Software Quality & Risk Re-Assessment for UWV

The Issue at hand

For an application the European Commission requires every EU member state to host and develop locally, UWV had commissioned a baseline assessment from IDC Metri in 2021, which surfaced issues needing resolution. UWV built an Improvement Plan from that baseline and began executing it in early 2023 — and needed to confirm the plan had actually worked.

The Service Provided

We did a follow-up assessment using CAST AIP:

• Re-running the assessment against the same ISO-aligned health factors as the 2021 baseline.

• Comparing results directly to the original baseline and the Improvement Plan built from it.

The outcomes achieved

The application now sits at a very acceptable quality and risk level across almost every dimension measured; only a few minor Efficiency items remain to bring that aspect up to the same standard. IDC Metri presented the results to UWV stakeholders alongside a management dashboard (health-factor scores, technical debt, lines of code by technology, and critical violation/CVE counts), an engineering dashboard locating every remaining issue, an updated improvement plan, an open-source component risk overview, and an estimate of the effort and cost to finish the job.

Deliverables

• Management Dashboard: Scores on Robustness, Security, Efficiency, Changeability, and Transferability, plus technical debt and CVE counts.

• Engineering Dashboard: Exact location of every remaining critical violation and how to fix it.

• Updated Improvement Plan: The remaining actions needed to reach target health-factor scores.

• Open-Source Component Overview: Known weaknesses in components used and recommended upgrade versions.