Meetings
- Development
- Scrum, with two-week-sprints
- Ceremonies
- Per Sprint
- Sprint Planning
- Retrospective
- Weekly Backlog Grooming
- Daily Stand-Up
- Git Flow branching strategy
- OSS pull request model using GitHub for code review
- Clickup for tracking & documentation
- QA & Testing
- Circle CI used for test, build, and deploy pipelines
- Unit integration tests run against every commit to every PR
- Longer integration tests run against every merge to trunk
- Contract tests of external interfaces run on a daily schedule
- Just commenced work on adding suites of infrastructure tests
- Containerisation enables consistency between local and C environments
- Browserstack for visual regression testing of UI components
- QA resource + formal process in each delivery team
- Deployment
- Continuous deployment from CI pipelines into test environments
- Production deployments decoupled from Sprint deliverables: multiple deployments to production per sprint
- Infrastructure as Code: Terraform and Serverless framework
- Backup, logging and monitoring
- Logs from all services are collected in AWS CloudWatch
- Up-time of external-facing services monitored by StatusCake
- Dedicated IT Ops and Support teams for logging and monitoring
- Data backed up on a daily basis in RDS and S3
- Security and dependency management
- Automatic vulnerability scanning with Snyk
- Automatic dependency upgrades with Renovate
- Quarterly tests
- Network Vulnerability Scan
- Backend Blackbox Penetration Testing
- Frontend Blackbox Penetration Testing