A software application is certified prior to deployment. A reviewer is assigned and a review time scheduled. A readiness assessment is performed prior to the review time. The reviewer then conducts a review including an overview, process flows identifying control points, deliverables, a demonstration, and a test plan. Results of the review are reported and a determination made of whether to certify the application. The software application may also be certified including performing additional testing after deployment.