. It depends on the size of the organization and the risks involved. e.g. for large organizations with high-risk projects a formalized QA process is necessary.

. If the risk is lower, management and organizational buy-in and QA implementation may be a slower.

.The most value for effort will often be in Requirements management processes Design inspections and code inspections post-mortems / retrospectives.