Quality Management Standards for Software Sector U S

Quality Management Standards for Software Sector U. S. TAG for ISO TC 176 Quality Management Washington, DC 26 -Aug-04 John Walz IEEE Software & Systems Engr. Standards – Quality Management Planning Chair johnwalz@ameritech. net 1 26 -Aug-04

Software / Info. Tech. Market $1. 4 trillion Business – The global information technology (IT) procurement industry, which includes telecommunication equipment, computer systems hardware, software licenses, semiconductors, and IT services, should now be around $1. 4 trillion • Gartner Dataquest, 1 Aug. 2002. 2 26 -Aug-04

Software / Info. Tech. Employment 3, 196, 000 Employment (US BLS, 2002): – 500, 000 Computer Programmers – 675, 000 Computer Software Engineers • 394, 000 computer applications software engineers • 281, 000 were computer systems software engineers – 979, 000 Computer Systems Analysts, Database Administrators, and Computer Scientists • • • 468, 000 Computer systems analysts 186, 000 Network systems and data communications analysts 110, 000 Database administrators 23, 000 Computer and information scientists, research 192, 000 All other computer specialists – 758, 000 Computer Support Specialists and Systems Administrators • 507, 000 Computer Support Specialists • 251, 000 Network and Computer Systems Administrators – 284, 000 Computer and Information Systems Managers 3 26 -Aug-04

Are Software / IT organizations using ISO 9001? • ISO 9001: 2000 – N. America has 41, 000 ISO 9001 registrations – QSU, Aug 04 – 80 US “software” org. people voted in TC 176 SC 2 on-line survey – US TAG to TC 176 membership involved in software / IT? • ISO/IEC JTC 1 – ISO/IEC 90003: 2004 Software interpretation guide just out – 50+ software / systems documents – Working to harmonize collection with IEEE • IEEE Software & Systems Engineering (S 2 ESC) – 40+ software / systems documents since 1981 – 700 membership on balloting pool • SEI CMMI v 1. 1 2002 – Aligned with ISO/IEC 15504 – Over 1000 reviewers, field trials, ROI studies, US Do. D funding – Seems to have U. S. “mind share” • What is the defacto standard for Software / IT org. ? 4 26 -Aug-04

Quality Management Planning Group Agenda • IEEE Software & Systems Engineering (S 2 ESC) Policy for Quality Management • Quality Management Work Group Membership • ISO/IEC 90003 Application of software to ISO 9001 – Proposed IEEE 90003 version with addendum • JTC 1 SC 7 New Work Item– Guidelines for application of ISO 9001 to System Life Cycle Processes • S 2 ESC Liaisons to other QM related groups 5 26 -Aug-04

IEEE S 2 ESC: Relationship to Quality Management • Policy Statement – S 2 ESC standards have the goal of consistency with the quality management standards of ISO TC 176 – S 2 ESC commits that ISO 9001: 2000 will provide the principles and concepts for a quality program in future updates of the IEEE software & systems engineering standards. – S 2 ESC commits that ISO/IEC 90003: 2004 will be recognized as the primary document for guidance of the application of quality systems for organizations involved with systems containing software and will serve as the basis for updates of standards involving quality systems in the IEEE software & systems engineering standards 6 26 -Aug-04

IEEE-S 2 ESC Planning Group on Quality Management Systems • Membership – John Walz – Scott Duncan – U. S. TAG volunteers • • 26 -Aug-04 Wayne Blazek Eugene Kirsch Duane Allen 90003 12207 life cycle JTC 1 std. IEEE std. 7

ISO/IEC 90003: 2004 Software engineering -- Guidelines for the application of ISO 9001: 2000 to computer software Technical committee / subcommittee: JTC 1/SC 7 ICS: 35. 080 Software development and system documentation 03. 120. 10 Quality management and quality assurance Abstract ISO/IEC 90003: 2004 provides guidance for organizations in the application of ISO 9001: 2000 to the acquisition, supply, development, operation and maintenance of computer software and related support services. ISO/IEC 90003: 2004 does not add to or otherwise change the requirements of ISO 9001: 2000. The guidelines provided in ISO/IEC 90003: 2004 are not intended to be used as assessment criteria in quality management system registration/certification. The application of ISO/IEC 90003: 2004 is appropriate to software that is • part of a commercial contract with another organization, • a product available for a market sector, • used to support the processes of an organization, • embedded in a hardware product, or • related to software services. Some organizations may be involved in all the above activities; others may specialize in one area. Whatever the situation, the organization's quality management system should cover all aspects (software related and non-software related) of the business. ISO/IEC 90003: 2004 identifies the issues which should be addressed and is independent of the technology, life cycle models, development processes, sequence of activities and organizational structure used by an organization. Additional guidance and frequent references to the ISO/IEC JTC 1/SC 7 software engineering standards are provided to assist in the application of ISO 9001: 2000: in particular ISO/IEC 12207, ISO/IEC TR 9126, ISO/IEC 14598, ISO/IEC 15939 and ISO/IEC TR 15504. 8 26 -Aug-04

ISO/IEC 90003: 2004 w/ JTC 1 SC 7 References Guidelines for the application of ISO 9001: 2000 to computer software 9 26 -Aug-04

Add IEEE S 2 ESC References IEEE 90003 10 26 -Aug-04

Guidelines for the application of ISO 9001 to System Life Cycle Processes (15288) • Three requirements, listed below, are identified as top-level requirements for the study team’s work: – – – • Ensure that the objectives and coverage of ISO 9001 and ISO/IEC 15288 act in a complementary. Remove or describe differences in terminology of the two standards. Clarify the boundaries between the two standards to identify where the two documents overlap or where there are gaps. Requirements for the new Technical Report – – – – 1. Clearly identify the areas of applicability of ISO 9001 and ISO/IEC 15288, and the interfaces between the two documents, that eliminates conflict and overlap, to ensure an integrated application of the requirements of these two standards. 2. Wherever possible, use a common, understandable set of terms and vocabulary from ISO 9001 and ISO/IEC 15288. 3. Where inconsistencies in terms and vocabulary appear, provide an explanation of the differences, and clarification on the application/usage of such terms, to promote a common understanding. 4. Facilitate the mapping of terms from the two standards, into the terminology of the enterprise, organization or project. 5. Use this Technical Report as an aid in monitoring, reviewing, auditing or assessing an enterprise, organization or project, as a means of evaluating technical performance, at appropriate levels, to identify findings. 6. Use this Technical Report as a basis of recommendations for future revisions of ISO 9001 and ISO/IEC 15288 (or its successor standard), to improve the interface/inter-relationship between the two standard(s). This will better align these two standards and improve the usability of both of them in future updates. 7. A key achievement of this Technical Report must be to simplify the joint application of these two standards. To that end, the scope (field of application) of this Technical Report shall be defined, so that it is clear what is covered. – ISO/IEC JTC 1/SC 7 N 3041 11 26 -Aug-04

QMS Planning Group Task List • IEEE 90003: 2004 review & association – Executive Committee contributions on which S 2 ESC standards relate to ISO 9001 Clauses – Individual S 2 ESC & Industry standards experts assigned for confirmation and additions of specific standard’s Clauses – Reformat additional matrix at clause level – Possibly add an errata sheet – Create Ballot Pool, including selected non-S 2 ESC experts • IEEE/ASQ 90003: 2005 extension – Possible ASQ Z 1 review & approval & publication • New S 2 ESC PARs for missing coverage • Contribution to ISO 9001: 2008 Amendment • Contribution to ISO/IEC 90003: 2008 Amendment – Possibly replacing guidance text with reference to specific JTC 1 & IEEE S 2 ESC standards 12 26 -Aug-04

IEEE S 2 ESC Liaisons to other QM related groups • • • US TAG to TC 176 ASQ divisions: SW, QM, E&C SEI CMMI Telecom TL 9000 Aerospace AS 9100 Auto ISO 16949 Medical Device ISO 13485: 2003 QAI / CSQA Project Mgmt – PMI 26 -Aug-04 13

Broaden S 2 ESC membership • Need to “invite” industry software experts, who cross into other sectors and QM related membership, for P 90003 Work Group and/or Ballot membership • Call for volunteers from US TAG to TC 176 14 26 -Aug-04