Close Menu
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
More items
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
X (Twitter) LinkedIn
  • Home
  • Managing resilience
    • AI resilience
    • Business continuity
    • Business resilience
    • Climate resilience
    • C-suite and the board
    • DORA – the EU Digital Operational Resilience Act
    • Operational resilience
    • Organizational resilience
    • Supply chain resilience
    • Technology
  • Risk
    • Enterprise risk management
    • Operational risk
    • Threatscape
  • Cyber resilience
    • Cyber resilience updates
    • DORA – the EU Digital Operational Resilience Act
    • Product updates
Login
LinkedIn Bluesky
Resilience Forward
Subscribe Now
  • All News
  • Research
  • Jobs in Resilience
  • Resilience Resources
  • About Resilience Forward
Resilience Forward
You are at:Home»Managing resilience»Resilience by design»Software resilience-by-design starts with a clear strategy to improve code quality (Page 10)
Resilience by design

Software resilience-by-design starts with a clear strategy to improve code quality

Andy Weir presents three approaches to prevent software bugs and improve quality, security, and speed of delivery.
January 31, 20255 Mins Read
Quality coding concept.

Whilst as users we are constantly on the receiving end of bug-fixing app updates, there’s a daily drill in many DevOps teams. Developers are asked to ‘Just try harder’ not to create bugs and testers are expected to catch them before production. However, this age-old strategy doesn’t address the root causes of software bugs and can even be counterproductive. In an era where quality and speed of code means everything, developers should – and can – take a proactive approach to minimise the likelihood of bugs and take a resilience-by-design approach in order to reduce their impact.

With the aftermath of a problem in the coding process varying from slow or unresponsive user experience to business-ending data breaches, taking actionable steps to creating a culture to minimising bugs is essential to build productive development practices. Even if bugs can’t be 100% eliminated, keeping them at a low impact level rather than catastrophic failure will ensure teams find bugs before their customers do.

The importance of finding the root cause of bugs

Today’s development teams are perpetually under pressure – to deliver faster, cleaner, quality code. The impact of a bug is firstly on the team, sucking up time that they don’t have to fix such issues. Secondly, on the client – losing confidence in the development team to deliver great outcomes and putting pressure on CTOs to explain to the board.

The knee-jerk response to tackling frequent bugs might be to check code quality, testing, legacy issues, or poor requirements. However, it’s important first to address some of the root causes that contribute to bug creation which are crucial for creating a more resilient environment. 

There are three key approaches to counter the occurrence of bugs, which can significantly help software teams to improve the quality and speed of their software delivery. Building a secure and high-quality coding process is a central goal of this:

Fast continuous feedback loops

The importance of fast, continuous, feedback can’t be over-emphasised as the frontline of defence against bugs. This fast feedback ensures that issues are detected early so that code can be adjusted quickly to accelerate delivery.

In fact, high-performing teams that achieve fast feedback loops are crucial for early bug detection, risk mitigation, and quick recovery. Teams with fast feedback cycles also report better software delivery performance and are more resilient to failure.

When long pipeline build times discourage developers from running tests locally, this can lead to delayed issue detection. By investing in continuous integration/continuous delivery (CI/CD) infrastructure, optimising and streamlining test suites and automating manual processes, pipeline feedback can be cut to less than a minute locally and five minutes end-to-end.

In conducting more frequent testing and identifying issues at the earliest stage, the team can release software with confidence.

Proactive monitoring in development workflows

If we can’t completely eradicate bugs from appearing, at the very least it is essential to find and resolve them before customers do. By using targeted monitoring and observability tools and feature flags in development workflows, particularly with automated alert notifications, teams can spot any issues – and fix these – before they impact users.

Monitoring is the instrumentation (metrics, events, logs, and traces) that can help to explain a system’s health. It might be looking at low-level operational metrics like available disk space, memory, or CPU load, to API response times or user engagement (such as sales or conversion rates). Real-time observability and controlled rollouts will alert the development team to major issues, like a service outage or significant spike in errors, or indicate something more subtle, such as a drop in conversions or slow API responses. 

Other benefits of monitoring and observability include spotting long-term trends for capacity planning and identifying unauthorised activity. For instance, if you are migrating a legacy healthcare system while handling sensitive patient data, detecting bugs early during development rather than after deployment, will safeguard patient data and avoid disrupting the user experience.

Streamlining change approval

Another route is to reduce change approval overhead. In development workflows, approvals are often slow, involving multiple sign-offs and manual release candidates. This long process can lead to frequent ‘hot fixes’ that bypass processes entirely, which increases risk.

With an automated approach, teams can avoid bottlenecks, enabling faster releases and reducing the likelihood of bugs reaching production. This strategy involves transitioning to a peer-review-based process for code changes, supported by automated tests. Through implementing automation to build release candidates, teams ensure the tested code matches the code deployed and collaborate with stakeholders to simplify approvals. Using automated tools can more promptly identify regressions, performance problems, and security issues. 

In streamlining and automating change approval processes, this reduced friction makes releasing smaller, safer, changes easier. Taking this approach can reduce a shift from releasing every two weeks to every couple of days, dramatically reducing emergency fixes. Other benefits include generating improved stakeholder trust in the process, greater business confidence, and support engineers may have more time to invest in more proactive tasks alongside their role.

Proactive issue detection builds resilience

The key to building quality software that minimises the occurrence of bugs is adopting a resilience-by-design approach. Crucial to this is getting fast feedback on the impact of changes throughout the software delivery lifecycle.

When addressing frequent bugs, development team leads must consider monitoring and observability, the change approval process, and deployment automation and testing to improve the quality and security of code.

Whether they’re developers, testers, or project managers – taking responsibility for building these concrete steps into the software development lifecycle will minimise bugs and build superior software outcomes.

The author

Andy Weir is Technical Consultant at Headforwards

Africa Asia Asia Pacific Australasia Europe Middle East North America UK
Share. Facebook Twitter Pinterest LinkedIn Tumblr Email WhatsApp
Previous ArticleA hybrid cloud approach to disaster recovery
Next Article Understanding and managing SaaS risks: a new report from the Cloud Security Alliance

Related Posts

An exploding digital padlock illustrates the requirement for post-quantum cryptography.

Research breakthrough brings reliable quantum computers and Q-day closer to reality

September 10, 2026
A danger sign on a digital background.

New blob URL phishing technique evades detection by using legitimate Microsoft services

September 10, 2026
AI risks

Unmanaged AI workflows expose EMEA organizations to rising compliance and data risks

September 9, 2026
City skyline at sunset with bright light trails and a translucent blue smart-city grid overlay and GPS pins indicating locations.

AI world models: future possibilities for organizational resilience?

September 7, 2026
DRJ and BCI logos

DRJ and BCI publish guidance for governing, managing, and using AI in resilience

September 7, 2026
Decision making with over whelming information.

AI can find the vulnerability. Accountability still sits with your crisis leadership

September 7, 2026
Advertisement
Resilience First
This week's most read articles
Under pressure: An egg cracking under pressure applied by squeezing clamps form the sides.

Managing scenario testing for operational resilience

May 16, 2024
COSO logo

New COSO ERM guidance aims to help organizations with practical implementation

May 12, 2026
Close-up of a green-brown iris peering through a jagged tear in dark paper or wall material.

The blind spots in business continuity

September 2, 2026
Latest resources
Mature businessman smiling talking on smartphone drinking coffee.

A hidden dependency: when trust becomes a vulnerability

June 2, 2026
Load More

Subscribe to Updates

Get our Resilience Updates newsletter.

Most Popular Feature Articles
Three dark coloured light bulbs on a black background illustrate the concept of The Dark Triad in Crisis Management.

The Dark Triad in crisis management

Five stage crisis management framework

A five stage framework for a crisis management process

Blue interconnected gears and network nodes symbolizing automation and complex machinery.

Agent zero – the 2028 digital pandemic

Latest Reports
A futuristic red warning alert icon with glowing exclamation mark.

Cloud Security Alliance publishes Hugging Face Incident Initial Post-Mortem

A person hold a building door open for a person behind who is tailgating to get unauthorised access.

Security Culture: A Strategic Capability That Builds Resilience in a Volatile World

An identity icon with a map marker on it, indicating the concept of identity as a target for attackers. The icon is on a generic IT background predominantly in black and orange.

Identity-based approaches dominate initial access for ransomware attacks

A promo box for an article about resilience governance.
© 2026 Resilience Forward
  • About Resilience Forward
  • Newsletter
  • Newsfeed
  • Advertise
  • Call for Papers
  • Contact
  • Privacy Policy and Cookie Use
  • AI Use Policy

Type above and press Enter to search. Press Esc to cancel.

Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Manage Cookie Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behaviour or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Ad Blocker Enabled!
Ad Blocker Enabled!
Our website is made possible by displaying online advertisements to our visitors. Please support us by disabling your Ad Blocker.

Sign In or Register

Welcome Back!

Login to your account below.

Lost password?