In an era where digital threats are increasingly complex, protecting the organization’s digital assets has become a top priority. CareHealth aims to implement a system that can manage risks associated with the data they own or manage, in line with best practices and international standard principles.

The project began with testing efforts and then expanded to include additional DevOps resources and software engineers. This phased approach lays the groundwork for the comprehensive strategy required by CareHealth’s complex systems, necessitating the integration of various frameworks and tools for efficient management.

Following the success of the initial testing project, CareHealth identified two key areas for further enhancement:

• Improving Environment Segregation: Ensuring that development, testing, and production environments are well-isolated to enhance security and efficiency.
• Expanding the Automation Testing Team: Building on the existing CareHealth Automation Testing team, plans were made to augment this team with resources from SmartOSC to enhance regression testing coverage.

This expansion aims to improve overall efficiency and accuracy in the testing process, leveraging automation for thorough testing across various platforms, including APIs, web, and mobile applications.

Building on the success of the initial assessment, CareHealth partnered with SmartOSC to expand testing coverage and optimize workflows. Through this collaboration, CareHealth added automation testing resources to strengthen the existing testing team. This approach allows CareHealth's manual QA team to focus on strategic functional testing activities, such as exploratory testing, usability testing, and user experience assessments. By integrating SmartOSC resources, CareHealth optimizes its workflows, enabling the automation team to handle a broader range of testing tasks and improve overall efficiency and testing coverage.

In a collaborative effort between CareHealth's DevSecOps team and SmartOSC, this project focuses on enhancing the existing AWS environment management into multiple accounts to improve security. Under the guidance of CareHealth's infrastructure team, SmartOSC participates in this segregation effort to protect against internal and external threats. This multi-account AWS environment restricts access to sensitive information and critical systems, ensuring that potential attacks can be easily isolated. This segregation approach, considered an industry best practice in the financial sector, ensures that sensitive health data is handled securely, keeping the platform robust and protected.

Focusing on the rapid development of new features, CareHealth collaborates with SmartOSC to strengthen their engineering team with additional resources. This partnership aims to accelerate the delivery of new features quickly and efficiently. SmartOSC contributes by developing various backend functionalities and enhancing frontend performance. This collaboration enables the delivery of features such as customized benefits based on member types, user nutrition trackers, and enhanced authentication in the sign-in/sign-up process, resulting in a more feature-rich and responsive application.