01
The starting point
A mid-sized insurance company ran its IT mostly on-prem and was in the middle of adopting Kubernetes. The know-how had been built up alongside the rollout. Long-standing experience and best practices were missing. It was unclear whether the decisions made so far would hold up and what a long-term IT strategy should look like. At the same time, requirements from VAIT, DORA and NIS2 were on the horizon, and the systems had to keep scaling even if the number of contracts doubled.
02
Our approach
- 01 Analysis of the IT infrastructure, architecture and development process of the software in use and developed in-house
- 02 Assessment of the Kubernetes decisions made so far, based on our experience running platforms
- 03 Mapping against the requirements from VAIT, DORA and NIS2, from IT strategy and information security to identity and access management and IT operations
- 04 A target picture for the IT landscape: technology stack, scaling, resources, costs and the question of the cloud
- 05 Three experts over six months, with regular check-ins on interim results
03
The result
- A catalogue of measures with findings and concrete recommendations
- An analysis of what VAIT, DORA and NIS2 mean in concrete terms for the IT infrastructure
- A hybrid strategy: on-prem where the cloud would be too expensive, such as for the Oracle database, and cloud where redundancy is required
- A significantly improved security posture and a much better understanding of their own architecture
- Afterwards, the insurer booked our advisory, and the architecture sparring is still ongoing