Reporting and Assessment of Static Analysis Policies in a Globally Distributed Organization

Adoption of software engineering best practices requires a good infrastructure for monitoring compliance with each practice. Quite often, practice compliance implies that a set of policies are being adhered by each development group. Monitoring each practice to the level of individual policies is cumbersome as it involves some one to follow up manually with the development groups on each policy in each practice. This results in a significant quality assurance effort in a big organization where we have large number of development groups. Moreover, the data can be error prone and outdated due to time and multiple people involved in such activities. In this paper, we propose a policy checking and reporting framework to automate the reporting to a good extent. The framework is based on a central reporting service which collects software engineering data from various sources and provides the assessment on each policy related to static analysis practice.