Набір архітектора банківських рішень
Банківські рішення за галузевими стандартами: сервісні домени BIAN, платежі ISO 20022, open banking з FAPI 2.0, платіжний реєстр, ідентичність клієнтів, скоупінг PCI DSS і реєстр DORA.
Еталонні рішення
Banking Solution Design Template (BIAN 14.0)
ПовнийBank solution mapped to BIAN 14.0: scope, alignment level, release changes, service domain mapping, control records, APIs, core interplay, ISO 20022, data, coexistence, regulation
BIAN Service Landscape 14.0ISO 20022 Payments Design Template (CBPR+, SEPA, Fedwire)
ПовнийISO 20022 payments solution: scheme register, message set and versions, flows, canonical model, structured and hybrid address, identifiers, truncation, screening, VoP, reconciliation, cutover
ISO 20022; Swift CBPR+ (SR2026 payments changes deferred); EPC SEPA rulebooks; Regulation (EU) 2024/886Open Banking API Design Template (PSD2, FAPI 2.0)
ПовнийOpen banking dedicated interface: PSD2/RTS, PSR and PSD3, FiDA and CFPB 1033 status, API standard choice, FAPI 2.0 controls, consent life cycle, SCA, TPP certificates, dashboards, reporting
PSD2 and RTS (EU) 2018/389; FAPI 2.0 Security Profile (Final 2025); NextGenPSD2 1.3.16; UK Open Banking 4.0.1Payment Ledger System Design Template (Reference Design)
ПовнийPayments and double-entry ledger: idempotency keys, payment state machine, PSPs, outbox, reconciliation, audit, PCI DSS scope
Безпека
CIAM Solution Design Template (Passkeys, OIDC, FAPI 2.0)
ПовнийJourneys and risk, proofing, passkeys and step-up, recovery, OAuth/FAPI profiles, consent and GDPR rights, B2B2C, fraud, scale, KPIs, migration
NIST SP 800-63-4; OpenID Connect Core 1.0; RFC 9700; FAPI 2.0 Security Profile; WebAuthn Level 3Threat Model Template (STRIDE)
ПовнийSTRIDE threat model: scope, DFD with trust boundaries, assets, threats per element, L x I rating, mitigations, risk acceptance
STRIDEPCI DSS Scoping and Segmentation Design Template (v4.0.1)
ПовнийCard data flows and inventory, scope categories, component register, tokenisation and P2PE, segmentation controls and tests, TPSPs, TRAs, scope confirmation
PCI DSS v4.0.1 (structure and requirement numbers only); PCI SSC scoping and segmentation supplements
Регулювання та відповідність
DORA Register of Information Template (ICT Third-Party Arrangements)
ПовнийDORA Art. 28(3) register: templates B_01.01 to B_99.01, arrangements, providers and LEI/EUID, supply chain ranks, functions, assessments, concentration, exit
Regulation (EU) 2022/2554 (DORA) Art. 28 to 30; Implementing Regulation (EU) 2024/2956Data Residency and Sovereignty Assessment Template (GDPR Chapter V)
ПовнийData tiers, flow map, jurisdiction matrix, Chapter V mechanisms, TIAs, PIPL and DPDP examples, Data Act Art. 32, key custody, sovereign cloud scoring, decision
GDPR Chapter V; SCCs 2021/914; EU-US DPF 2023/1795; EDPB Recommendations 01/2020 v2.0; Data Act Art. 32