SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States
Availability should follow the transaction, not the infrastructure

Availability should follow the transaction, not the infrastructure

Thu, 6th Aug 2026 (Today)
Don Boxley
DON BOXLEY CEO and Co-Founder DH2i

I can't stop asking myself this question… How did we automate almost every aspect of software delivery, yet when a critical financial application fails, we still wake people up at 2:13 a.m.?

Think about how far financial technology has come.

Millions of transactions are processed by banks every day. In mere milliseconds, payment platforms authorize purchases. Trading systems analyze market conditions in real time. Fraud detection engines evaluate thousands of signals before approving a transaction. Infrastructure can be provisioned automatically. CI/CD pipelines deploy new releases continuously. Kubernetes can launch new application instances almost instantly.

That's remarkable progress.

Then a production database supporting payment processing becomes unavailable. Alerts start firing. Engineers jump onto a bridge call. Operations teams scramble to determine whether transactions are being delayed, duplicated, or lost. Compliance teams want to know whether reporting obligations have been affected. Ultimately, the question that matters the most is, "Can customers still manage and move their money?"

That's when many organizations discover that while they've automated deployments… they haven't automated resilience.

One of the biggest misconceptions I see is that modern infrastructure automatically creates resilient financial services.

It doesn't.

Orchestrating workloads is Kubernetes' sweet spot. Cloud platforms excel at scaling infrastructure. Automation pipelines make releasing software dramatically easier.

None of those technologies, by themselves, guarantee that payment processing, digital banking, fraud prevention, or trading applications remain continuously available when something fails. That's because orchestration and operational resilience solve two very different problems.

Orchestration asks the question: Where should this workload run?

Financial resilience asks the question: When infrastructure (inevitably) fails, how do we ensure customers can continue completing transactions?

Those are very different questions.

For financial institutions, availability isn't simply an IT metric.

It's revenue. It's customer confidence. It's regulatory compliance.

Every minute of downtime can turn into failed transactions, missed trading opportunities, customer frustration, service-level agreement (SLA) penalties, or increased regulatory scrutiny.

Customers don't know and don't care whether a Kubernetes pod restarted successfully. They care whether their paycheck arrived. Whether their credit card worked. Whether they could execute a trade before the market moved. 

That's why availability has to follow the application, not the server, cluster, or cloud hosting it.

Here's the question every FinTech platform team should ask.

Forget the buzzwords for a minute. Forget "cloud native." Forget "high availability." Forget "self-healing." Instead, ask one simple question: If a critical financial workload fails during peak transaction volume, what happens next, and how much of the recovery still depends on people?

If the answer is: "Someone gets paged. We open a bridge. We figure it out." then your platform is probably less automated than you think.

So...what should you do differently on Monday?

Find your operational bottlenecks. Map every manual decision your team makes during a production incident involving customer-facing financial applications. Every manual recovery decision introduces additional risk when customers are actively trying to move money.

Measure transaction recovery – not infrastructure recovery.

Infrastructure metrics are useful, but customer outcomes matter more:

  • Measure how quickly payment processing resumes. 
  • Measure how quickly fraud detection returns to full capacity. 
  • Measure how quickly customers can successfully complete financial transactions.

Those are the metrics your business actually experiences.

Practise failure before customers experience it.

Financial institutions routinely test disaster recovery. But during normal operations how often do platform teams intentionally simulate failures to validate automated recovery?

If "rarely" is your answer, you've identified an opportunity to improve operational maturity.

Don't assume Kubernetes solved resilience.

Modern financial applications span databases, messaging platforms, storage systems, APIs, identity services, and multiple cloud environments.

Every one of those layers introduces potential failure scenarios.

Your resilience strategy should account for the entire application, not just container orchestration.

Automate decisions – not just tasks.

Restarting services is automation. Determining the best recovery action based on policy, application dependencies, workload health, and business priorities is operational intelligence.

That's where platform engineering is headed.

Here's a simple test.

If your most experienced operations engineer disappeared for two weeks, would payment recovery work exactly the same way? If the answer is "probably not," your resilience strategy still depends too heavily on tribal knowledge.

For years, we've measured engineering excellence by deployment velocity.

That's still important. But financial services operate under a different standard. Customers expect financial applications to work every time they tap a card, submit a payment, transfer funds, or execute a trade. They don't care which cloud you're using. They don't care which Kubernetes cluster is running the workload. They simply expect the service to be available.

That's why the next evolution of platform engineering isn't faster deployment. It's intelligent operations that keep critical financial workloads continuously available regardless of where they run.

Because in financial services, availability shouldn't follow the infrastructure. It should follow the transaction.