In Jira Software, an Agile workflow is the sequential path a work item follows

In Jira Software, an Agile workflow is the sequential path a work item follows from creation to completion. It maps out your team’s real-world processes onto a digital Jira Board, ensuring full transparency, accountability, and tracking during iterative cycles.

Whether your team uses the structured Scrum framework or the continuous delivery of Kanban, the core workflow engine runs on the same underlying components.


Core Components of a Jira Workflow

Every workflow in Jira is built using three essential pillars:

  • Status: This indicates exactly where a task sits in the process cycle (e.g., “To Do”, “In Progress”, “In Review”).
  • Transition: The one-way link or action taken to move an issue from one status to another (e.g., clicking “Start Progress” or dragging a card).
  • Resolution: The ultimate reason why a task is closed (e.g., “Done”, “Fixed”, “Duplicate”, “Won’t Do”).

The Standard Agile Workflow Stages

By default, Jira uses a simplified three-step framework, but high-performing Agile teams usually build out custom statuses to mirror their cross-functional pipelines. A comprehensive Agile software workflow typically looks like this:

1. The Backlog

The master list where the Product Owner documents all upcoming feature requests, bugs, and requirements. Work here is represented as Epics (large bodies of work) and User Stories (smaller, user-focused features). Items sit here until they are prioritized and pulled into active development.

2. To Do (Selected for Development)

Issues committed to the current active iteration—like a 2-week Sprint in Scrum. These items are assigned to specific team members, estimation points are locked in, and they sit in the queue waiting for a developer to pick them up.

3. In Progress

The work is actively being executed. In software teams, moving a card to “In Progress” frequently triggers background Atlassian Automations, such as linking the Jira task to a live branch in a code repository like Bitbucket.

4. In Review / QA

The work is complete but requires validation. This stage is critical for peer code reviews, automated builds, and quality assurance testing. If a bug is caught, a transition can send the issue back to “In Progress”.

5. Done

The work successfully meets the team’s shared “Definition of Done” and is ready for release. Moving a card to this final column automatically strikes through the issue key, triggering a status of “Resolved”.

Structuring Work Across Frameworks

Scrum Workflows: Heavily time-boxed. Issues move sequentially from a groomed backlog into active sprints. Progress and performance metrics are measured via built-in Jira Agile Reports like Burndown Charts and Velocity tracking.

Kanban Workflows: Focused on continuous, fluid delivery. Instead of sprints, teams place Work in Progress (WIP) limits on individual columns. This visually exposes system bottlenecks immediately if too many tasks stack up in a column like “In Review”.

Workflow Best Practices for Teams

  • Keep it Simple Early On: Start with minimal statuses (To Do, In Progress, Done). Only introduce custom steps like “Design” or “UAT” when your team physically hits a communication gap.
  • Leverage Transitions Wisely: Define whether an issue can transition “From Any Status” or must follow a strict, linear progression.
  • Automate Repetitive Steps: Set up rules to auto-assign tasks when they change hands, or auto-close parent User Stories once all child subtasks hit “Done”.

In Jira Software, an Agile workflow is the sequential path a work item follows from creation to completion

PCI DSS (Payment Card Industry Data Security Standard) is a global security framework

PCI DSS (Payment Card Industry Data Security Standard)
PCI DSS (Payment Card Industry
Data Security Standard)

PCI DSS (Payment Card Industry Data Security Standard) is a globally recognized set of security guidelines designed to ensure businesses that accept, process, store, or transmit credit card information maintain a secure environment to protect cardholder data.

Who Needs It

If your business takes payments online, over the phone, or in-store, PCI DSS applies to you. It is mandatory for all merchants, financial institutions, and service providers handling card data, regardless of the company’s size or transaction volume.

The 12 Core Requirements

The standard consists of 12 fundamental requirements organized into 6 main control objectives:

  1. Network Security: Install and maintain network security controls (e.g., firewalls) to protect cardholder data.
  2. Secure Defaults: Never use vendor-supplied defaults for system passwords and other security parameters.
  3. Protect Stored Data: Safeguard stored account data via encryption, hashing, or truncation.
  4. Encrypt Transmissions: Strongly encrypt cardholder data across open, public networks.
  5. Malware Protection: Protect all systems and networks against malicious software.
  6. Maintain Secure Systems: Regularly update software, apply security patches, and develop secure systems.
  7. Restrict Access: Restrict system and cardholder data access on a strict “need to know” basis.
  8. Authenticate Users: Identify users and authenticate access to system components.
  9. Restrict Physical Access: Control and restrict physical access to cardholder data and hardware.
  10. Log and Monitor: Log and continuously monitor all access to network resources and cardholder data.
  11. Regular Testing: Regularly test security systems and network processes for vulnerabilities.
  12. Information Security: Maintain formal policies that address information security for all personnel.

Why Compliance Matters

Achieving compliance—often demonstrated through a Self-Assessment Questionnaire (SAQ) or a Report on Compliance (RoC)—protects your customers and your business from data breaches. Non-compliance can result in devastating penalties, forensic investigation costs, loss of merchant processing privileges, and heavy brand damage.

For more specific details, requirements, and self-assessment tools tailored to your business, refer to the official PCI Security Standards Council website.

Agile Scrum Story Points Matrix

Story Points Matrix Agile Scrum
Scrum Story Points Matrix
Agile Scrum Story Points Matrix

RACI Matrix, Responsible, Accountable, Consulted, Informed

RACI Matrix, Responsible, Accountable, Consulted, Informed
RACI Matrix, Responsible, Accountable, Consulted, Informed

A RACI matrix is a project management tool used to clarify roles and responsibilities for tasks and deliverables. It prevents confusion and bottlenecks by assigning one of four roles to each stakeholder: Responsible, Accountable, Consulted, and Informed.

The 4 RACI Roles

  • R – Responsible: The person (or team) who does the actual work to complete the task. They are the hands-on doers who ensure the work gets done.
  • A – Accountable: The person who ultimately owns the success or failure of the task. They sign off on the final work and are answerable for it. Note: There should always be exactly one Accountable person per task.
  • C – Consulted: Stakeholders whose feedback or expertise is required before the task can be completed or a decision is made. This is typically a two-way communication flow.
  • I – Informed: People who are kept up to date on the progress or completion of a task, but who do not directly work on it or need to provide input. This is a one-way communication flow.

RACI Matrix, Responsible, Accountable, Consulted, Informed

Agile, Scrum and SAFe – How the Principles Connect

Agile, Scrum and SAFe - How the Principles Connect
2. Agile, Scrum and SAFe - How the Principles Connect
Agile, Scrum and SAFe –
How the Principles Connect

Scrum Master drives value by serving 3 critical areas

Scrum Master drives value by serving 3 critical areas
Agile Scrum Master drives value by serving three critical areas
Scrum Master drives value by
serving 3 critical areas

ACI BASE24 core components on HPE NonStop mainframe platform

ACI BASE24 is a market-leading electronic funds transfer (EFT) software application developed by ACI Worldwide. It serves as the transaction processing backbone for global banking.

Running natively on the fault-tolerant HPE NonStop platform (formerly Tandem Computers), it utilizes a modular architecture to acquire, authenticate, route, and authorize financial transactions.

BASE24 Electronic Funds Transfer (EFT) software application developed by ACI Worldwide, Overview
BASE24 Electronic Funds Transfer (EFT) software application developed by ACI Worldwide, Overview

The application modules of ACI BASE24 (spanning Classic and modern BASE24-eps configurations) are categorized in complete detail below:

💳 Channel Acquisition Modules

These front-end modules connect directly to consumer-facing self-service devices and touchpoints to ingest financial messages.

  • BASE24-atm: Manages ATM device configurations, handles cash dispenser commands, controls screen displays, and processes terminal commands.
  • BASE24-pos: Facilitates electronic data interchange with Point of Sale (POS) merchant terminals, accepting debit, credit, and smart card transactions.
  • Stored Value Module (SVM): A localized sub-component within channel management dedicated to the online issuance, balance check, and validation of stored-value gift cards.

🔄 Routing, Switching, & Interfacing Modules

These modules orchestrate the delivery of messages from endpoints to localized authorization hosts or global networks.

  • XPNET: The foundational communication middleware module on HPE NonStop that handles network connectivity, balancing transaction routing across regional hosts.
  • BIC ISO Interface: Implements standard ISO 8583 payment messaging protocols to communicate directly with major international networks (such as Mastercard or Visa).
  • ACI Commerce Gateway: Operates as a secure payment gateway firewall, linking internal HPE NonStop processing routines with public internet channels.

🔐 Security & Authentication Modules

Data integrity modules protect transactions and enforce industry-standard security.

🏦 Business Logic & Authorization Engines

These back-end engines decide whether a transaction flight should be accepted, declined, or deferred.

  • Enhanced Authorization Module: Runs customized business logic scripting to evaluate cardholder limits, fraud signals, and stand-in authorization processing.
  • Positive Balance File (PBF) Interface: Interfaces with real-time local file structures to check account limits when backend core banking host systems are offline.

📊 Back-Office & Data Management Modules

These modules ensure post-transaction data is accounted for, settled, and audited.

  • Interchange Log File (ILF) / Transaction Log File (TLF for ATM, PTLF for POS): Core architectural data constructs that maintain comprehensive records of all ongoing financial messages for balancing and error recovery.
  • BASE24-infobase: Provides centralized tools for operational reporting, financial data clearing, settlement processing, and accounting audits.

🛠️ HPE NonStop System Integration Architecture

BASE24 is highly reliable because it integrates with native HPE NonStop mainframe utilities:

  • PATHWAY (PATHCOM): Acts as the transaction processing middleware to dynamically load-balance BASE24 server processes across multiple CPUs.
  • Enscribe & NonStop SQL/MX: Serves as the native flat-file or relational database layer optimized for low-latency, high-concurrency write operations.
  • HPE Shadowbase / AutoTMF: Interacts with the Transaction Monitoring Facility (TMF) to enable active/active dual-site replication, providing instant failover for near-zero transaction downtime.

ACI BASE24 core components on HPE NonStop mainframe platform

2. BASE24 Electronic Funds Transfer (EFT) software application developed by ACI Worldwide, Overview
BASE24 Electronic Funds Transfer (EFT) software application developed by ACI Worldwide, Overview

Mark Whitfield’s project involvement with ACI Worldwide’s BASE24 / BASE24-eps and XPNET communication middleware is rooted deeply in his tenure at Insider Technologies Limited (ITL) and subsequent senior project management roles. His work primarily spans real-time performance monitoring, transactional tracking, and infrastructure management across HPE NonStop (Tandem) platforms.

His involvement across specific initiatives and client deployments is categorised below:

Product Development & R&D Projects

  • BASE24 XPNET Monitoring in Reflex ONE24
    • Role: R&D Lead and Software Developer.
    • Involvement: Researched and developed specialised software utilities to automatically detect and extract architectural information from XPNET components. He leveraged XPNET EMS (Event Management Service) events and user requests to facilitate real-time monitoring. These components were mapped into graphical drill-down object trees inside the Reflex Status Monitor application.
  • XPERT24 (Performance Monitoring & Tracking)
    • Role: R&D Lead, Technical Contributor, and Project Manager.
    • Involvement: Managed the lifecycle of this NSK-based monitoring tool, which tracks XPNET performance counters including states, traffic rates, and queues across lines, stations, nodes, and processes. The project also involved building mechanisms to track transaction approval and denial metrics over ATM and POS networks.

Client Deployment & Customisation Projects

  • HSBC Transaction Monitoring Project
    • Role: Technical Lead / Solution Designer.
    • Involvement: Designed and executed the implementation of ITL’s RTLX Reactor product on HP NonStop. The project required mapping monitoring solutions into HSBC’s heavily customised payment ecosystem to track ATM and POS transactions governed by BASE24.
  • Off-shore Retail Banking Transaction Tracking (Riyadh, Saudi Arabia)
    • Role: IT Project Manager (2013).
    • Involvement: Managed the delivery of a massive log-parsing project utilizing the BASE24 Classic payment framework. The project safely extracted, relayed, and optimized the parsing of multiple Terabytes of historical ATM and POS transaction logs archived on tapes, moving them into a modern reporting system.
  • Global Payments / Standard Chartered Integration Project
    • Role: Project Manager / Technical Consultant (2011–2013).
    • Involvement: Integrated real-time BASE24 transaction tracking and XPNET capabilities directly into external corporate enterprise frameworks, specifically IBM Tivoli and XPERT24.
  • Lloyds Banking Group (LBG) Estate Transformation
    • Role: Senior Project Manager.
    • Involvement: Led a massive migration strategy that decoupled ATM driving responsibilities away from BASE24 Classic running on HP NonStop platforms, transferring them to Wincor’s ProClassic Enterprise (PC/E) environment.

Mark Whitfield worked on BASE24 / BASE24-eps transaction tracking and XPNET monitoring at Insider Technologies Limited (ITL) in the early part of the millennium. See also HP NonStop Connection Journal article in 2013.

BASE24-eps extraction and ITLs RTLX in 2007
BASE24-eps extraction
and ITLs RTLX (in 2007)
RTLX Reactor (in 2012) for tracking BASE24-eps and BASE24 XPNET transactions
RTLX Reactor (in 2012) for tracking
BASE24-eps & BASE24 XPNET transactions

ACI BASE24 core components on HPE NonStop mainframe platform

Comparison Between Load and Capacity in Agile Scrum

In Scrum, capacity represents the total amount of available work time a team has for an upcoming sprint, while load is the actual amount of work the team pulls into that sprint.

1 Comparison Between Load and Capacity in Agile Scrum
2 Comparison Between Load and Capacity in Agile Scrum
Comparison Between Load
& Capacity in Scrum

Understanding Capacity

Capacity acts as your ceiling. It is a forward-looking calculation performed right before sprint planning. It accounts for the reality of the upcoming calendar cycle.

  • To find a team’s capacity, you multiply total working days by the number of team members.
  • You then subtract non-productive time like public holidays, planned vacation days, and standard company meetings.
  • Finally, you apply a focus factor (typically around 70% to 80%) to account for daily distractions and context switching.

Understanding Load

Load represents the weight of the commitments made by the developers. It is the cumulative volume of user stories and tasks that the team intends to deliver during the sprint.

  • Load is entirely determined by how the team estimates the product backlog items pulled into the sprint.
  • Unlike capacity (which is restricted by time), load can theoretically be pushed to any level, though overloading creates major delivery risks.

Balancing the Relationship

The ultimate goal of a Scrum Master is to help the team balance load against capacity to maintain a sustainable pace.

  • The Safe Zone: Best practices dictate keeping your load at 10% to 20% below your absolute capacity. This visual buffer creates room for unexpected blockers or minor illness.
  • The Danger Zone (Overcommitment): An exact match where load equals capacity is considered an anti-pattern in Agile frameworks. It strips the team of flexibility, spikes burnout, encourages poor-quality code, and almost always leads to missed sprint goals.

Comparison Between Load & Capacity in Agile Scrum