In this presentation we will present the BCGE journey to API management in a banking context. We will introduce BCGE business drivers and technical challenges regarding API management. We will discuss the prerequisites for a successful API management program, such as API governance, API development best practices, security concepts. Then we will describe BCGE transformation roadmap and the technical challenges/best practices we faced at each phase, e.g. identity propagation, complex transformation and change management. We will conclude on the benefit of implementing an API Management as a core building bloc within the information systems in the context of multiple third-party integrators.

1. 1
A leading bank in Switzerland
Banque Cantonale de Genève
Ambassadeurs BCGE – S2 2021

2. Our identity
Sebastianna Scilipoti, Swiss no. 1 at the
International Tennis Federation Junior 2020. New
BCGE sports ambassador since 1 January 2021

3. 3
A leading bank in Swiss banking
Since 1816
Leading financier of the Geneva economy
Listed on the stock market
(SIX Swiss Exchange)
Situated in the heart of an important financial centre
A secure custodian bank
AA-/A-1+/Stable
(Standard & Poor's)
Our identity The promise of API
Initial context API Strategy
A
MSCI ESG

4. 4
17,098
2,238
Geneva: an economy open to the world
Geneva
Switzerland
(outside Geneva)
Individual clients Companies &
Institutionals
International
Total
Clients
144,772
16,400 1,528
53,953
215,125 20,864 235,989
Revenues
Our identity The promise of API
Initial context API Strategy

5. 5
Targeted digital innovation
I The bank promotes multi-channel and mobile communication with its clients
I It continuously innovates its digital offer while privileging security
Self Onboarding
Open an account online
E-banking desktop
and Mobile
Digital solution for companies
Platform dedicated
to independent managers
E-trading
Mortgage and savings account online
Digital safe
Online Forex
Mobile payment
BCGE’s iconic objects online
www.bcge.shop
Client Onboarding
Open an account at BCGE desk
Our identity The promise of API
Initial context API Strategy

6. 6
Initial context at BCGE

7. 7
Low visibility on assets and large time to market
Siloed
Approach
•Complexity and costs
overruns
•Redundancies
No Identity
propagation
• Security weakness
• Complex monitoring
and debugging
• Limited user experience
Multiple
partners
• Loss of control over assets
• Complex environments
• Complex change
management
Legacy core
banking system
Our identity The promise of API
Initial context API Strategy

8. 8
Drivers for change
Reduce time to
market
• Reusable components
and services
• Easy to deploy and
consume services
• Open architecture and
standards
Control over
assets
• Take ownership on
assets
• Apply enterprise
policies
• Asset's life cycle
management
Increase User
experience
• High value digital apps
• End to end identity
propagation
Our identity The promise of API
Initial context API Strategy
Core banking evolutions
• API implementation
• Transition to Open Banking platform

9. 9
The promises of APIs and
API Management

10. 10
API are digital products
Source image : Avito
Our identity The promise of API
Initial context API Strategy

11. 11
The API first strategy – The five rules of Jeff Bezos mandate, 2002
1. Data and Capabilities must be exposed
through API
2. Team Communications must be through
APIs
3. There can be no side
channels/shortcuts.
4. Technology choice is secondary.
5. APIs must be externalizable.
6. Anyone who doesn’t do this will be fired.
7. Thank you; have a nice day!
Our identity The promise of API
Initial context API Strategy

12. 12
Roles and benefits of API Management
API Provider API Consumer
Create
Build API and
microservices with fast
automated tools
Manage
Orchestrate and scale
API operations at
scale
Secure
Protect API from
threats and
vulnerabilities
Discover
Help developers find
and integrate API
easily
Monitor
Optimize API and
app performance
with analytics
Consume
Enable secure,
scalable use of API in
apps
Develop
Accelerate development
with tools and SDK
Test | Publish
Test and publish API to
target environments
Plan
Strategize, design
and prototype API
and microservices
Monetize
Charge for data
access according
to their use
Our identity The promise of API
Initial context API Strategy

13. 13
Building blocks of API Management
Our identity The promise of API
Initial context API Strategy

14. 14
API strategy at BCGE

15. 15
Roadmap to digital innovation
API for B2E
API for
B2B
API for B2C
Technology and
processes to reduce
costs, time to market,
increase security and
accelerate innovation
Increase efficiency via
automation and develop
new services for B2B
Capture new customers
and enhance customer
experience
Our identity The promise of API
Initial context API Strategy

16. 16
API Management – Initial situation
BCGE Employee
Business
Web Application
LDAP
Custom
Integration Layer
Core Banking
System
Document
Archiving
Customer
Screening
Document
generator
Card
Managment
Printing
System
Signature
repository
User
Security
context
Technical
User
Security
context
Our identity The promise of API
Initial context API Strategy

17. 17
« Open Banking » Platform – Admin & DevTools
« Open Banking » Platform
API Management – Target situation
BCGE Employee
Business
Web Application
LDAP
(User Federation)
Integration Layer
Core Banking
System
Document
Archiving
Customer
Screening
Document
generator
Card
Managment
Printing
System
Signature
repository
User
Security
context
Authentication
API Gateway
IAM Application
API Gateway
Administration Portal
API Gateway
Developer Portal
BCGE Security
BCGE Operation
Third party Integrators
Our identity The promise of API
Initial context API Strategy

18. 18
Key success factors
Our identity The promise of API
Initial context API Strategy
Awareness Vision Communication Implementation

19. Banque Cantonale de Genève
Quai de l’Ile 17,
1204 Geneva
Tel: +41 (0)58 211 21 00
www.bcge.ch
©
BCGE
i.
7163
i.
09.2021