Online Resources uses Helix VCS to satisfy its auditing, reporting, and compliance requirements.

The product development group at ORCC chose Helix VCS when it needed a robust tool to satisfy the compliance and auditing requirements of both Sarbanes-Oxley (SOX) and the Federal Financial Institutions Examination Council (FFIEC).

Why Online Resources Thinks Helix is a Truly Great Product

Strong traceability, reproducibility, and audit capabilities

Easy to follow governing regulations

Technical support team is second to none

We have never had an error, failure, or loss of data on Helix Versioning Engine.

Helix is truly a great product: robust, reliable, and fast. Whether working from home over a VPN connection or in the office on a LAN, the difference in performance is nearly indistinguishable.

 

Founded in 1989, Online Resources (NASDAQ: ORCC) powers web-based financial services for financial institutions, billers, and credit service providers such as Commerce Bank, M&T Bank, Discover, Target, Kaiser Permanente, Kohl's, and others. Its proprietary suite of account presentation and payment services are branded to its clients, and are augmented by relationship management and marketing services to drive consumer and business, end-user adoption. ORCC serves over 10 million billable end users and processes approximately $100 billion in bill payments annually.

In the product development group at ORCC, Helix VCS is used to develop the command and architect portion of the banking application with bill payment solution. As the product development group moved from being a provider of custom solutions to a product-based group, the need for a robust tool to satisfy the compliance and auditing requirements of both Sarbanes-Oxley (SOX) and the Federal Financial Institutions Examination Council (FFIEC) was apparent.

 

Development Environment at a Glance

  • Company name: Online Resources, acquired by ACI Worldwide
  • Headquarters: Chantilly, VA
  • Perforce customer since: 2004
  • Connectivity environment: LAN/WAN
  • Number of administrators: One part-time
  • Perforce Helix version: 2008.2
  • Client platform: Windows

 

A Refreshing Business Approach

After evaluating several version control solutions, ORCC chose Helix over AccuRev, ClearCase, CVS, PVCS, Seapine, Subversion, and VSS. The ability to try Helix, download test scripts for migration from VSS to Helix, and the openness of the information on the website, all available without initially having to deal with a sales associate, appealed immensely to Bob Vandehey, director of product development and Matt Gollob, senior software engineer at Online Resources.

 

The ORCC Development Model

ORCC develops 100% dynamic, web-based applications using ASP.NET. Initially, ORCC used the common development model with efforts to move to a mainline model, but were fairly unsuccessful. On receiving a copy of Laura Wingerd's book, "Practical Perforce" (O'Reilly, 2005), they successfully made changes to their development model.

Today, developers use private branches to store their code. Upon stabilization, branches are promoted to the main development line. An automated build tool, Cruise Control .NET, that is tightly integrated with Helix, monitors the changes to the mainline and initiates build cycles when new changes are detected. Code is promoted to the test line from the main development line to achieve validation from quality assurance. When achieved, code is promoted to production, where it is available to the web application.

For traceability and reproducibility, the Helix branch location and changelist number the build is based upon is embedded in the compiled assemblies. Reproducibility removes any ambiguity of the relationship to the build result and the source that created the build. Atlassian's JIRA is used for defect management and is also tightly integrated with Helix.

 

Helix for SOX and FFIEC Compliance

Because ORCC has to be SOX and FFIEC compliant, Helix alleviates concerns of irregularities with its ability to track any particular instances by changelist numbers. The strong traceability, reproducibility, and audit capabilities in Helix make it easy to follow governing regulations.

 

Perforce Technical Support Second to None

Today, Online Resources has grown to cherish Perforce Helix to the extent where working without the tool is unimaginable. "We have never had an error, failure, or loss of data on Helix Core. Helix is truly a great product: robust, reliable, and fast. Whether working from home over a VPN connection or in the office on a LAN, the difference in performance is nearly indistinguishable," said Vandehey.

"Additionally, the Perforce technical support team is second to none. There is no waiting to talk to a technical support engineer. Not only are the responses fast, but of quality, too," said Gollob, who currently spends less than an hour a day performing tasks as a Helix administrator.