Obsolete technology
- End-of-life components
- Unsupported versions
- Delayed upgrades
COMPASSMenu
ANONYMISED CASE STUDY
What an independent technical assessment uncovered.
A business-critical healthcare platform delivered through a large outsourced software programme.
20production components400k+lines of code~300database tables
Patterns across the software estate.
The assessment connected individual implementation findings to recurring themes affecting security, operations, supportability and future remediation.
Dependency exposure
- Known vulnerable packages
- Transitive dependency risk
- Inconsistent patch management
Insecure implementation
- Hardcoded credentials
- Insecure protocols
- Security controls bypassed
Engineering weakness
- No automated test coverage
- High code duplication
- Weak database integrity
The combined findings exposed a larger remediation problem.
Recurring patterns across the estate increased security, operational and remediation exposure.
0%automated test coverage33%code duplication53%tables without primary keys
The findings changed the remediation priorities.
The engagement gave stakeholders shared technical material for vendor discussions, risk decisions and a sequenced remediation plan—without overstating the certainty of any single automated signal.
NEXT STEP
