Many non-IT employees create ad-hoc applications using Excel or Python, often bypassing formal IT processes. This unregulated “shadow development” risks data fragmentation, security lapses, and regulatory breaches. Yet these employees hold vital business insights – domain knowledge that can fuel targeted innovations. The challenge lies in harnessing their expertise without undermining governance or data integrity. A clear framework was needed to mitigate risks, ensure compliance, and capitalize on this potential within the Swiss banking sector.

A structured project management approach guided the initiative. After conducting an in-depth needs assessment, the project team held stakeholder meetings to refine objectives and identify potential risks. From these findings, a tailored framework emerged, integrating governance standards, modular building blocks, and clear complexity guidelines. Tools like Microsoft Teams and YouTrack helped streamline tasks and communication, while periodic review phases, prototyping, and thorough documentation ensured a secure and compliant framework development process.

The newly developed Citizen Development Framework empowers the organization to significantly reduce time-to-market for departmental solutions. It provides non-technical employees with a structured way to innovate while adhering to strict security and data protection measures. The framework’s governance elements align with key regulatory and privacy regulations, thus mitigating compliance risks. Additionally, recommended tools and processes for development, data management, and security offer a clear blueprint for boosting transparency and ensuring operational continuity. At the same time, it lays the groundwork for more collaborative engagement between business and IT. By clarifying roles and integrating low-code platforms, domain experts can directly influence application features under the essential oversight of IT. Regular cross-functional feedback loops, as outlined in the framework, allow the organization to quickly meet evolving business demands. Overall, the framework positions the organization to foster a more agile, innovative, and secure environment.