SlideShare a Scribd company logo
Standards – promoting quality or
restricting competition?
James Christie
1a
James Christie
jack of all trades, master of some
Test Manager & Consultant
Developer & Business Analyst
Information Security Manager
Project Manager
Computer Auditor
investment accountant
trainee chartered accountant
1b
Image courtesy Stuart Miles/FreeDigitalPhotos.net
Standards are a good thing
Shared understanding/definitions
Connecting the world
Repository of collective experience
Protect suppliers from
unscrupulous competition
Protect customers from
unscrupulous suppliers
2a
Can be attached to or referenced
by contracts
Increase professional discipline
Image courtesy Keerati/FreeDigitalPhotos.net
But testing standards ?
“ISO/IEC29119 relates to bullshit”
James Bach
Search for Michael Bolton & testing standards.
“If you need ISO29119, you probably
couldn't make good use of it.
If you could make good use of it, you
probably don't need it.”
Iain McCowatt
My objection here is to their status as
standards, rather than their content.
2b
What I learned from economics
1. There’s far too much unjustified certainty
around from people who should know
better.
2. Everything I learned about economics is
either rubbish, or simplistic (but
interesting). Probably. I'm not certain (see
#1).
3. The assumptions you start with dictate the
conclusions you arrive at.
4. In trying to understand what's happening
start by following the money (cui bono).
5. Dig below the surface. Always.
3a
Images courtesy Stuart Miles/FreeDigitalPhotos.net
What is economic rent?
capital
land
labour
3b
Image courtesy Stuart Miles/FreeDigitalPhotos.net
What is economic rent?
“There are two ways to become
wealthy; to create wealth or to take
wealth from others.”
Joseph Stiglitz, Columbia University,
Nobel prize winner in Economics.
“The payment to a factor of production
in excess of what is required to keep
that factor in its present use.”
David Riccardo
Unearned income? Or income that’s not
consistent with free market returns?
3c
Images courtesy coldesign, Stuart Miles/FreeDigitalPhotos.net
Theft
Rare talent
Monopoly profits
Insider dealing
Asymmetric knowledge
Inappropriate regulation
Patent ambush
Collusion over standards
3d
What is economic rent?
Free
money
Images courtesy Stuart Miles & Chris Sharp /FreeDigitalPhotos.net
Rent Seeking (it’s the name of the game)
3e
Influencing public policies for personal or factional gain
A negative sum game
Images courtesy Stuart Miles & digitalart /FreeDigitalPhotos.net
Rent Seeking (it’s the name of the game)
The prisoner’s dilemma
3f
Influencing public policies for personal or factional gain
Rent Seeking (it’s the name of the game)
Many small losers
A few big winners
3g
Images courtesy Stuart Miles, cooldesign & Vlado /FreeDigitalPhotos.net
Influencing public policies for personal or factional gain
Rent Seeking (it’s the name of the game)
Influencing public policies for personal or factional gain
Testers & customers
Many big losers
A few big winners
Large testing consultancies?
3h
Images courtesy Stuart Miles, cooldesign & Vlado /FreeDigitalPhotos.net
Image from Tom Toles / Washington Post
Regulatory Capture
Don’t break the law. Make the law.
“As a rule, regulation is acquired by
the industry and is designed and
operated primarily for its benefits.”
George Stigler, University of
Chicago, Nobel prize winner in
Economics
“Regulation was often sought by
industries for their own protection,
rather than being imposed in some
‘public interest’.”
Barry M Mitnick, University of
Pittsburgh
4a
Favourable legislation
Cognitive capture
Revolving doors
Licensing
4b
Regulatory Capture
Don’t break the law. Make the law.
Images courtesy Sura Nualpradid /FreeDigitalPhotos.net
Regulatory Capture - Licensing
4c
1970s,10% of US workforce in licensed occupations
2008, 30% of US workforce in licensed occupations
(Morris Kleiner)
“Imagine an industry where
qualifications are based on accepted
standards, required services are
specified in contracts that reference
these same standards, and best
industry practices are based on the
foundation of an agreed body of
knowledge – this could easily be the
testing industry of the near future.”
Stuart Reid, convenor of ISO 29119
Working Group
Implications – the vision of standards
5a
“Imagine an industry where
qualifications are based on accepted
standards, required services are
specified in contracts that reference
these same standards, and best
industry practices are based on the
foundation of an agreed body of
knowledge – this could easily be the
testing industry of the near future.”
Stuart Reid, convenor of ISO 29119
Working Group
Implications – the vision of standards
5a
Implications – the vision of standards
Have you ever felt insignificant?
5b
Implications – the vision of standards
5c
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d1
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d2
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d3
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d4
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d5
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d6
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d7
Implications – the vision of standards
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5d8
Implications – the vision of standards
5e
How government & big corporations
might see “craftsmen” testers?
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
Implications – the vision of standards
How the standards lobby wants to see
“serious” testers?
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5f
Image courtesy Ambro /FreeDigitalPhotos.net
Implications – the vision of standards
What we might get; drudgery, but we’re
proud to say we do ISO standard drudgery.
Irrelevant
“craftsmen” as
opposed to…?
Serious
corporate
testers?
Responsible
professionals?
Certified
testers?
5g
Implications – the Healthcare.gov fallout
6a
“Test Maturity and the Obamacare Website
Contractors to Government should have a
high CMMI and TMMI Level proving that
they not only have processes of high
maturity but continuously operate in a
mature environment.
The CMMI and TMMI are required by many
Department Of Defense and U.S.
Government contracts, since it will give the
Government the peace at heart that they
are dealing with a mature Company
operating with best practices.”
Images courtesy Stuart Miles/FreeDigitalPhotos.net
Implications – the Healthcare.gov fallout
6b
“Apply standards judicially … and
selectively apply frameworks such as CMMi
and ITIL to embrace their value-adding
processes and functions.
Service providers themselves should define
expectations regarding the application and
adherence to international standards like
ISO 29119 for software testing … to avoid
a situation where a solution or service has
never been tested and operational
readiness is questionable.”
Submission to
federal government
by professional
body?
Sales blurb?
or
“Lessons Learned From Healthcare.gov's
Troubled Launch”
Implications – the Healthcare.gov fallout
6b
“Apply standards judicially … and
selectively apply frameworks such as CMMi
and ITIL to embrace their value-adding
processes and functions.
Service providers themselves should define
expectations regarding the application and
adherence to international standards like
ISO 29119 for software testing … to avoid
a situation where a solution or service has
never been tested and operational
readiness is questionable.”
Sales blurb?
or both
Oct 15
2013
Dec 12 2013
Submission to US
Environmental
Protection Agency
“Lessons Learned From Healthcare.gov's
Troubled Launch”
Implications – the Healthcare.gov fallout
6c
“What the Outsourcing Industry Can Learn
from the HealthCare.gov Fiasco.
Set and adhere to standards.
Never put out a product to the market
without adhering to international standards.
There is ISO 29119 for software testing and
ISO 20000 for service management.”
“We base our approach to test strategy and
planning on ISO 29119 … to which we are
a contributor… (So) you are assured your
test strategy will reflect the complexity of
any given development project.”
Implications – the Healthcare.gov fallout
6d
“Infuse Test Factory is delivered on pre-
built centre of excellence model. The test
factory is an industrialized test delivery
service based on best of breed process,
people, and technology.
The service can be applied to functional
testing and non-functional testing.
Built on a proven methodology and a certified TMMi Level 3 testing
service; the Test Factory is built to ISO 29119 & ISO25010 standards.
The Infuse Test Factory provides an efficient and effective service
with guaranteed outcome.”
(for 2000 automated tests)
Implications – the Healthcare.gov fallout
6d
“Infuse Test Factory is delivered on pre-
built centre of excellence model. The test
factory is an industrialized test delivery
service based on best of breed process,
people, and technology.
The service can be applied to functional
testing and non-functional testing.
Built on a proven methodology and a certified TMMi Level 3 testing
service; the Test Factory is built to ISO 29119 & ISO25010 standards.
The Infuse Test Factory provides an efficient and effective service
with guaranteed outcome.”
(for 2000 automated tests)
6e
Marketing ISO 29119 – the treasure of the standards
6e
Marketing ISO 29119 – the treasure of the standards
Mit der richtigen Schatzkarte in der Tasche ist der Weg oft ganz
einfach – das gilt auch fürs Softwaretesten. Im Spätsommer
2013 sind die ersten drei Teile der neuen Norm ISO/IEC/IEEE
29119 erschienen.
With the right treasure map in your pocket it’s easy to find your
way – that also goes for testing. The first three parts of the new
standard ISO 29119 are coming in late summer 2013.
6e
Marketing ISO 29119 – the treasure of the standards
Mit der richtigen Schatzkarte in der Tasche ist der Weg oft ganz
einfach – das gilt auch fürs Softwaretesten. Im Spätsommer
2013 sind die ersten drei Teile der neuen Norm ISO/IEC/IEEE
29119 erschienen.
With the right treasure map in your pocket it’s easy to find your
way – that also goes for testing. The first three parts of the new
standard ISO 29119 are coming in late summer 2013.
Marketing ISO 29119 – an appeal to fear
6f
“Imagine something goes noticeably
wrong. How easy will you find it to
explain that your testing doesn’t comply
with international testing standards? So,
can you afford not to use them?”
Stuart Reid
Marketing ISO 29119 – asymmetric information
6g
Can you tell a
lemon from a
Lamborghini?
James Christie
“Buyers are
unclear on
what is 'good
test practice' “
Stuart Reid
Lamborghini image courtesy Teerapun /FreeDigitalPhotos.net
COBIT Framework
has no insistence
on “best practice”
Countless references to ISO
standards for;
- Risk management
- Security
- Release management
- Configuration management
- Service level management
- Incident management
- Problem management
- Business continuity
- etc
No mention of
testing
standards
No insistence on
detailed scripts
or test cases
None at all!
7a
What do the auditors say?
“Every IT environment is unique and
represents a unique set of risks. The
differences make it increasingly difficult
to take a generic or checklist approach
to auditing.”
7b
What do the auditors say?
The Snowflake Theory of IT Audit
Institute of Internal Auditors
Global Technology Audit
Guide, Management of IT
Audit, 1st edition, 2006
ISO standards are not mentioned except
in an appendix “… for consideration”.
“Internal auditors should not expect
organizations to fully implement PMBOK,
PRINCE2, COBIT, or any other large set of
best practices. Rather, they should expect
to see that these practices have been
customized and integrated into the
organization’s project management
methodology.”
Institute of Internal Auditors
Global Technology Audit
Guide,
Auditing IT Projects, 2009
(current)
7c
What do the auditors say?
Wrapping up – we have to speak out
8a
“Buyers are unclear on what
is 'good test practice' “
The debate must not be framed as a false choice
OR
Wrapping up
8b
American Society of Mechanical Engineers
v. Hydrolevel Corporation
Response of standards bodies?
Consensus is
“general agreement,
characterized by the
absence of sustained
opposition… by any important
part of the concerned interests”.
Need for consensus regarding both
standards and their interpretation.
Wrapping up
8c
Email: james@clarotesting.com
Twitter: @james_christie
www.clarotesting.wordpress.com
www.clarotesting.com Image courtesy Stuart Miles/FreeDigitalPhotos.net

More Related Content

PDF
Continuous Delivery Testing @HiQ
Tomas Riha
 
PDF
Adding value in an agile context
HouseofTest
 
PPTX
Continuous testing webinar 041017 slideshare
QualiQuali
 
PDF
Continuous delivery @ hi q
Tomas Riha
 
PDF
Continuous Performance Testing
Mairbek Khadikov
 
PDF
What i've learned about test automation and DevOps
Filipe Bartolomeu
 
PPTX
Enhancing your Test automation Scenario Coverage Using Selenium by Eran Kinsb...
QA or the Highway
 
PPTX
Testing As A Bottleneck - How Testing Slows Down Modern Development Processes...
TEST Huddle
 
Continuous Delivery Testing @HiQ
Tomas Riha
 
Adding value in an agile context
HouseofTest
 
Continuous testing webinar 041017 slideshare
QualiQuali
 
Continuous delivery @ hi q
Tomas Riha
 
Continuous Performance Testing
Mairbek Khadikov
 
What i've learned about test automation and DevOps
Filipe Bartolomeu
 
Enhancing your Test automation Scenario Coverage Using Selenium by Eran Kinsb...
QA or the Highway
 
Testing As A Bottleneck - How Testing Slows Down Modern Development Processes...
TEST Huddle
 

What's hot (18)

PPTX
Continuous Testing - The Final Frontier
Jaco Greyling
 
PDF
DevOps Testing | Continuous Testing In DevOps | DevOps Tutorial | DevOps Trai...
Edureka!
 
PDF
Mobile Apps development best practices. TDD, CI, CD
GlobalLogic Ukraine
 
PDF
Appium, Test-Driven Development, and Continuous Integration
TechWell
 
PPTX
Colorful world-of-visual-automation-testing-latest
Onur Baskirt
 
PDF
Continuous delivery its not about the technology, its about the people. @pipe...
Tomas Riha
 
PPTX
Continuous everything
TEST Huddle
 
PDF
The Automation Firehose: Be Strategic and Tactical by Thomas Haver
QA or the Highway
 
PDF
DevOps Continuous Integration & Delivery - A Whitepaper by RapidValue
RapidValue
 
PDF
Become a Performance Diagnostics Hero
TechWell
 
PDF
An Agile Testing Dashboard: Metrics that Matter
TechWell
 
PPTX
DevOps Architecture Design
Agile Testing Alliance
 
PDF
The Key to DevOps? Testing Early in the Pipeline
DevOps.com
 
PPTX
I Don't Test Often ...
Gareth Bowles
 
PDF
[Webinar] Test First, Fail Fast - Simplifying the Tester's Transition to DevOps
KMS Technology
 
PDF
Automated Visual Regression Testing by Dave Sadlon
QA or the Highway
 
PDF
Machine Learning to Turbo-Charge the Ops Portion of DevOps
Deborah Schalm
 
PPTX
Test parallelization using Jenkins
Rogue Wave Software
 
Continuous Testing - The Final Frontier
Jaco Greyling
 
DevOps Testing | Continuous Testing In DevOps | DevOps Tutorial | DevOps Trai...
Edureka!
 
Mobile Apps development best practices. TDD, CI, CD
GlobalLogic Ukraine
 
Appium, Test-Driven Development, and Continuous Integration
TechWell
 
Colorful world-of-visual-automation-testing-latest
Onur Baskirt
 
Continuous delivery its not about the technology, its about the people. @pipe...
Tomas Riha
 
Continuous everything
TEST Huddle
 
The Automation Firehose: Be Strategic and Tactical by Thomas Haver
QA or the Highway
 
DevOps Continuous Integration & Delivery - A Whitepaper by RapidValue
RapidValue
 
Become a Performance Diagnostics Hero
TechWell
 
An Agile Testing Dashboard: Metrics that Matter
TechWell
 
DevOps Architecture Design
Agile Testing Alliance
 
The Key to DevOps? Testing Early in the Pipeline
DevOps.com
 
I Don't Test Often ...
Gareth Bowles
 
[Webinar] Test First, Fail Fast - Simplifying the Tester's Transition to DevOps
KMS Technology
 
Automated Visual Regression Testing by Dave Sadlon
QA or the Highway
 
Machine Learning to Turbo-Charge the Ops Portion of DevOps
Deborah Schalm
 
Test parallelization using Jenkins
Rogue Wave Software
 
Ad

Viewers also liked (15)

PDF
Performance opérationnelle via demarche BPM
Olivier Laporte
 
PDF
Continuous delivery, a plugin for Kanban LKFR14
Samuel RETIERE
 
ODP
Open Food Facts - Product Tank Paris - 25/09/2014
Stéphane Gigandet
 
PPTX
Does Your Code Speak Business
Maxime Sanglan-Charlier
 
PPTX
My agile bag agile tour beirut 2014
Pierre Hervouet
 
PDF
Fkug meetup-initiation kanban
French Kanban User Group
 
PDF
Fkug meetup-pdca & kaizen
French Kanban User Group
 
PDF
Fkug meetup-kpi
French Kanban User Group
 
PDF
Fkug meetup-a3 problem solving
French Kanban User Group
 
PPTX
Bring Your Own People Centric Business Processes
Tom Baeyens
 
PDF
L'art de la rétrospective
Alexandre Boutin
 
PDF
Fkug meetup-management visuel - obeya
French Kanban User Group
 
PDF
Apache Storm - Introduction au traitement temps-réel avec Storm
Paris_Storm_UG
 
PDF
Management 3.0 Workout
Jurgen Appelo
 
PDF
REX Storm Redis
Benjamin Houdu
 
Performance opérationnelle via demarche BPM
Olivier Laporte
 
Continuous delivery, a plugin for Kanban LKFR14
Samuel RETIERE
 
Open Food Facts - Product Tank Paris - 25/09/2014
Stéphane Gigandet
 
Does Your Code Speak Business
Maxime Sanglan-Charlier
 
My agile bag agile tour beirut 2014
Pierre Hervouet
 
Fkug meetup-initiation kanban
French Kanban User Group
 
Fkug meetup-pdca & kaizen
French Kanban User Group
 
Fkug meetup-kpi
French Kanban User Group
 
Fkug meetup-a3 problem solving
French Kanban User Group
 
Bring Your Own People Centric Business Processes
Tom Baeyens
 
L'art de la rétrospective
Alexandre Boutin
 
Fkug meetup-management visuel - obeya
French Kanban User Group
 
Apache Storm - Introduction au traitement temps-réel avec Storm
Paris_Storm_UG
 
Management 3.0 Workout
Jurgen Appelo
 
REX Storm Redis
Benjamin Houdu
 
Ad

Similar to James Christie CAST 2014 Standards – promoting quality or restricting competition? (20)

PPT
Public Services Innovation
Ian Miles
 
PPT
Ch08
Kodok Ngorex
 
PDF
Farewell to pass or fail, James Christie at ExpoQA14, Madrid, May 2014.
James Christie Christie
 
PDF
Is Software Testing a Zero Sum Game??
Thinksoft Global
 
PDF
Five Reasons to Choose Benchmark
Benchmark Research & Safety, Inc.
 
KEY
Whose View is it Anyway: Addressing Multiple Stakeholder Concerns
sferoz
 
PPT
Modern Regulation and Complexity
Johannes Meier
 
PDF
Career Choice for Graduates
CleanSoft Academy
 
PDF
Value of software testing
Qualitest
 
PDF
Ibm smarter quality_management
Cristiano Caetano
 
PDF
Beyond "Quality Assurance"
Jason Benton
 
PDF
Labour market policy more than just finding round pegs for round holes
Structuralpolicyanalysis
 
ODP
Be A Wonk
Patrick Wagstrom
 
PPTX
Process Improvement for better Software Technical Quality under Global Crisis...
Optimyth Software
 
PDF
IBM Rational Software Conference 2009: Quality Management Track Keynote
Kathy (Kat) Mandelstein
 
PPTX
Unit 1 basic concepts of testing & quality
ravikhimani
 
PPTX
Unit 1 basic concepts of testing & quality
ravikhimani1984
 
PPTX
QA is Broken, Fix it!
Ffrees Family Finance
 
PPTX
Sibos 2017: Disruptive functional testing - the next frontier in post-trade s...
Iosif Itkin
 
PDF
3 procurement & outsourcing
Rishi Mathur
 
Public Services Innovation
Ian Miles
 
Farewell to pass or fail, James Christie at ExpoQA14, Madrid, May 2014.
James Christie Christie
 
Is Software Testing a Zero Sum Game??
Thinksoft Global
 
Five Reasons to Choose Benchmark
Benchmark Research & Safety, Inc.
 
Whose View is it Anyway: Addressing Multiple Stakeholder Concerns
sferoz
 
Modern Regulation and Complexity
Johannes Meier
 
Career Choice for Graduates
CleanSoft Academy
 
Value of software testing
Qualitest
 
Ibm smarter quality_management
Cristiano Caetano
 
Beyond "Quality Assurance"
Jason Benton
 
Labour market policy more than just finding round pegs for round holes
Structuralpolicyanalysis
 
Be A Wonk
Patrick Wagstrom
 
Process Improvement for better Software Technical Quality under Global Crisis...
Optimyth Software
 
IBM Rational Software Conference 2009: Quality Management Track Keynote
Kathy (Kat) Mandelstein
 
Unit 1 basic concepts of testing & quality
ravikhimani
 
Unit 1 basic concepts of testing & quality
ravikhimani1984
 
QA is Broken, Fix it!
Ffrees Family Finance
 
Sibos 2017: Disruptive functional testing - the next frontier in post-trade s...
Iosif Itkin
 
3 procurement & outsourcing
Rishi Mathur
 

Recently uploaded (20)

PDF
This slide provides an overview Technology
mineshkharadi333
 
PPT
L2 Rules of Netiquette in Empowerment technology
Archibal2
 
PDF
Orbitly Pitch Deck|A Mission-Driven Platform for Side Project Collaboration (...
zz41354899
 
PDF
Why Your AI & Cybersecurity Hiring Still Misses the Mark in 2025
Virtual Employee Pvt. Ltd.
 
PPTX
How to Build a Scalable Micro-Investing Platform in 2025 - A Founder’s Guide ...
Third Rock Techkno
 
PPTX
C Programming Basics concept krnppt.pptx
Karan Prajapat
 
PDF
Chapter 2 Digital Image Fundamentals.pdf
Getnet Tigabie Askale -(GM)
 
PDF
How Onsite IT Support Drives Business Efficiency, Security, and Growth.pdf
Captain IT
 
PPTX
Smart Infrastructure and Automation through IoT Sensors
Rejig Digital
 
PDF
CIFDAQ's Token Spotlight: SKY - A Forgotten Giant's Comeback?
CIFDAQ
 
PPTX
cloud computing vai.pptx for the project
vaibhavdobariyal79
 
PDF
A Day in the Life of Location Data - Turning Where into How.pdf
Precisely
 
PDF
Unlocking the Future- AI Agents Meet Oracle Database 23ai - AIOUG Yatra 2025.pdf
Sandesh Rao
 
PDF
Security features in Dell, HP, and Lenovo PC systems: A research-based compar...
Principled Technologies
 
PDF
agentic-ai-and-the-future-of-autonomous-systems.pdf
siddharthnetsavvies
 
PDF
REPORT: Heating appliances market in Poland 2024
SPIUG
 
PDF
Revolutionize Operations with Intelligent IoT Monitoring and Control
Rejig Digital
 
PDF
GYTPOL If You Give a Hacker a Host
linda296484
 
DOCX
Top AI API Alternatives to OpenAI: A Side-by-Side Breakdown
vilush
 
PDF
Cloud-Migration-Best-Practices-A-Practical-Guide-to-AWS-Azure-and-Google-Clou...
Artjoker Software Development Company
 
This slide provides an overview Technology
mineshkharadi333
 
L2 Rules of Netiquette in Empowerment technology
Archibal2
 
Orbitly Pitch Deck|A Mission-Driven Platform for Side Project Collaboration (...
zz41354899
 
Why Your AI & Cybersecurity Hiring Still Misses the Mark in 2025
Virtual Employee Pvt. Ltd.
 
How to Build a Scalable Micro-Investing Platform in 2025 - A Founder’s Guide ...
Third Rock Techkno
 
C Programming Basics concept krnppt.pptx
Karan Prajapat
 
Chapter 2 Digital Image Fundamentals.pdf
Getnet Tigabie Askale -(GM)
 
How Onsite IT Support Drives Business Efficiency, Security, and Growth.pdf
Captain IT
 
Smart Infrastructure and Automation through IoT Sensors
Rejig Digital
 
CIFDAQ's Token Spotlight: SKY - A Forgotten Giant's Comeback?
CIFDAQ
 
cloud computing vai.pptx for the project
vaibhavdobariyal79
 
A Day in the Life of Location Data - Turning Where into How.pdf
Precisely
 
Unlocking the Future- AI Agents Meet Oracle Database 23ai - AIOUG Yatra 2025.pdf
Sandesh Rao
 
Security features in Dell, HP, and Lenovo PC systems: A research-based compar...
Principled Technologies
 
agentic-ai-and-the-future-of-autonomous-systems.pdf
siddharthnetsavvies
 
REPORT: Heating appliances market in Poland 2024
SPIUG
 
Revolutionize Operations with Intelligent IoT Monitoring and Control
Rejig Digital
 
GYTPOL If You Give a Hacker a Host
linda296484
 
Top AI API Alternatives to OpenAI: A Side-by-Side Breakdown
vilush
 
Cloud-Migration-Best-Practices-A-Practical-Guide-to-AWS-Azure-and-Google-Clou...
Artjoker Software Development Company
 

James Christie CAST 2014 Standards – promoting quality or restricting competition?

  • 1. Standards – promoting quality or restricting competition? James Christie 1a
  • 2. James Christie jack of all trades, master of some Test Manager & Consultant Developer & Business Analyst Information Security Manager Project Manager Computer Auditor investment accountant trainee chartered accountant 1b
  • 3. Image courtesy Stuart Miles/FreeDigitalPhotos.net Standards are a good thing Shared understanding/definitions Connecting the world Repository of collective experience Protect suppliers from unscrupulous competition Protect customers from unscrupulous suppliers 2a Can be attached to or referenced by contracts Increase professional discipline
  • 4. Image courtesy Keerati/FreeDigitalPhotos.net But testing standards ? “ISO/IEC29119 relates to bullshit” James Bach Search for Michael Bolton & testing standards. “If you need ISO29119, you probably couldn't make good use of it. If you could make good use of it, you probably don't need it.” Iain McCowatt My objection here is to their status as standards, rather than their content. 2b
  • 5. What I learned from economics 1. There’s far too much unjustified certainty around from people who should know better. 2. Everything I learned about economics is either rubbish, or simplistic (but interesting). Probably. I'm not certain (see #1). 3. The assumptions you start with dictate the conclusions you arrive at. 4. In trying to understand what's happening start by following the money (cui bono). 5. Dig below the surface. Always. 3a
  • 6. Images courtesy Stuart Miles/FreeDigitalPhotos.net What is economic rent? capital land labour 3b
  • 7. Image courtesy Stuart Miles/FreeDigitalPhotos.net What is economic rent? “There are two ways to become wealthy; to create wealth or to take wealth from others.” Joseph Stiglitz, Columbia University, Nobel prize winner in Economics. “The payment to a factor of production in excess of what is required to keep that factor in its present use.” David Riccardo Unearned income? Or income that’s not consistent with free market returns? 3c
  • 8. Images courtesy coldesign, Stuart Miles/FreeDigitalPhotos.net Theft Rare talent Monopoly profits Insider dealing Asymmetric knowledge Inappropriate regulation Patent ambush Collusion over standards 3d What is economic rent? Free money
  • 9. Images courtesy Stuart Miles & Chris Sharp /FreeDigitalPhotos.net Rent Seeking (it’s the name of the game) 3e Influencing public policies for personal or factional gain A negative sum game
  • 10. Images courtesy Stuart Miles & digitalart /FreeDigitalPhotos.net Rent Seeking (it’s the name of the game) The prisoner’s dilemma 3f Influencing public policies for personal or factional gain
  • 11. Rent Seeking (it’s the name of the game) Many small losers A few big winners 3g Images courtesy Stuart Miles, cooldesign & Vlado /FreeDigitalPhotos.net Influencing public policies for personal or factional gain
  • 12. Rent Seeking (it’s the name of the game) Influencing public policies for personal or factional gain Testers & customers Many big losers A few big winners Large testing consultancies? 3h Images courtesy Stuart Miles, cooldesign & Vlado /FreeDigitalPhotos.net
  • 13. Image from Tom Toles / Washington Post Regulatory Capture Don’t break the law. Make the law. “As a rule, regulation is acquired by the industry and is designed and operated primarily for its benefits.” George Stigler, University of Chicago, Nobel prize winner in Economics “Regulation was often sought by industries for their own protection, rather than being imposed in some ‘public interest’.” Barry M Mitnick, University of Pittsburgh 4a
  • 14. Favourable legislation Cognitive capture Revolving doors Licensing 4b Regulatory Capture Don’t break the law. Make the law.
  • 15. Images courtesy Sura Nualpradid /FreeDigitalPhotos.net Regulatory Capture - Licensing 4c 1970s,10% of US workforce in licensed occupations 2008, 30% of US workforce in licensed occupations (Morris Kleiner)
  • 16. “Imagine an industry where qualifications are based on accepted standards, required services are specified in contracts that reference these same standards, and best industry practices are based on the foundation of an agreed body of knowledge – this could easily be the testing industry of the near future.” Stuart Reid, convenor of ISO 29119 Working Group Implications – the vision of standards 5a
  • 17. “Imagine an industry where qualifications are based on accepted standards, required services are specified in contracts that reference these same standards, and best industry practices are based on the foundation of an agreed body of knowledge – this could easily be the testing industry of the near future.” Stuart Reid, convenor of ISO 29119 Working Group Implications – the vision of standards 5a
  • 18. Implications – the vision of standards Have you ever felt insignificant? 5b
  • 19. Implications – the vision of standards 5c
  • 20. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d1
  • 21. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d2
  • 22. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d3
  • 23. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d4
  • 24. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d5
  • 25. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d6
  • 26. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d7
  • 27. Implications – the vision of standards Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5d8
  • 28. Implications – the vision of standards 5e How government & big corporations might see “craftsmen” testers? Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers?
  • 29. Implications – the vision of standards How the standards lobby wants to see “serious” testers? Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5f Image courtesy Ambro /FreeDigitalPhotos.net
  • 30. Implications – the vision of standards What we might get; drudgery, but we’re proud to say we do ISO standard drudgery. Irrelevant “craftsmen” as opposed to…? Serious corporate testers? Responsible professionals? Certified testers? 5g
  • 31. Implications – the Healthcare.gov fallout 6a “Test Maturity and the Obamacare Website Contractors to Government should have a high CMMI and TMMI Level proving that they not only have processes of high maturity but continuously operate in a mature environment. The CMMI and TMMI are required by many Department Of Defense and U.S. Government contracts, since it will give the Government the peace at heart that they are dealing with a mature Company operating with best practices.” Images courtesy Stuart Miles/FreeDigitalPhotos.net
  • 32. Implications – the Healthcare.gov fallout 6b “Apply standards judicially … and selectively apply frameworks such as CMMi and ITIL to embrace their value-adding processes and functions. Service providers themselves should define expectations regarding the application and adherence to international standards like ISO 29119 for software testing … to avoid a situation where a solution or service has never been tested and operational readiness is questionable.” Submission to federal government by professional body? Sales blurb? or “Lessons Learned From Healthcare.gov's Troubled Launch”
  • 33. Implications – the Healthcare.gov fallout 6b “Apply standards judicially … and selectively apply frameworks such as CMMi and ITIL to embrace their value-adding processes and functions. Service providers themselves should define expectations regarding the application and adherence to international standards like ISO 29119 for software testing … to avoid a situation where a solution or service has never been tested and operational readiness is questionable.” Sales blurb? or both Oct 15 2013 Dec 12 2013 Submission to US Environmental Protection Agency “Lessons Learned From Healthcare.gov's Troubled Launch”
  • 34. Implications – the Healthcare.gov fallout 6c “What the Outsourcing Industry Can Learn from the HealthCare.gov Fiasco. Set and adhere to standards. Never put out a product to the market without adhering to international standards. There is ISO 29119 for software testing and ISO 20000 for service management.” “We base our approach to test strategy and planning on ISO 29119 … to which we are a contributor… (So) you are assured your test strategy will reflect the complexity of any given development project.”
  • 35. Implications – the Healthcare.gov fallout 6d “Infuse Test Factory is delivered on pre- built centre of excellence model. The test factory is an industrialized test delivery service based on best of breed process, people, and technology. The service can be applied to functional testing and non-functional testing. Built on a proven methodology and a certified TMMi Level 3 testing service; the Test Factory is built to ISO 29119 & ISO25010 standards. The Infuse Test Factory provides an efficient and effective service with guaranteed outcome.” (for 2000 automated tests)
  • 36. Implications – the Healthcare.gov fallout 6d “Infuse Test Factory is delivered on pre- built centre of excellence model. The test factory is an industrialized test delivery service based on best of breed process, people, and technology. The service can be applied to functional testing and non-functional testing. Built on a proven methodology and a certified TMMi Level 3 testing service; the Test Factory is built to ISO 29119 & ISO25010 standards. The Infuse Test Factory provides an efficient and effective service with guaranteed outcome.” (for 2000 automated tests)
  • 37. 6e Marketing ISO 29119 – the treasure of the standards
  • 38. 6e Marketing ISO 29119 – the treasure of the standards Mit der richtigen Schatzkarte in der Tasche ist der Weg oft ganz einfach – das gilt auch fürs Softwaretesten. Im Spätsommer 2013 sind die ersten drei Teile der neuen Norm ISO/IEC/IEEE 29119 erschienen. With the right treasure map in your pocket it’s easy to find your way – that also goes for testing. The first three parts of the new standard ISO 29119 are coming in late summer 2013.
  • 39. 6e Marketing ISO 29119 – the treasure of the standards Mit der richtigen Schatzkarte in der Tasche ist der Weg oft ganz einfach – das gilt auch fürs Softwaretesten. Im Spätsommer 2013 sind die ersten drei Teile der neuen Norm ISO/IEC/IEEE 29119 erschienen. With the right treasure map in your pocket it’s easy to find your way – that also goes for testing. The first three parts of the new standard ISO 29119 are coming in late summer 2013.
  • 40. Marketing ISO 29119 – an appeal to fear 6f “Imagine something goes noticeably wrong. How easy will you find it to explain that your testing doesn’t comply with international testing standards? So, can you afford not to use them?” Stuart Reid
  • 41. Marketing ISO 29119 – asymmetric information 6g Can you tell a lemon from a Lamborghini? James Christie “Buyers are unclear on what is 'good test practice' “ Stuart Reid Lamborghini image courtesy Teerapun /FreeDigitalPhotos.net
  • 42. COBIT Framework has no insistence on “best practice” Countless references to ISO standards for; - Risk management - Security - Release management - Configuration management - Service level management - Incident management - Problem management - Business continuity - etc No mention of testing standards No insistence on detailed scripts or test cases None at all! 7a What do the auditors say?
  • 43. “Every IT environment is unique and represents a unique set of risks. The differences make it increasingly difficult to take a generic or checklist approach to auditing.” 7b What do the auditors say? The Snowflake Theory of IT Audit Institute of Internal Auditors Global Technology Audit Guide, Management of IT Audit, 1st edition, 2006 ISO standards are not mentioned except in an appendix “… for consideration”.
  • 44. “Internal auditors should not expect organizations to fully implement PMBOK, PRINCE2, COBIT, or any other large set of best practices. Rather, they should expect to see that these practices have been customized and integrated into the organization’s project management methodology.” Institute of Internal Auditors Global Technology Audit Guide, Auditing IT Projects, 2009 (current) 7c What do the auditors say?
  • 45. Wrapping up – we have to speak out 8a “Buyers are unclear on what is 'good test practice' “ The debate must not be framed as a false choice OR
  • 46. Wrapping up 8b American Society of Mechanical Engineers v. Hydrolevel Corporation Response of standards bodies? Consensus is “general agreement, characterized by the absence of sustained opposition… by any important part of the concerned interests”. Need for consensus regarding both standards and their interpretation.
  • 47. Wrapping up 8c Email: [email protected] Twitter: @james_christie www.clarotesting.wordpress.com www.clarotesting.com Image courtesy Stuart Miles/FreeDigitalPhotos.net