Requirements Engineering and Legacy Systems

NTT DATA is your Innovation Partner anywhere around the world. Headquartered in Tokyo, with business operations in 42 countries, we put emphasis on long-term commitment and
combine global reach and local intimacy to provide premier professional services from consulting, system development to business IT outsourcing.

Dr. Jens Kawelke is Head of the Competence Unit Requirements Engineering at NTT DATA Germany. He consults clients regarding the Requirements Engineering methodology and offers Requirements Engineering training for clients and internal staff.


1 Introduction

In an earlier article Requirements Engineering and the benefits of its professional use in software development projects were introduced. Examples of project failures were given and it was argued that requirements engineering techniques can reduce the risk of such failures. Furthermore, the necessary skills of a requirements engineer and the subareas of Requirements Engineering were listed. Also, possible tool support for the work of a Requirements Engineer was introduced.

In this article specific IT project situations will be considered where Requirements Engineering techniques are very essential. Legacy systems, that are still very prominent in the insurance business, will be looked at. Some alternatives to overcome the problems with legacy systems will be suggested and necessary Requirements Engineering methods for each of the alternatives be analysed in detail.

2 Legacy Systems - a Love-Hate-Relationship

You have all seen legacy systems and many of you probably still work with them almost daily - these systems with the black background and bright letters (mostly white, yellow or green). You hardly need the computer mouse to work with them. The more you need the "tab" key to jump from one input field to the next. And you need short cuts, i.e. numbers and letters or the "F"-keys to change from one screen to the next (see Figure 1 for an example of a legacy system screen).

Figure 1: screen of a legacy system

Legacy System are usually more than 25 years old, some even 40 years and more. They are implemented with programming languages called, for example, "COBOL" or "PL/I". The original programmers are mostly pensioners by now and if you are lucky they have entered lots of comments into the source code and written a lot of system documentation.

In our days the word "legacy" has a bad "aftertaste" in the IT world. But IT systems are legacy systems and still exist because they are successful. They are very reliable and have very few bugs. And: They are fast!

Users are very familiar with their old system. Some do not think that there is anything better on the market. However, as much as some love the legacy systems, others hate it.

Especially in these days, when the competition in the insurance market is very high, the insurance companies need to react quickly to the changing needs of the customers. New insurance products need to be introduced in a short time. Think only of the upcoming car insurance issues like telemetry and autopilots.

And here, the disadvantages of the legacy systems become apparent:

- High maintenance costs

- Low scalability

- Integration problems with other systems

- Unflexibility

In other words, legacy systems can be a barrier to innovation.

3 The Alternatives

The legacy system does not necessarily need to be scrapped altogether.

However, in order to remain a big player in the market, the insurance companies need to take a strategic decision.

Depending on the

- pressure of the market

- available budget

- available modern products for the functionality to be replaced

- size of the legacy system

you can mainly choose between 3 different options:

1. The modernization of the legacy system

2. The replacement of the legacy system by

a. an off-the-shelf product

b. a new system

All these options must, off course, be performed within an IT project. One of the key factors for the success of those projects is the application of professional requirements engineering. The following chapters are intended to give guidance for the right decision and to help reducing the risk of a project failure.

4 A Precondition

Independent of the choice of the 3 options above, a prerequisite for the start of a modernization or replacement project is the existence of a professional documentation of the legacy system. This could be a detailed textual system documentation of all available functionalities of the old system or even better documentation based on the Use Case concept - a mixture of textual documentation and UML diagrams. Since the Use Case concept was not "invented" by the time of the implementation of most legacy systems yet, the best you can get is probably the textual documentation.

But if there is no documentation, then a project must be undertaken that results in the post-documentation of the legacy system. The technique to do that is a specific form of Requirements Engineering called Reverse Engineering or system archaeology.

Fortunately, it is not necessary to assign a big team of Cobol or PL/I programmers to go through the source code line by line in order to identify the functionality of the system. There are tools available that support the reverse engineering job.

We have experiences with a successful tool that can save up to 90% of the time that would be necessary to analyse the source code line by line.

The source code is imported into a so-called hypercube, from where the tool starts the automatic analysis of the code. First it compiles the source code and applies a high number of quality and quantity checks. For example, unused code and source code with errors are discovered and the number of file statements used in each program is deter-mined.

Different forms of data are extracted from the source code and entered into a vast number of tables where they can be selected and further analysed.

The tool also creates graphical representations of the source code that support the Requirements Engineer in his/her analysis of the system.

Some of the graphs and browsers the tool can produce are:

- Structure Browser

- Resource Browser

- Selected Call Graph

- Full Call Graph

As an Example, figure 2 shows part of a Structure Browser:

Figure 2: Structure Browser

Of course, the functionality is not extracted automatically into a readable format. The "real" work still has to be done by one or more Requirements Engineers who have technical skills as well as business skills of the system to be analysed. But no hardcore developers are needed for this task.

So, the job of post-documenting the legacy system is not as hard anymore as it seems.

5 Modernisation of the Legacy System

Modernising the legacy system can be done in various ways, one of them being, for ex-ample, to use the analysis tool described above to identify "dead code" and other weak points in the system and then to restructure it.

Of the three alternatives, the modernization is probably the cheapest, at least short-term. However, it has its drawbacks. The modernization options are limited as long as the system remains in an old programming language. It will always be much more costly to enter new insurance products in a system that is written in COBOL than entering them in a system that has been programmed with Java or C#.

So, the more often requirements (e.g. in the form of new insurance products) change, the less advisable it is to chose to modernize the legacy system.

However, there is one compromise you can consider: It is possible to automatically translate a system written in programming languages like COBOL into modern languages like Java or C#. But then you have a modern language still with the old and unflexible structure. That means a re-engineering project would be necessary to modernize the structure. So, here we are close to the third option - developing a new system, which means high costs.

6 Replacing the Legacy System by an Off-the-Shelf Product

If, considering the above analysis, the modernization of the legacy system is not the right option, then existing products should be considered that contain the same or at least similar functionality as the old system.

The advantage is that such a product has presumably been tried out at other clients and as such has gone through several application management cycles. So, it should have become stable over the years.

The problem with off-the-shelf-products is that their inherent processes very seldom fit the processes your business staff is used to. The differences have to be documented by first analyzing the system documentation provided by the product vendor. Afterwards, additional functionality needed by the customer and functionality that has to be changed in the product need to be identified by the requirements engineer using various requirements gathering techniques. With this documentation, fairly good cost estimates can be formed.

If the product has to be customized for the client a lot, then the costs will "explode". Also, higher costs of future product updates have to be taken into consideration.

Again, there is an option to be considered that weakens the disadvantage. Products with a modular architecture might help here. Similar to Lego bricks a system can be built that fits the needs of the customer. Well-known modular systems for insurance businesses are FirstGen for P&C insurers, FirstLife for Life insurers and FirstRe for Reinsurers.

7 Development of a New System

The presumably most expensive option is the development of a new system. However, it is the option that will have the best result for the customer, provided the software de-velopment project is done in a highly professional manner.

The main advantage is that all internal processes can be implemented identically in the new system. Also, the technology (e.g. programming language) can be chosen to fit the customer's technology strategy.

The key factor for a successful project is again and here more than ever professional Requirements Engineering. For this option, a complete specification of the whole sys-tem is necessary. The use case concept as a highly successful method is recom-mended here.

The risk of a failure of such a project is higher the bigger the project or the system to be developed is. There are mainly 3 strategies that can reduce that risk (apply all of them):

1. Use an agile development method (e.g. Essential Unified Process or SCRUM)

2. Try to split a big project in smaller projects

3. Assign the project to a well-trained and very experienced IT team

8 Summary

In order to remain competitive in the market, for example by a fast introduction of new insurance products, the legacy systems have to be modernized or replaced sooner or later. For this task, three alternatives were introduced with their advantages and disadvantages. All alternatives rely on a successful IT-Project.

In order to help them to succeed in time, budget, and scope, the professional application of different Requirements Engineering techniques are a key success factor.

Related articles


Can InsureTech survive in the GDPR era?

Insurers must be cautious in using the latest AI technologies, as GDPR introduces a series of obligations for the controllers, aimed at safeguarding the rights and freedoms of data subject. In the following article, we will address the most significant risks that the use of such technologies pose from the perspective of data protection.


Insurance digitalization: how to avoid disapointment?

Price pressure is the biggest barrier to revenue growth, said almost half of the 46 global insurers interviewed by Simon-Kucher & Partners for the 2017 Global Pricing and Sales Study. A third of them also stated that most planned price increases are slashed or not implemented at all.


How technology impacts the insurance sector

Rather than merely adding value to the insurance sector, technology and technical innovations are now determining its very growth and evolution. The last few years have seen mobile devices, GPS functionality and social media engagement impact hugely as to how insurance claims are processed by companies and policies assessed by insurance agents. Analysis of data and the value of legitimate customer interactions is more important than ever and have helped insurance companies to maximize profits while keeping the customers happy.


FRISS: Uncovering insurance fraudsters

If you compare the insurance fraud business to other types of business, it pays off to commit insurance fraud. The benefits are great, the chances of being caught are low, and the sanctions you get once caught are low as well. So, whether working in the claims, financial, underwriting or SIU department; you will all deal with fraud at some point. And it does not stop at an organization or a border. Fraudsters do market research. They use different modus operandi, use different insurers, fake identities; just to make sure that they don't get caught.


Technology and data: Focus on the good we can do

Technology. The press is covering it, everyone is talking about it and we, as an industry, are spending time and money investing in it. For all this reasons and more, we will shortly talk about this topic at our Swiss Re L&H Conference in Warsaw in May: "Think tomorrow! Innovative solutions for our industry."


Insurance is the industry most affected by disruptive change, according to PwC

Insurance is the industry most affected by disruptive change - based on the percentage of CEOs who are 'extremely concerned' about the threats to growth from over-regulation, the speed of technological change, changing customer behaviour, and competition from new market entrants, shows the 20th edition of the PwC Global CEO Survey.


Reducing the loss ratio by effectively detecting insurance fraud

Insurance fraud is a serious issue for the entire insurance sector. Payment of fraudulent claims has a negative effect on the loss ratio and on insurance premiums, which results into a competitive disadvantage. Moreover, investigating 'false positives' takes a huge amount of time and unnecessary costs. Fraudsters are getting smarter in their attempts to evade the insurer's radar. As a consequence, money flows to the wrong people and thus combined ratios are under pressure. Insurance companies must detect insurance fraud before claims are paid. The best way to reduce the loss ratio is to increase the chances of fraud detection at claims and limit false positives to a minimum. 


Innovation - the right response to the technological challenge

The driverless revolution in the auto industry is already buzzing along city streets around the world, in a variety of tests and trials—and not just for cars, but for 18-wheel delivery trucks loaded with beer. Yet the excitement surrounding the emergence of autonomous vehicles tends to overshadow another tech revolution underway: the addition of dynamic cognition layers that will enable cars to care for human comfort, information and entertainment preferences in new and unimagined ways, say the Watson IoT team.



Fraudsters are getting smarter in their attempts to evade the insurer's radar. As a consequence, money flows to the wrong people and thus combined ratios are under pressure. Insurance companies must detect insurance fraud before claims are paid. The best way to reduce the loss ratio is to increase the chances of fraud detection at claims and limit false positives to a minimum.


Professional Requirements Engineering as a Key Factor for Successful Software Projects

In order to help your IT projects to succeed in time, budget, and scope, Requirements Engineering is a key success factor. Professional RE employed in a project or compa-ny-wide relies on trained Requirements Engineers. With increasing degree of maturity the use of IT tools built for Requirements Engineering become a critical factor in order to fully profit from automation aspects to save further costs and time.



JLT Re appoints Jeremy FOX as Asia-Pacific CEO

Global reinsurance broker JLT Re announced the appointment of Jeremy FOX to the position of Chief Executive Officer (CEO) of JLT Re's Asia-Pacific unit (APAC). He will also become a member of the Reinsurance Global Executive Committee.

SAVA Re adds new member of the management board

Slovenian re/insurer SAVA Re annoucend that the appointment of Polona Pirs ZUPANCIC as member of the management board has got the Insurance Supervision Agency's (ISA) approval. She started her term of office on 14 January 2018.


"Insurance and Pensions reloaded" - the 7th EIOPA Annual Conference

The 7th EIOPA Annual Conference takes place today in Frankfurt am Main, Germany. A review of the current supervisory covergence issues and of the prospects of the Pan European Personal Pension Product are on the event's agenda, together with analyzing the ways in which regulation may enable innovation.



"IIF2017 - Insurance in the DIGITAL World" Conference took place in Vienna

"IIF2017 - Insurance in the DIGITAL World" conference brought together in Vienna well-known insurance professionals from all over the world who analyzed the latest digital trends in the industry, taking into account the fast digitalization of the financial services providers' world, in particular in the insurance field, which is creating both huge opportunities and strong challenges for the players.



Croatian Insurance Days Live

On 9 November has started in Opatija, Croatia, the 2017 edition of the Croatian Insurance Days Conference, the traditional meeting of the Croatian insurance top professionals with their European peers. XPRIMM Publications are supporting the event as Media Partners.



The 2017 Baden Baden Meeting: Short recap

The Baden-Baden meeting, one of the key events in the reinsurance calendar, has just set the final point of this year's edition. XPRIMM Publications have reported from the meeting's premises. Let's recap!


Baden Baden Headlines 3: CEE insurance markets are attractive for reinsurers

Central and Eastern Europe insurance markets are an important source of business for Lloyds, total premium income from this region increasing by EUR 64 million since 2010, pointed out the Lloyd's representative in a seminar dedicated to CEE insurance markets: "We are seeing strong growth from Czech Rep, Poland, Slovakia and Ukraine. At the same time are some contractions from Russia, Bulgaria, Romania and Hungary due to challenging trading conditions as political implications and other sanctions".


Baden Baden Headlines 2: cyber insurance market set to grow under regulatory presure; nat cat events more frequent, but losses per event are decreasing

Asian insurance market, especially the Indian market - are considered to be "the new El-Dorado" of the global re/insurance market, with rapidly expanding markets and an dynamic environment: "Indian P&C re/insurance markets are expected to grow at a pace of 15% per annum", according  to Victor PEIGNET, CEO, Global P&C, SCOR SE. The French -based reinsurer setted-up its Indian branch in 2016, after the authorisation from the local market authority - IRDAI. India's re/insurance market has become more attractive for global companies following the relaxation of regulatory requirements, and lately, "big names" in the industry entered the market by opening branches: GEN Re, SCOR, Lloyd's of London, MUNICH Re, SWISS Re, Reinsurance Group of America (RGA), HANNOVER Re, XL Catlin and others.


See all