Software Quality & Risk Assessment for Nederlandse Loterij

The Issue at hand

NLO's Cearus/Styxs application converts a very high volume of transactions in real time into the standardized transaction records required by the Dutch Gambling Authority. NLO and its stakeholders needed independent assurance of the application's quality and risk against ISO 25010 and ISO 5055.

The Service Provided

IDC Metri ran a deep-dive Software Quality & Risk Assessment using CAST technology:

• A system-level measurement against ISO 25010 and ISO 5055, including issues in the calls between components — typically the hardest to find and the leading cause of downtime and repair time.

• Identification of the most critical errors requiring immediate attention.

• Management and Engineering dashboards, plus a concrete Improvement Plan.

The outcomes achieved

Every measured health factor — Robustness, Efficiency, Security, Changeability, Transferability, and Maintainability — scored well above 3 on Metri's 1-to-4 scale, indicating high code quality and low risk. Only 3 critical violations were found, complexity was kept low throughout, and every open-source component in use was recent and up to date. Metri estimated the entire Improvement Plan at no more than 3 person-days of work, giving NLO and its stakeholders confidence that the application was in good shape with no material risk left unaddressed.

Deliverables

Metri delivered Management and Engineering dashboards plus a concrete Improvement Plan, giving NLO and its stakeholders clear, evidence-based assurance of the Cearus/Styxs application's quality and risk.