OHT 23.

The benefits of use of standards The organizations involved in standards development The classification of standards The scope of quality management standards ISO 9001 and ISO 9000-3 Certification according to ISO 9000-3 Capability Maturity Models The SPICE project and the ISO/IEC 15504 software process assessment standard
Galin, SQA from theory to implementation Pearson Education Limited 2004

OHT 23.2

* The ability to apply methodologies and procedures of the highest professional level. * Better mutual understanding and coordination among development teams but especially between development and maintenance teams. * Greater cooperation between the software developer and external participants in the project.

* Better understanding and cooperation between suppliers and customers, based on the adoption of standards as part of the contract.

Galin, SQA from theory to implementation

Pearson Education Limited 2004

OHT 23.3

Characteristics

The target unit

The main focus

Quality Management Standards Management of software development and/or maintenance and the specific SQA units Organization of SQA systems, infrastructure and requirements

Project Process Standards

A software development and/or maintenance project team

Methodologies for carrying out software development and maintenance projects

Standards objective
Standard's goal

What to achieve
Assuring suppliers software quality and assessing its software process capability

How to perform
Assuring the quality of a specific software projects products
Pearson Education Limited 2004

Galin, SQA from theory to implementation

OHT 23.4

Most prominent developers of SQA standards: <> IEEE (Institute of Electric and Electronic Engineers) Computer Society <> ISO (International Standards Organization) <> DOD (US Department of Defense) <> ANSI (American National Standards Institute) <> IEC (International Electrotechnical Commission) <> EIA (Electronic Industries Association)
Galin, SQA from theory to implementation Pearson Education Limited 2004

OHT 23.5

* Enable a software development organization to demonstrate consistent ability to assure acceptable quality of its software products or maintenance services. Certification is granted by an external body. * Serve as an agreed-upon basis for customer and supplier evaluation of the suppliers quality management system. Accomplished by performance of a quality audit by the customer. * Support the organization's efforts to improve its quality management system through compliance with the standards requirements.
Galin, SQA from theory to implementation Pearson Education Limited 2004

OHT 23.6

* Serve organizations as a tool for self-assessment of their ability to carry out software development projects. * Serve for improvement of development and maintenance processes by application of the standard directions * Help purchasing organizations determine the capabilities of potential suppliers. * Guide training of assessor by delineating qualifications and training program curricula.
Galin, SQA from theory to implementation Pearson Education Limited 2004

OHT 23.7

Customer focus Leadership Involvement of people Process approach : Desired result is achieved more efficiently when activities and resources are managed as a process. System approach to management Continual improvement Factual approach to decision making: analysis of information. Mutually supportive supplier relationships : There should be a mutual understanding between organization Galin, SQA from theory to implementation Pearson Education Limited 2004 and its suppliers.

OHT 23.8

Requirement Subjects

4. Quality management system

5. Management responsibilities

Requirement Subjects 4.1 General requirements 4.2 Documentation requirements 5.1 Management commitments 5.2 Customer focus 5.3 Quality policy 5.4 Planning 5.5 Responsibility, authority and communication 5.6 Management review 6.1 Provision of resources 6.2 Human resources 6.3 Infrastructure 6.4 Work environment 7.1 Planning of product realization 7.2 Customer-related processes 7.3 Design and development 7.4 Purchasing 7.5 Production and service provision 7.6 Control of monitoring and measuring devices 8.1 General 8.2 Monitoring and measurement 8.3 Control of nonconforming product 8.4 Analysis of data 8.5 Improvement
Pearson Education Limited 2004

6. Resource management

7. Product realization

8. Measurement, analysis and improvement

Galin, SQA from theory to implementation

OHT 23.9
Organization requesting certification
The The decision decision

The certifying organization

Planning process Planning process leading to leading to certification

certification

Development of the organizations of the Development SQA system organizations

SQA system

Organizations quality manual and SQA Organizations procedures Review of the quality manual and SQA procedures
quality manual and SQA procedures

Im ple Im ple moefntatio n o f m e ntatio n o rg anizatio ns ns o rg anizatio SQA s ys tes mte m SQA ys

Review of the quality manual and SQA procedures

Do the quality manual and procedures comply with ISO 9000-3 ? Do the quality

No

Performance audit of SQA management system Ye s Carry out performance improvements of SQA management system ISO 9000-3 certification
Galin, SQA from theory to implementation
Performance audit of SQA management Does the No system performance of

manual and procedures comply with ISO 9000-3 ?

No

Ye s

the SQA system comply with ISO 9000-3?

Yes

Pearson Education Limited 2004

OHT 23.10

<> Quantitative management methods increases the organization's capability to control the quality and improve the productivity. <> Application of the five-level capability maturity model that enables to evaluate the achievements and determine the efforts needed to reach the next capability. <> Generic process areas that define the what not how enables the model's applicability to a wide range of implementation organizations: -- It allows use of any life cycle model. -- It allows use of any design methodology, development tool and programming language. -- It does not specify any particular documentation standard.

Galin, SQA from theory to implementation

Pearson Education Limited 2004

OHT 23.11

Capability level transition Level 1 to level 2

Mean time (months) 24

No. of organizations 125

Level 2 to level 3
Level 3 to level 4 Level 4 to level 5
Source: Based on Gartner Inc. (2001)
Galin, SQA from theory to implementation

21.5
33 18

124
18 19

Pearson Education Limited 2004

OHT 23.12

Percentage of project resources

CMM capability level Original work Reworking Testing and quality assurance

1 2 3

34 55 67

41 18 11

25 27 22

4
Galin, SQA from theory to implementation

76

17
Pearson Education Limited 2004

OHT 23.13

CMMI-SE/SW

CMMI-SE/SW/IPPD/SS

System Engineering CMM (SE-CMM) Software engineering CMM (SW-CMM)

System Engineering CMM (SE-CMM) Software engineering CMM (SW-CMM) Integrated Product/Process Development (IPPD-CMM) Supplier Sourcing

CMMI-SE/SW/IPPD

System Engineering CMM (SE-CMM) Software engineering CMM (SW-CMM) Integrated Product/Process Development (IPPD-CMM)
Pearson Education Limited 2004

Galin, SQA from theory to implementation

OHT 23.14

Galin, SQA from theory to implementation

Pearson Education Limited 2004

OHT 23.15

** Harmonize the many existing independent assessment methodologies by providing a comprehensive framework model (what has to be accomplished rather than how it has to be done). ** Be universal to serve all or almost all categories of software suppliers, customers and software categories. ** Be highly professional. ** Aim at reaching international acceptance as world standard. To save suppliers' resources by eliminating the need to perform several different capability assessments in response to different customer requirements.
Galin, SQA from theory to implementation Pearson Education Limited 2004

OHT 23.16

<> To validate the ISO/IEC 15504 model's conformity with current standards. <> To verify its usability in determining whether software satisfies user requirements. <> To gain experience in applying the ISO/IEC 15504 model.
Galin, SQA from theory to implementation Pearson Education Limited 2004