01Architecture you can read
Architecture is documented with the C4 model, context, containers, components and code, so each audience sees the right level of detail [1].
02Security review
Security findings are graded against the OWASP ASVS [2] and the OWASP Top 10 [3].
03Delivery health
Delivery performance is benchmarked with DORA’s four key metrics [4].
References
- [1]The C4 model for visualising software architecture · c4model.comc4model.com/
- [2]Application Security Verification Standard (ASVS) · OWASP Foundationowasp.org/www-project-application-security-verification-standard/
- [3]OWASP Top 10 · OWASP Foundationowasp.org/www-project-top-ten/
- [4]DORA’s software delivery metrics · DORA (Google Cloud)dora.dev/guides/dora-metrics-four-keys/