Obsolete technology
- End-of-life components
- Unsupported versions
- Delayed upgrades
COMPASSMenu
ANONYMISED CASE STUDY
Inside an independent assessment of a complex healthcare platform.
A technical assessment of a business-critical healthcare system revealed recurring weaknesses across security, maintainability and software delivery.
20production components400k+lines of code~300database tables
What was examined and what emerged.
The engagement examined a large outsourced software estate and connected individual implementation findings to recurring patterns affecting security, operations, maintainability and future remediation.
Dependency exposure
- Known vulnerable packages
- Transitive dependency risk
- Inconsistent patch management
Insecure implementation
- Hardcoded credentials
- Insecure protocols
- Security controls bypassed
Engineering weakness
- No automated test coverage
- High code duplication
- Weak database integrity
The combined findings exposed a larger remediation problem.
Recurring patterns across the estate increased security, operational and remediation exposure.
0%automated test coverage33%code duplication53%tables without primary keys70%projects with critical security ratings
The findings changed the remediation priorities.
The engagement gave stakeholders a shared technical basis for vendor discussions, risk decisions and a sequenced remediation plan without overstating what any single finding could prove.
YOUR ASSESSMENT
