by a fraudster. Fraud happens all the time, and no one is immune. Commercial fraud is a multi‐billion‐pound threat that shows no signs of abating. And it covers every industry sector, not just fast‐moving consumer goods (FMCG). Don’t become complacent. Ensure detection methods are in place or, better yet, utilise a credit information provider (such as Graydon UK Ltd), which features a specialist fraud-detection team. Stick to Your Guns As a credit professional, you hold a great responsibility for the good of your company. Never forget that! Refuse to be rushed into opening an account – even if you have the head of sales breathing down your neck. Be diligent and thorough, ensure that everyone follows the procedures, and don’t agree to credit account facilities until you’re 100 per cent sure. You won’t totally avoid bad debts, but you’ll avoid most of them!

WILEY END USER LICENSE AGREEMENT

Go to www.wiley.com/go/eula to access Wiley’s ebook EULA.