Open Source in Finance Forum New York 2022

This session will show how FDC3 2.0 can improve an end user's workflow for salespeople and research analysts across buyside and sell-side institutions. The session will walk though a real life use case demonstrating how FDC3 allows a number of applications interact across a user's desktop. It will also show how users can interact across multiple desktops and inter-firm. The session will highlight the advantages of using the FDC3 protocol as well also focus on some of the technical and implementation challenges encountered. Finally the session will discuss 'the art of the possible' and how the latest FDC3 version opens up new opportunities for workflow solutions.

Open Regulation Technology has the potential to greatly improve efficiency across the Finance Industry. FINOS formed the Open Reg Tech SIG (Special Interest Group) in recoginition of that potential. One of the goals of the SIG is to demonstrate how regulations can be delivered as code. The SIG proposed using the US LCR as an introductory regulation. This presentation will demonstrate the results of that effort. It will explore authoring a regulation as code, ensuring it's open to execution across a range of technologies, and integrating the results with other initiatives, like as data cataloguing, lineage, and ontologies. The solution involves a range of FINOS projects and is a great demonstration of how the FINOS ecosystem can be combined to solve real industry problems.

During the session, entitled: “Proactive and polymorphic adaptation of multi-cloud deployments”, Katarzyna will present how to implement Multi-Cloud native strategies using an advanced open-source framework. Such framework allows for Cloud-agnostic Cross-Cloud deployment and optimized management of a Cloud application based on flexible monitoring, context-aware maximization of the application owner’s utility of the deployed application, and autonomic reconfiguration based on the application’s current execution context. During this session, we provide a practical introduction to Multi-Cloud application modelling, configuration, deployment, and adaptation. All stages of the Cloud deployment planning and designing process will be shown. Also, all the key steps in the deployment and autonomic application management will be demonstrated.

This presentation will introduce you to FDC3 Desktop Agent bridging—a proposed new part of the FDC3 Standard and FINOS-contributed project, allowing you to interconnect multiple FDC3 Desktop Agents and the applications they host. With this new part of the Standard we can go one step further than interoperability, allowing workflows to span apps hosted by multiple Desktop Agents. This is a game-changer for firms who have their own in-house Desktop Agent and want to connect to Desktop suites from vendors and other firms for seamless workflow, without the need for bilateral integration projects. Joining us in conversation will be NatWest Markets, whose recent contribution of the 'BackPlane' project to FINOS is the first implementation of a Desktop Agent Bridge. BackPlane can connect Desktop Agents whether they are running on the same PC or multiple PCs on the same network, as well as providing support for integrating of monolithic legacy .NET apps that don't yet run in a Desktop Agent. In this presentation we’ll discuss: What is Desktop Agent Bridging and why do we need it? How the proposed Desktop Agent Bridge and its implementation in BackPlane works How can you get involved

Deciding to open source a project leads to a number of security-related questions within firms, including: How can we assure the code we are releasing and accepting is as secure as possible? How do we respond if someone finds a vulnerability? GitHub provides several security tools and capabilities free of charge for all open source projects. This talk will cover how to use GitHub to: * Protect your project from vulnerable dependencies, * Scan your code for security vulnerabilities, * Establish a security policy for responsible disclosure of discovered vulnerabilities, * Privately collaborate with security researchers to fix identified vulnerabilities before disclosing them to your community

Financial regulators and capital market participants have laid out a path to shorten the standard settlement cycle to the trade date plus one business day (T+1) by September 3, 2024. The transition to T+1 means that shortening the settlement cycle can mitigate risk, increase overall efficiency, and allow for better uses of capital. Panelists will cover the advantage of having a unified, open-source technology platform (like Morphir, Legend) and application interoperability to help manage this significant transition. In this talk, the speakers will:

•  Demonstrate the benefits of the Lakehouse in the ingestion, processing, validation, and transmission of regulatory data. 
• Address the need for organizations to ensure consistency, integrity and timeliness of regulatory pipelines. 
• Show how capital market firms could bring full transparency and confidence to the regulatory data, reducing operation costs and adapting to new standards like T+1. Given the timeline of implementation, 2022 has been labeled the year of impact analysis and securing budgets and management buy-in.

Are you toiling in response to a 'Matter Requires Immediate Attention' notice regarding your security posture?

The banking sector strives for cloud velocity with the hope to fulfil the promise of developer productivity and operational efficiency. The stark reality is investments in automation inevitably bottleneck in compliance toil more often than not. In simple terms, the work is about the ability to credibly demonstrate they've done the work they said they would. Why is this so hard?

Given the complexity involved in getting this done right, we must collectively rethink how to go about it. The presentation seeks to elucidate a path away from manual auditing and inspection towards automation that can help programmatically answer and meet regulatory and compliance objectives. You will leave this session with a stronger understanding of recent advances in open source along with the breadth and depth of novel approaches to automated governance, risk, and compliance, along with resources to further develop your knowledge.

Real-time analytics could help financial institutions create enhanced customer experience, combat fraud, and manage risk better. This talk uses credit card fraud detection to demonstrate how to combine the power of open source and closed source to build and train the AI model for fraud detection on the Cloud and deploy it for real-time fraud detection on the mainframe at scale. Credit card transactions are typically processed on a mainframe. Training the model is more convenient in a Cloud setting where the on-premise transaction data and other relevant third party data are brought into a secure environment compliant with financial industry regulations. This talk shows how to build and train deep learning models using TensorFlow on the Cloud and persist the trained model in an open standard format (ONNX). Finally the trained model is deployed on the IBM mainframe where Telum AI Accelerator is used for real-time in-transaction inference at scale. The pattern described in this talk could be applied to other use cases in financial industry and beyond. Open source and closed source software can work in harmony to solve many real-world problems in a hybrid multi-cloud environment.

Stop it with the DevSecAuditComplianceOps buzzwords within the software supply chain. Let’s simply talk about Modern Governance. Great software supply chain hygiene requires governance. Governance stinks because we do it wrong. I promise to give you the means to go from commit to production with 100% no-human-hands. All while meeting visibility, security, compliance, and audit requirements without fail. Modern Governance applies to standard line-of-business software, machine learning, edge, IoT, and any other software artifact. DevOps solved the Developer and Operators conflict. It forgot other essential folks of the delivery lifecycle: Security, Compliance, and Audit. It's also missing the newest entrant, Software Supply Chain Management. We will talk about Modern Governance. Modern Governance resolves governance toil with a software engineering approach. It is no different than applying Site Reliability Engineering (SRE) principles & practices to the dull, mundane, and toil-ridden governance processes.