Technical Due Diligence and Quality Improvement for UWV

The Issue at hand

Ahead of re-tendering maintenance and management of several applications, UWV needed an independent technical due-diligence review to create a level playing field for bidders.

The Service Provided

We first ran a portfolio analysis using Highlight technology across the applications in scope, then, when one recently delivered application showed more technical debt than expected for its age, followed up with:

• A deep-dive Software Quality & Risk Assessment identifying critical violations (CVEs) against ISO 25010, ISO 5055, OWASP, NIST, and CWE.

• A management dashboard scoring Robustness, Efficiency, Security, and Changeability.

• A targeted improvement plan for the responsible external party to execute.

The outcomes achieved

The external party executed the improvement plan, and a follow-up measurement a few weeks later confirmed the application's quality had reached a very good level. UWV was satisfied enough with the outcome to run the same process on four further applications delivered by the same supplier — all four were brought to an acceptable quality level too, meaningfully reducing risk, maintenance burden, and the chance of a production incident across the group.

Deliverables

A portfolio-level technical debt overview, a detailed Software Quality & Risk Assessment with management dashboard, and a targeted improvement plan — delivered for the initial application and repeated across four further applications from the same supplier.