Simon Tong embarked on a different career transition when he joined ASB as executive general manager technology innovation and payments.\nPrior to this, he was Managing Director at Fairfax Media.\nASB was then going through a transformation codenamed \u2018Endeavour\u2019 that was focused on bringing agile practices across the business. \n\u201cMy immediate challenge was to ensure the transformation would be successful,\u201d he says.\n\u201cMy experience at Fairfax showed me how quickly organisations could be disrupted and I wanted to ensure ASB had an operating model capable of meeting the challenges ahead.\n\u201cI had to quickly come up to speed with the background of the changes, progress to date, and most importantly what were the barriers we needed to overcome to ensure the transformation was successful \u2013 all while we needed to deliver to our customer expectations, delivering projects, keeping our systems running and meeting our regulatory obligations,\u201d says Tong.\n\u201cI liken it to changing the engines on a 747 mid-flight!\u201d\nTo get feedback on new ideas, he talked to his team one on one, in town hall sessions and in team meetings. \u201cI made it clear to my crew that I wanted their feedback and encouraged them to come and talk to me.\n\u201cIn order to further my understanding and to ensure we had the best chance for success we have spent time looking at other organisations that had gone through similar transformations to factor this into our operating model.\u201d\nTong says the transformation programme, now on its second phase, will involve ongoing iterations in order to keep ASB best positioned for the challenge ahead.\n\u201cWith the experience and learning from my career to date, combined with the fantastic team at ASB, I am confident we can remain \u2018one step ahead\u2019 in the future.\u201d\n\u2018Educate, shift-left, tool up\u2019\nToday, Tong and his team are immersed in a new \u2018way of working\u2019 brought on by the Endeavour programme.\nThe transformation embraced agile work practices and re-organised traditional IT structures to tribes and squads, aligned to platforms and practices. \nOver the last year, he says ASB has invested tens of millions in technology and business related projects, including technology upgrades, compliance, customer experience, innovation and digital initiatives. \nAs with all organisations, delivering these projects whilst managing cybersecurity threats has been a key challenge. \n\u201cDuring the transformation, it was obvious that traditional information security practices needed to evolve,\u201d he says.\n\u201cWe needed to support our business and technology to go fast, to help enable amazing customer experiences, while ensuring great security outcomes.\u201d\nHe says a prime challenge they faced was the traditional view that security is a central team\u2019s responsibility. \u201cTo overcome this, we had to inspire everyone to take responsibility for security within their squads.\u201d\n\u201cWe did this by creating an overarching goal to \u2018embed security within teams and maintain a positive security culture\u2019,\u201d he says.\nDelivering to this goal would be essential for security to remain relevant and valued within our new ways of working, and ensure that security is seen as everyone\u2019s responsibility, he says.\nThe team focused on three steps to achieve this:\nEducate: Provide people cyber security knowledge, support and foster their desire to really \u2018get\u2019 security and take ownership.\nShift-left: \u201cBake-in\u201d great security at the start of the development lifecycle.\nTool-up: Develop and enhance security tooling, and automate as much as possible, to provide the capabilities and guardrails necessary to go-fast safely. \nThe team augmented these with activities ranging from \u2018Lunch n\u2019 learn sessions\u2019 to penetration testing.\nThe security people ran a series of interactive conversations about the challenges that the bank faced for their planned approach. \u201cWe answered questions, listened to valuable feedback, adapted and evolved,\u201d he says.\nThey also partnered with a world class provider of secure coding training, with special emphasis on security within DevOps. More than 70 developers and testers completed this intensive two-day hands-on course. \nThe team introduced Secure Code Warrior, a gamified online security coding training solution and provided it to all developers and testers.\nThey also designed and ran a \u2018Capture the Flag\u2019 competition where eight teams competed to find security bugs and fix them.\nThey designed and built \u2018ScanIT\u2019, a service that provides capabilities for the developers and testers to run sophisticated security tools within a guiding process. Examples include application code security scanning, web application security scanning and platform vulnerability scanning, says Tong.\nHe says they had significant buy-in from developers, testers, and all critical stakeholders on these programmes.\n\u201cWe have provided resources, capabilities and insights that enable all of us to do our jobs better, while we have achieved a lot, SecDevOps is a journey focused on continuous improvement.\u201d\nThinking - and acting - like a startup\nOn the innovation front, Tong says the Innovation Lab team continues to explore possible use cases for emerging technologies. These are done in partnership with their colleagues throughout ASB. \n\u201cHowever, beyond such research and development through the normal project process, there is a need for certain capabilities to be in place so that such insights can be channeled into change,\u201d says Tong.\nIn order to support genuine innovation relating to key emerging technology trends, he says the team continued to build out their API and microservices environment.\nOne of the programmes they launched is \u2018Unleashing Innovation\u2019 which crowdsources ideas from ASB staff. After issuing a challenge about growing the wealth of our customers and helping them protect their lives and loved ones, we received over 100 ideas, which were peer-voted down to a top 20, he says.\nThe team also ran a two-day \u2018hackfest\u2019 where people from across ASB worked with their technology partners to \u2018hack\u2019 up prototypes and test these with customers. \nOf the 20 ideas, 12 were selected to present to a panel of external entrepreneurs and investors. Their recommendations allowed for six of the ideas to move into the \u2018Upstart\u2019 acceleration programme.\nHe explains Upstart takes the traditional accelerator model and inverts it. \n\u201cRather than ASB simply passively investing in an external startup accelerator, we empowered those six teams to work out in the startup ecosystem on their ideas for 12 weeks.\u201d\nThe teams were based at the GridAKL co-working space, where they continued to develop their products, testing with customers, and exploring the pathway to value. \nThree of the teams succeeded in making it through the entire 12 weeks and then pitched to a subcommittee of executives for funding to take their ventures into Incubation. These products will be released to customers within the year, says Tong.\nHe says \u2018Unleashing Innovation\u2019 and \u2018Upstart\u2019 provide ASB with the ability to genuinely engage with operating as a startup.\n\u201cThe entire framework deployed at ASB is built around exposing as many people as possible within the company to these new ways of working,\u201d he says.\n\u201cThis model of encouraging internal entrepreneurial thinking \u2013 or \u2018intrapreneurship\u2019 \u2013 helps with the much larger goal,\u201d he says. And this is about \u201ctransforming a 170-year old bank into an organisation that thinks and acts more like technology company that is licensed and trusted to provide financial service.\u201d\n\u201cSuch a transformation will help with ASB continuing to thrive in a disruptive and fast-moving market, and capabilities such as those learnt through these programmes will have impact beyond the ventures themselves,\u201d says Tong.