Sadly what is needed is usually just a clear understanding of the requirements, careful study of existing code and documentation, new code, writing new automated tests, and careful manual testing.