MN
Back to selected work

Regulated enterprise delivery

Delivery for government and banking sector clients, and GDPR implementation.

The CVM10 programme

At SEDCO, delivery for government and banking sector clients: stakeholder engagement, requirements, solution presentation, and delivery across multi month engagements.

GDPR for UK and US cloud operations

Implementing GDPR across UK and US cloud operations: account security controls, data location transparency, and retention policy.

Architecture view

Business domain: government and banking sector clients, where requirements are agreed with stakeholders and solutions are presented and defended. Data domain: personal data under GDPR, with data location transparency and retention policy as explicit design constraints. Application domain: the CVM10 programme. Technology domain: UK and US cloud operations.

As Is: account security, data location and retention treated as implicit properties of the platform. To Be: each one an explicit control with evidence attached. Governance: engagements lasting several months in which the evidence, not the speed, is the deliverable.

Why regulated delivery is a different discipline

Shipping features rewards speed. Regulated delivery rewards evidence: requirements agreed with stakeholders, solutions presented and defended, and multi month engagements where trust is part of the deliverable.