• Home
  • BVSSH
  • C4E
  • Playbooks
  • Frameworks
  • Good Reads
Search

What are you looking for?

Standard : Codebases consistently meet high standards of quality

Purpose and Strategic Importance

This standard ensures codebases consistently reflect high-quality engineering practices, enabling systems that are reliable, maintainable, and scalable. It promotes shared accountability for technical integrity and strengthens confidence in delivery outcomes.

Aligned to our "Engineering Excellence First" policy, this standard drives consistency, readability, and long-term value across teams. Without it, teams risk fragmented code, technical debt, and reduced ability to evolve systems with speed and safety.

Strategic Impact

Clearly defined impacts of meeting this standard include improved delivery flow, reduced risk, higher system resilience, and better alignment to business needs. Over time, teams will see reduced rework, faster time to value, and stronger system integrity.

Risks of Not Having This Standard

  • Reduced ability to respond to change or failure
  • Accumulation of technical debt or friction
  • Poor developer experience and morale
  • Decreased confidence in releases and features
  • Misalignment between technical implementation and business priorities

CMMI Maturity Model

Level 1 – Initial

Category Description
People & Culture - Quality varies widely between developers.
- No shared understanding or focus on quality.
Process & Governance - No formal quality standards or code review processes.
- Quality assurance is ad hoc.
Technology & Tools - Limited use of static analysis, linting, or automated testing.
- No integration of quality tools in pipelines.
Measurement & Metrics - Quality defects tracked informally, if at all.

Level 2 – Managed

Category Description
People & Culture - Teams adopt informal practices such as peer reviews.
- Awareness of code quality importance begins to grow.
Process & Governance - Basic quality standards documented.
- Code reviews happen but are inconsistent.
Technology & Tools - Introduction of static code analysis and unit testing.
- Some automated checks run manually or semi-automatically.
Measurement & Metrics - Defect counts and review coverage tracked inconsistently.

Level 3 – Defined

Category Description
People & Culture - Quality standards are shared and consistently followed.
- Teams collaborate on improving code health.
Process & Governance - Formal code review and testing policies established.
- Quality gates integrated in development workflow.
Technology & Tools - Automated linting, static analysis, and unit/integration tests in CI pipelines.
- Quality dashboards support transparency.
Measurement & Metrics - Metrics on test coverage, code smells, and defect trends regularly reviewed.

Level 4 – Quantitatively Managed

Category Description
People & Culture - Teams use quality data to drive improvement.
- Quality culture embedded across development and operations.
Process & Governance - Quality goals are part of definition of done and delivery metrics.
- Continuous improvement based on data feedback loops.
Technology & Tools - Advanced tooling supports security scanning, performance testing, and code quality benchmarking.
- Quality issues trigger automated workflows.
Measurement & Metrics - Quantitative quality KPIs monitored (e.g. code coverage, cyclomatic complexity, defect density).

Level 5 – Optimising

Category Description
People & Culture - Quality excellence is a core team identity.
- Teams innovate to improve code quality through automation and new techniques.
Process & Governance - Quality is proactively evolved with architectural and process improvements.
- Benchmarks and industry standards inform continuous innovation.
Technology & Tools - Intelligent tools provide predictive analytics and auto-remediation.
- Quality integrates with product impact and customer feedback.
Measurement & Metrics - Continuous refinement of quality metrics aligned to business outcomes.
- Quality improvements demonstrate clear ROI and risk reduction.

Key Measures

  • % of codebase covered by automated tests
  • Number of critical defects detected pre-production
  • Code review coverage and average turnaround time
  • Trends in code complexity, duplication, and technical debt
  • Developer satisfaction and perceived code quality
  • Quality-related deployment rollback or incident rates
Associated Policies
  • Engineering Excellence First
Associated Practices
  • User Session Replay Tools
  • Container Security Scanning
  • Vulnerability Management Dashboards
  • Threat Modelling Workshops
  • Dynamic Application Security Testing (DAST)
  • Shift-Left Testing
  • Accessibility Testing
  • Ensemble Testing
  • InnerSource Development
  • Engineering Onboarding Playbooks
  • Code Reviews & Pull Requests
  • Mocking and Stubbing
  • Secure Code Training
  • Evolutionary Architecture
  • Refactoring
  • Linting and Static Code Analysis
  • Dependency Management Policies
  • Static Code Analysis
  • Microservices Architecture
  • Compliance-as-Code

Technical debt is like junk food - easy now, painful later.

Awesome Blogs
  • LinkedIn Engineering
  • Github Engineering
  • Uber Engineering
  • Code as Craft
  • Medium.engineering