Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. It's 100% free.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Does anyone know of a template / checklist that can be used to conduct a software health check. My team supports a number of legacy applications and we have been asked to present a score card to senior management on the health of the applications.

The template would be used to:

  • Identify you have performance or stability issues that may cause production outages, delays or financial impacts.
  • Identify data, authorization or authentication security holes / shortcomings in the application / service.
  • Identify the backup, disaster recovery and business continuity compliance of the application / service.
  • Identify the compliance of the application / service to a reference architecture or predefined set of technical standards.
  • Identify the current and required monitoring and alerting of the application / service.
  • Identify the level of transaction support and potential for data corruption or error of the application / service.
  • Identify licensing concerns of the application / service.
  • Identify the minimum hardware requirements of the application / service.
  • Identify the technology, vendor support and community support for the application / service.
  • Provide a recommendation on all findings.

A quick search on Google didnt seem to realize anything useful, other than this template to purchase

share|improve this question

closed as off-topic by gnat, MichaelT, GlenH7, Kilian Foth, thorsten müller Sep 20 '13 at 7:59

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions asking us to recommend a tool, library or favorite off-site resource are off-topic for Programmers as they tend to attract opinionated answers and spam. Instead, describe the problem and what has been done so far to solve it." – gnat, Community, GlenH7, Kilian Foth, thorsten müller
If this question can be reworded to fit the rules in the help center, please edit the question.

What's wrong with the excellent list you provided? It seems perfect. What more do you want? Are you looking for ITIL material? – S.Lott Jul 6 '11 at 13:40
The list above seems to be a good starting point. – armitage Jul 6 '11 at 13:42
I was hoping that someone would be kind enough to have an existing document or power point presentation that covered most of what I was looking for. If there isn't one available within the communit then will happily share mine once I write it. – Kane Jul 6 '11 at 13:44
(Opps hit enter too quick) The list above seems to be a good starting point but you might also want to record the software dependencies i.e. only runs on Windows 2000 server which is due to depreciated in XX years, on the backups you may also want record how often a restore is done and when was the last one done. – armitage Jul 6 '11 at 13:44
up vote 3 down vote accepted

Some ideas:

  • For comprehensive checklist on security you can look towards the OWASP ASVS.
  • For a risk analysis model, largely focused on security, you can look at microsoft's SDL.
  • For hardware requirements, you're going to have to do benchmarking on a running system under normal use. We did this for our software and derived figures from that on minimum hardware requirements, concurrent users, and so on.
  • For licensing concerns, you need to trace the origin of each software component (OWASP ASVS includes this), and then specify the license for each component, possibly adapting the code in case of non-compliance. You don't need a methodology for this, it's just a lot of boring work.
  • You may want to read up on risk analysis methodologies (separate from software), and apply them to the feature domains you are interested in.

I sincerely doubt that there's actually a ready-made document that you can apply to an arbitrary software project that covers all of what you ask.

share|improve this answer
I wouldn't be so pessimistic, I'm sure the ACM, IEEE and a bunch of research papers have done the legwork for this. – omouse Sep 17 '13 at 19:02

Not the answer you're looking for? Browse other questions tagged or ask your own question.