{"id":10985,"date":"2026-07-15T22:00:49","date_gmt":"2026-07-15T22:00:49","guid":{"rendered":"https:\/\/mtpinternational.mx\/from-quality-office-to-business-assurance-layer-qe-for-an-eu-agency\/"},"modified":"2026-10-22T14:42:47","modified_gmt":"2026-10-22T14:42:47","slug":"from-quality-office-to-business-assurance-layer-qe-for-an-eu-agency","status":"publish","type":"post","link":"https:\/\/mtpinternational.mx\/en\/from-quality-office-to-business-assurance-layer-qe-for-an-eu-agency\/","title":{"rendered":"From Quality Office to Business Assurance Layer: QE for an EU Agency"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A European Union agency responsible for managing intellectual property rights across Europe\u2014trademarks, designs, and other registrations affecting hundreds of thousands of companies\u2014implemented a Quality Office with MTP. Over time, this evolved from functional test execution into a full Quality Engineering capability: cybersecurity, UX, automation, continuous testing, BDD\/TDD integration, Agile methodology, and the creation of a Business Assurance Layer (BAL) for European cooperation projects. In the area of DAST security automation, MTP automated 54 test cases and achieved 21% coverage of the dynamic security test plans for six corporate applications. <\/p>\n\n<h3 class=\"wp-block-heading\"><strong>From Quality Office to Business Assurance Layer: How an EU Agency Evolved Its Quality Model with MTP<\/strong><\/h3>\n\n<h2 class=\"wp-block-heading\"><strong>The Context: Software Quality Where Errors Affect Legal Rights Across Europe<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">A European Union agency responsible for managing intellectual property rights\u2014trademarks, designs, and other intellectual property rights affecting hundreds of thousands of companies and organizations across Europe\u2014operates a technological infrastructure that allows no room for ambiguity: the applications managing IP registrations must be accurate, secure, available, and auditable.<\/p>\n\n<p class=\"wp-block-paragraph\">For this agency, an error in the registration systems is not just a technical incident. It is a legal issue: it affects recognized rights, creates legal uncertainty, exposes the agency to claims, and erodes the trust of companies that depend on its services to protect their intellectual property in the European market. <\/p>\n\n<p class=\"wp-block-paragraph\">The organization needed more than just a testing company. It needed a partner capable of establishing a Quality Engineering function covering all its IT projects and maintenance activities, with the ability to evolve as the agency adopted new methodologies and expanded its scope to cooperation projects with other EU bodies. <\/p>\n\n<h2 class=\"wp-block-heading\"><strong>The Solution: A Quality Office That Grew into Business Assurance<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">MTP implemented and operated a Quality Office (QA Office) that, throughout the partnership, progressively expanded its scope to become a comprehensive Quality Engineering capability.<\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Foundation: Quality assurance for all IT projects.<\/strong> The core operation covers functional test design and execution, code analysis, performance testing, security testing, UAT support, automation, and continuous testing. MTP defined the agency&#8217;s Master Test Agreements (MTA), establishing the quality standards applicable to all projects and maintenance activities. <\/li>\n\n\n\n<li><strong>Evolution toward cybersecurity and advanced automation.<\/strong> Over time, the Quality Office expanded its scope toward integrated cybersecurity, process and test automation, integration of BDD and TDD methodologies, and support for the agency&#8217;s agile transformation. A specific milestone was the development of an automated DAST security testing framework, built on open-source technologies (Maven, ZAP, Zalenium, Jenkins) and integrated into the agency&#8217;s CI pipelines. This framework was successfully applied to six corporate applications and included automatic authentication, sitemap crawling, passive and active vulnerability analysis covering more than 30 OWASP categories, and automatic report generation.  <\/li>\n\n\n\n<li><strong>Creation of the Business Assurance Layer (BAL).<\/strong> The most strategic step in the evolution was the creation of a Business Assurance Layer specifically for the agency&#8217;s European Cooperation Service projects. The BAL translates the quality engineering function from the technical level to the business level: it not only ensures that the software works, but that IT projects deliver the value the agency needs for its cooperation responsibilities on a European scale. <\/li>\n\n\n\n<li><strong>UX and digital experience.<\/strong> The integrated UX capability within the service ensures that the agency&#8217;s systems\u2014accessed by companies across Europe in multiple languages and contexts\u2014are functional not only in technical terms but in terms of the actual experience of users registering and managing their intellectual property rights.<\/li>\n<\/ul>\n\n<h2 class=\"wp-block-heading\"><strong>Key Metrics<\/strong><\/h2>\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>Indicator<\/strong><\/td><td><strong>Result<\/strong><\/td><\/tr><tr><td>Automated DAST Security TCs<\/td><td>54 automated test cases<\/td><\/tr><tr><td>Security Test Plan (STP) coverage via DAST<\/td><td>21% coverage achieved across 6 corporate applications<\/td><\/tr><tr><td>OWASP categories covered in DAST analysis<\/td><td>+30 OWASP standard categories<\/td><\/tr><tr><td>Applications covered by the automated DAST framework<\/td><td>6 corporate applications<\/td><\/tr><tr><td>Expansion of Quality Office scope<\/td><td>Functional testing \u2192 cybersecurity + UX + automation + BDD\/TDD + Agile + Business Assurance Layer<\/td><\/tr><tr><td>Impact on production (defects, incidents, cycle time)<\/td><td>(Data pending\u2014essential for completing the OSIR)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<h2 class=\"wp-block-heading\"><strong>Measurement Methodology<\/strong><\/h2>\n\n<p class=\"wp-block-paragraph\">The 54 automated test cases in the <a href=\"https:\/\/www.opentext.com\/es\/what-is\/dast\" target=\"_blank\" rel=\"noopener\">DAST<\/a> framework were counted from the project repository, validated against the agency&#8217;s original Security Test Plans (STPs). The 21% STP coverage was calculated as the percentage of scenarios from the dynamic security test plans covered by the automated framework, out of the total universe of STPs defined for the six pilot applications. DAST analysis results are automatically generated in online reports per version, available to the agency&#8217;s security and development teams.  <\/p>\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n<p class=\"wp-block-paragraph\">Does your organization need to go beyond testing and build a Quality Engineering function that ensures the value of its IT projects? Schedule a QE Maturity Assessment with MTP\u2014free of charge, in two weeks. We evaluate your current model and map out the path toward a sustainable quality operation.  <\/p>\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/mtpinternational.mx\/en\/contact\/\">Schedule a QE Maturity Assessment \u2014 No Cost<\/a><\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A European Union agency responsible for managing intellectual property rights across Europe\u2014trademarks, designs, and other registrations affecting hundreds of thousands of companies\u2014implemented a Quality Office with MTP. Over time, this evolved from functional test execution into a full Quality Engineering capability: cybersecurity, UX, automation, continuous testing, BDD\/TDD integration, Agile methodology, and the creation of a [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":10986,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","content-type":"","footnotes":""},"categories":[60,61],"tags":[],"class_list":["post-10985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-case-studies","category-public-administration-case-studies"],"_links":{"self":[{"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/posts\/10985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/comments?post=10985"}],"version-history":[{"count":1,"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/posts\/10985\/revisions"}],"predecessor-version":[{"id":10987,"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/posts\/10985\/revisions\/10987"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/media\/10986"}],"wp:attachment":[{"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/media?parent=10985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/categories?post=10985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mtpinternational.mx\/en\/wp-json\/wp\/v2\/tags?post=10985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}