Software Quality & Risk Assessment for Dura Vermeer

The Issue at hand

Dura Vermeer hired an external party to redevelop one of its business-critical, custom-built applications — the system of record for all project information — and wanted assurance that the new application's code and architecture would be robust, efficient, secure, and easy to maintain.

The Service Provided

IDC Metri ran a four-week SQRA using CAST technology to blueprint the architecture and measure quality and risk against current standards, answering questions including:

• Technical quality at system level against ISO 25010, ISO 5055, CISQ, CWE, OMG, NIST, and OWASP.

• Quality and risk scored 1–4 on Robustness, Efficiency, Security, Changeability, Transferability, and an overall Total Quality Index.

• Technical and functional size (in Automated Function Points), technical debt, and expected annual maintenance cost.

• Known vulnerabilities and license risk in the open-source components used.

• A concrete, effort-estimated improvement plan with simulated post-fix scores.

The outcomes achieved

The application's quality proved very high and its risk very low across robustness, security, efficiency, changeability, and transferability — reassuring news for Dura Vermeer management and the development team, whose high-quality mindset was already evident in low technical debt and very few critical violations. IDC Metri's 28-action improvement plan gave the team a clear path to resolving what remained, so Dura Vermeer could expect the application to run in a stable, secure, and efficient way after handover to its own maintenance organization, at as low a maintenance cost as possible.

Deliverables

• Management Presentation: Major findings, observations, and recommendations, plus answers to all ten research questions posed.

• Management Health Dashboard: Scores on every health factor plus technical debt, technical size, and functional size.

• Engineering Dashboard: Every violation found, its exact location, why it's critical, and how to fix it.

• Architectural Blueprint: A visual map of every connection between components, frameworks, and layers.

• Improvement Plan: 28 concrete actions, with simulated post-fix health-factor scores.