Reading it
Read the lowest part first, and treat the bands as rough groupings rather than a calibrated scale — they come from how these questions cluster, not from a dataset. A single question either way is noise. A part where you scored 1 or 0 is not. What the count is good for is comparing your sheet against your senior engineer’s, not scoring the system against other companies.
- Few gaps: the evidence is there, either to decide or to commission a second opinion before committing capital.
- Gaps spread evenly across parts: part of the picture, and usually the comfortable part. The lowest-scoring section is the argument that gets lost later.
- Most gaps in one part: that part is where the decision is exposed, regardless of the total.
- Gaps almost everywhere: worth measuring before paying anyone, including me.
If you want the second half
The scorecard measures whether the evidence exists. The 3-Day Technical Risk Review looks at what the evidence points to: one primary codebase, $3,500 fixed, excl. VAT. You get a decision memo, a prioritised risk register with evidence and a 30-day stabilisation plan.