Event

Controls Engineering: How Deutsche Bank, Morgan Stanley & FINOS Are Automating SDLC Compliance

Date: November 3rd, 2026

Host: Morgan Stanley

Location: New York

Vibe: Breakfast through Lunch | Informal | Real-talk

A morning seminar for technical leaders to discuss the practical implementation of Automated SDLC Governance.

Banks and financial institutions need to balance the demand for software delivery velocity with robust risk controls. Most banks are tackling this problem in isolation and trying to solve it in their own way.

This has created an industry wide status quo characterized by vague requirements around controls, arbitrary standards that are hard to justify to auditors, and subjective implementations that don’t scale across organizations.

We believe it’s time to stop reinventing this wheel behind closed doors, and to build a common set of industry standards and definitions for software delivery governance.

Agenda

08:30 - 09:00

Breakfast & Networking

09:00 - 09:30

Session 1: Implementing Fully Automated SDLC Governance at Deutsche Bank
The trailblazers perspective. How to avoid audit findings and deliver valuable software continuously without the manual friction.
Toby Weston, Distinguished Engineer at Deutsche Bank

9:30 - 9:45

Break

09:45 - 10:15

Session 2: Building for Continuous Compliance (Morgan Stanley)
The Builder’s Journey. The raw learnings, wins, and scars from building a global automated compliance framework.
Aaron Searle, Executive Director at Morgan Stanley

10:15 - 10:30

Break

10:30 - 11:00

Session 3: Building an Open Standard for Software Delivery Controls (FINOS & Kosli)
Standardizing Delivery Controls. A look at the FINOS SDLC Governance Working Group and how we are building the future of cross-bank control standards.
Mike Long, CEO at Kosli

11:00 - 12:00

Wrap & Lunch