|
Audit
Services for Software
Health Assessment
All modern businesses
depend on software for
providing quality services
to its customers. Software
thus is a single most
critical component for
service quality and
business continuity.
Software Quality assurance
traditionally has focused
on defining and refining
software development
processes as in SEI
CMM certification or
ISO certification to
improve software development
processes. None of these
however focus on the
software code as artifact,
making it difficult
for software consumers
to assess the quality
to software being deployed
in business.
Software artifact
quality assessment is
done by carrying out
testing. Testing is
carried out by feeding
inputs to the software
and examining the output.
If the output or behavior
is not as expected the
software is certified
unfit. Typically one
needs to feed tens of
thousands on inputs,
to have reasonable confidence
in software artifact.
The software consumer
organization is never
certain that 100% code
has been tested and
has to deploy the software
for use with Acceptance
Tests, which cover only
the functionality.
SynergyIFS provides
software audit services
to accurately assess
current health of software
written in JAVA language.
Our auditors conduct
computer assisted code
walks and guarantee
100% code coverage.
The process detects
most hidden defects,
which are difficult
to simulate using the
testing described above.
Summary management
report is submitted
at the end of audit
giving business impact
of the detected errors
enabling management
to take quick and quality
decisions about remedial
actions. The high risk
errors must be solved
at the earliest. e.g.
error in the area of
potential security threats,
and other defects in
performance, scalability,
maintainability etc.
can be resolved later.
The audit detects
software errors due
to incorrect usage of
the Java language, frameworks,
Java and J2EE libraries,
deviations from the
architecture, design
or coding rules specific
to an application.
As extended services
our auditors can examine
the code for critical
requirements by developing
new rules. e.g. it is
a key requirement for
your payment gateway
application that credit
card details are not
stored anywhere by the
application, our auditors
can develop specific
rules and certify the
application for this
security requirement.
We would be glad to
conduct sample audit
for you to demonstrate
the value of our software
audit processes on your
code base, which will
enable you to appreciate
the value of the audits.
|