One path for every change: requirement, risk, code, review, verification.
Our developers work as members of the client's .NET teams, under the client's QMS, development procedures and review workflow.
Risk assessment is part of every change, and traceability runs from the requirement to the implementation and its verification.