Die equensWorldline SE ist ein Zahlungsabwicklungsanbieter mit Hauptsitz in Utrecht, Niedelrande. Im November 2015 gaben die Konkurrenten Equens und Worldline die Zusammenlegung des Großteils von Equens’ Aktivitäten mit den vergleichbaren Zahlungstätigkeiten von Worldline bekannt; die weiter bestehende Worldline hält 63 % an dem neuen Unternehmen. Equensworldline ist einer der größten Anbieter für Zahlungsverkehrsdienstleistungen für Finanzinstitute in Europa. Das Produktspektrum umfasst die Verarbeitung und das Clearing aller Arten von Zahlungen in Europa:
- Massen-Inlandszahlungen
- Euro-Zahlungen
- Grenzüberschreitende Zahlungen
- Großbetrags- und Eilzahlungen
- Papierbasierte oder elektronische Zahlungen
Equensworldline verarbeitet mehr als 7,5 Mrd. Zahlungstransaktionen mit einem Volumen von ca. 10 Mrd. Euro jährlich. Zu den Kunden zählen über 250 Banken, unter anderem die Commerzbank, DZ Bank, über 1000 Volks- und Raiffeisenbanken, andere genossenschaftliche Banken (z. B. die PSD- und Sparda-Banken) und die Citigroup Global Markets und mehr als 30 weitere Privatbanken. Equensworldline wickelt des Weiteren Transaktionen für ABN AMRO, Fortis, ING Bank, KBC Bank, Rabobank und OP-Pohjola Group ab.
The Challenge:
September 2019, as a PSD2 deadline is considered a significant challenge within the banking industry. Not in a long time was there any other regulation going live, which will have such an impact on the consumer market and credit card payments processing as PSD2.
equensWorldline – Identity, Trust and Authentication department is responsible for the development and securing the correct operation of own ACS platform. The ACS stands for Access Control Server, and it is one of the three pillars of the 3DS protocol (3 Domain Secure), which is set up to handle all card holder’s authentication attempts between the Merchant and the Issuer. The main challenge is the project management for a full SDLC with several issuers dispersed globally and with several projects planned for each one separately, within a complex and waterfall project environment. Among the project management responsibility, many open points need further analysis and clarification. The main subject included:
- 1, 3DS2.2 adjustments as proposed by EMVco.
- PSD2 adjustments scope for SCA
- external API management, RBA (TRA), MIT
The projects need to be done under high pressure, tight schedule, and shared resources.
The Solution:
Our expert excelled customer expectations in overtaking management of a project portfolio for end-customers (issuers) in regions: GE (Germany), CEE (Central and Eastern Europe), Nordics (Scandinavia), APAC (Asia-Pacific Area) managing over 15 full-scope projects in parallel:
- Migration of the platform from 1.0 to 3.0;
- Implementation of the 3DS2.1, 3DS2.2 protocol standards (including the requirements for the native-app-flow);
- Implementation of the RBA solution (Risk Based Authentication) for the usage of PSD2 based rulesets allowing frictionless credit card transactions;
- Implementation of the 2FA (2 Factor Authentication) solution exhausting the requirements of the European Commission;
- New issuer on-boarding incl. the responsibilities of a solution architect;
- Introduction of the Kanban Process in a complex, international waterfall environment.
Several additional measures were undertaken to support the ITA team in the peak time before PSD2 deadline go-live:
- Implementation of the SDLC process on a Kanban base with the support of JIRA, under consideration of the internal global processes and KPIs;
- Creation and maintenance of the RACI-Matrix;
- Introduction of a LEAN based project structure to support the Delivery Team with narrow deadlines;
- Implementation of reusable white-label templates and workflows;
Identification of the pain-points in daily business in all areas of SDLC, execution of the team workshop addressing those problems and establishing clear counter-measures and optimization initiatives.