ZhongAn International was established in Hong Kong in December 2017 by ZhongAn Online, a Chinese internet insurance technology company. Its two major businesses include banks, insurance technology output which focus on improving customer satisfaction in the field of financial technology. Upholding the concept of "customer-oriented", ZhongAn International encourages users to participate in product development and design directly to create suitable products and services that meet the needs of Hong Kong customers.

As Hong Kong's first officially launched virtual bank, ZA Bank, a subsidiary of ZhongAn International, has surpassed 600,000 users in less than two years, maintaining a leading position in the industry and being one of the most comprehensive virtual banks in Hong Kong.

Digital insurance provider ZA Insure is committed to providing protection for users. Through its internet platform, it offers "affordable insurance for everyone" 24/7 to local residents, providing users with comprehensive basic medical security at an affordable price.

With the synergies of the dual licenses, ZhongAn International has brought Hong Kong's first fully digital banking and insurance experience through the ZA Bank App, enabling users to apply for insurance in just three minutes. Going forward, ZhongAn International will continue to leverage the synergy of its various brands to further upgrade the user experience and create more value for users in their future digital wealth management experience. It will continue to support Hong Kong's financial technology development and promote financial inclusion.

As the company's business continues to expand, providing sufficient IT resources quickly and ensuring the smooth operation of marketing activities has become one of ZhongAn International infrastructure team's key priorities.

Therefore, ZhongAn International has decided to use Alibaba Cloud Landing Zone to build an enterprise-level management and governance framework as the infrastructure for its cloud environment to lay the foundation for its cloud governance.

Based on the current status of ZhongAn International's business and the Landing Zone framework, Alibaba Cloud has implemented the framework from five aspects: resource management, financial management, network planning, identity permissions, and compliance audit.

Resource management:
Resource structure refers to the logical structure for an enterprise to manage its cloud resources. A well-designed structure can reduce management difficulties and enhance enterprise management efficiency. Based on ZhongAn International's current cloud situation, Alibaba Cloud divides resource accounts reasonably based on business lines and environments.

Financial management:
The organizational structure of an enterprise's finance management usually represents its cost management structure. Addressing the pain points of ZhongAn International's use of resource groups or tag fields for accounting, Alibaba Cloud combines accounts and financial units to customize a hierarchical structure of "financial units" based on ZhongAn's business lines to classify the costs of all resource instances. Some public resources can also be shared according to a customized cost-sharing ratio. At the same time, the cloud console provides a view of costs by resource accounts and financial units.

Identity permissions:
Cloud SSO provides unified identity management and access control for multiple OU (Organization Unit) accounts based on the resource directory RD (Resource Directory), completing identity and permission configuration for multiple OU accounts once. Based on ZhongAn International's personnel functions and positions, Alibaba Cloud designs permissions for several roles, including administrators, network, R&D, SRE, DBA, and security, to ensure the appropriate distribution of permissions.

Network planning:
For the resource isolation requirements of financial scenarios, Alibaba Cloud provides VPCs (Virtual Private Cloud) and security group solutions to ZhongAn International. Based on the Landing Zone framework, Alibaba Cloud designs a VPC and security group strategy based on ZhongAn International's business line requirements, providing better network security isolation and operational efficiency for the enterprise.

Compliance Audit:
Alibaba Cloud has built a visible, controllable, and traceable security operations environment for ZhongAn International through its audit compliance capabilities. The three key stages of IT operations team management of cloud resources, namely pre-limitation, timely detection and repair during an event, and post-audit record correspond to cloud services or functions. The operation audit logs and configuration audit logs of all members in the resource directory are uniformly delivered to the designated log OU account's object storage service (OSS) or log service (SLS), making it convenient for dedicated auditors to query and analyze audit logs.

Through the use of Landing Zone, ZhongAn International has established a set of account and authorization systems based on business line isolation, environment isolation, and security compliance audit. This system can also cope well with the growth and expansion of business lines. At the same time, there has been a significant improvement in financial settlement, cost management, and authorization management efficiency.