Risk-based software validation and change control

One or more non-transitory computer-readable media that store computer-executable instructions that, when executed, implement a method for applying change control when upgrading a software application, the method comprising:

• comparing a first version of a software application and a second version of the software application to identify differences in features and functionality between the first version of a software application and the second version of a software application;
• determining whether the identified differences affect software modules or features that are integrated in the software application beyond a threshold amount;
• performing internal usage testing to determine how the first version of the software application is recommended for use;
• based on an identified level of integration and based on the internal usage testing, determining that a particular portion of the second version of the software application should undergo client specific validation;
• and
• recommending the particular portion of the second version of the software application for client specific validation.

A computer system for applying change control when upgrading a software application comprising:

• one or more processors;
• and
• one or more computer-readable media having stored thereon executable instructions that when executed by the one or more processors configure the computer system to perform at least the following:
• calculate a risk score for one or more features in a software application, the risk score indicating a relative level of risk for installing and using the software application;
• perform internal usage testing to determine how the software application is recommended for use;
• conduct one or more use tests to determine how a specified client uses the one or more features of the software application as compared to a determined recommended use;
• and
• provide, based on the calculated risk score and the determined client use of the one or more features, a recommendation for the specified client indicating which portions of the software application are to undergo client-specific validation.