International Software & Systems Engineering Standards

Similar documents
ISO/IEC JTC1/SC7 /N3037

ISO/IEC JTC1/SC7 /N3040

ISO/IEC JTC1/SC7 /N3016

Summary of Contents LIST OF FIGURES LIST OF TABLES

Seminar themes (1 of 3) IEEE/EIA 12207:1995 Software Life Cycle Processes. Seminar themes (3 of 3) Seminar themes (2 of 3)

ISO/IEC JTC1/SC7 /N3614

Quality and usability: A new framework

ISO/IEC TR TECHNICAL REPORT. Software engineering Product quality Part 4: Quality in use metrics

Engineering for System Assurance Legacy, Life Cycle, Leadership

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security management systems Overview and vocabulary

ISO/IEC ISO/IEC

Information technology Guidelines for the application of ISO 9001:2008 to IT service management and its integration with ISO/IEC :2011

ISO/IEC JTC1/SC7 /N4314

Information technology Security techniques Application security. Part 5: Protocols and application security controls data structure

INTERNATIONAL STANDARD

ISO/IEC TR TECHNICAL REPORT. Information technology Security techniques A framework for IT security assurance Part 2: Assurance methods

ISO/IEC INTERNATIONAL STANDARD. Information technology JPEG 2000 image coding system: Motion JPEG 2000

ISO/IEC JTC1/SC7 N2228

ISO/IEC JTC 1 N 11326

N2416R. Software engineering Product quality Part 3: Internal metrics ISO/IEC JTC1 /SC7 ISO/IEC JTC1/SC7. Software Engineering

Information technology Process assessment Concepts and terminology

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security risk management

ISO/IEC TR TECHNICAL REPORT. Information technology Security techniques Information security management guidelines for financial services

ISO/IEC INTERNATIONAL STANDARD. Software engineering Software measurement process. Ingénierie du logiciel Méthode de mesure des logiciels

Software engineering Product quality Part 1: Quality model

Agenda. New ISO/IEC developments in Process Assessment standards for IT Services. Antonio Coletta DNV IT Global Services

An Information Model for Software Quality Measurement with ISO Standards

Cyber Security Standards Developments

Information technology Process assessment Process measurement framework for assessment of process capability

ISO/IEC TR TECHNICAL REPORT. Systems and software engineering Life cycle management Part 1: Guide for life cycle management

ISA99 - Industrial Automation and Controls Systems Security

Introduction to ISO/IEC 27001:2005

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD. Systems and software engineering Measurement process. Ingénierie des systèmes et du logiciel Processus de mesure

ISO/IEC Systems and software engineering Systems and software Quality Requirements and Evaluation (SQuaRE) Planning and management

ISO/IEC INTERNATIONAL STANDARD. Information technology Open distributed processing Reference model: Architecture

ISA99 - Industrial Automation and Controls Systems Security

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC Information technology Security techniques Code of practice for information security controls

Compiled by: Ali Azarkar (Padidpardaz Engineering Company)

INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security incident management

ISO/IEC JTC1/SC7 /N3287

ISO/IEC Information technology Security techniques Network security. Part 5:

ISO/IEC/ IEEE Systems and software engineering Content of life-cycle information items (documentation)

ISO/IEC INTERNATIONAL STANDARD. Information technology Open distributed processing Reference model: Foundations

Reported by Jim Moore, The MITRE Corporation, ,

ISO/IEC INTERNATIONAL STANDARD. Software engineering Product evaluation Part 3: Process for developers

ISO/IEC INTERNATIONAL STANDARD. Information technology Cloud computing Overview and vocabulary

Information technology Security techniques Mapping the revised editions of ISO/IEC and ISO/IEC 27002

Information technology Security techniques Guidance on the integrated implementation of ISO/IEC and ISO/IEC

ISO/IEC JTC 1 N 13538

Information technology IT asset management Overview and vocabulary

Software engineering Guidelines for the application of ISO 9001:2008 to computer software

B C ISO/IEC TR TECHNICAL REPORT

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD. Information technology - Open Distributed Processing - Reference Model: Foundations

ISO/IEC INTERNATIONAL STANDARD

International Standard ISO/IEC 17799:2000 Code of Practice for Information Security Management. Frequently Asked Questions

ISO/IEC INTERNATIONAL STANDARD. Information technology Software asset management Part 1: Processes and tiered assessment of conformance

Security Standardization

ISO/IEC INTERNATIONAL STANDARD

B C ISO/IEC 9595 INTERNATIONAL STANDARD. Information technology Open Systems Interconnection Common management information service

Information technology Security techniques Sector-specific application of ISO/IEC Requirements

Sýnishorn ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security risk management

ISO/IEC INTERNATIONAL STANDARD

This document is a preview generated by EVS

Quality in Use: Achieving Stakeholder Needs for Quality

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Entity authentication assurance framework

This document is a preview generated by EVS

ISO/IEC JTC 1 N 13145

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security management system implementation guidance

ISO/IEC INTERNATIONAL STANDARD. Information technology JPEG 2000 image coding system Part 3: Motion JPEG 2000

ISO/IEC/ IEEE INTERNATIONAL STANDARD. Systems and software engineering Vocabulary. Ingénierie des systèmes et du logiciel Vocabulaire

ISO/IEC INTERNATIONAL STANDARD. Information technology Open Distributed Processing Interface references and binding

This is a preview - click here to buy the full publication TECHNICAL REPORT

ISO/IEC INTERNATIONAL STANDARD

Systems and software engineering Requirements for managers of information for users of systems, software, and services

Information technology Identification cards Biometric System-on-Card. Part 3: Logical information interchange mechanism


ISO/IEC INTERNATIONAL STANDARD

Information technology Programming languages, their environments and system software interfaces Guidelines for language bindings

Systems and software engineering Requirements for testers and reviewers of information for users

ISO/IEC TS Conformity assessment Guidelines for determining the duration of management system certification audits

Comments on Concepts of OSE in TR and proposals for related changes to Parts 1 and 3.

ISO/IEC INTERNATIONAL STANDARD. Information technology Message Handling Systems (MHS): MHS routing

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD

This document is a preview generated by EVS

ISO/IEC JTC 1 Update. April 2018 Phil Wennblom, Chair

Identification cards Optical memory cards Holographic recording method. Part 3: Optical properties and characteristics

Fundamentals to Creating Architectures using ISO/IEC/IEEE Standards

B C ISO/IEC INTERNATIONAL STANDARD

This document is a preview generated by EVS

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD

Frequently Asked Questions

Transcription:

This presentation represents the opinion of the author and does not present positions of The MITRE Corporation or of the U.S. Department of Defense. Jim Moore The MITRE Corporation Chair, US TAG to ISO/IEC JTC1/SC7 James.W.Moore@ieee.org International Software & Systems Engineering Standards ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 1

Developers of International Standards related to SWE ISO IEC ITU TC176 JTC1 TC56 SC65A... Quality Information Technology... Dependability Functional Safety SC7 SC22 Software & Systems Engineering Language, OS The focal point in international standards is ISO/IEC JTC1/SC7. Other committees, though, deal with related work. Members of these committees are national bodies, i.e. countries, represented by national delegations. ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 2

SC7 Plenary Attendance 200 180 160 140 120 100 80 60 40 20 0 1987 FR 1988 NL 1989 GER 1990 USA 1991 SW 1992 UK 1993 JP 1994 CND 1995 AUS 1996 TCR 1997 USA 1998 SA 1999 BR Based on a chart by François Coallier, SC7 Chair ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 3

ISO/IEC JTC1/SC7 Working Groups WG2: System software documentation WG4: Tools and environment WG6: Evaluation & metrics WG7: Life cycle management WG9: System & SW integrity WG10: Process assessment WG11: Software data definition and representation WG12: Functional size measurement WG13: Software measurement process SWG1: Planning SWG2: Vocabulary SWG3: Process Architecture Ad Hoc: Quality Mgmt Study Group: SE Practices Plus four other WGs inherited from SC33 dealing with ODP and LOTOS ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 4

SC7 Production (est.) (No new NWI assumed - exclude dependability) 70 60 Stds Pub. Stds Maint 50 40 30 20 10 0 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 Based on a chart by François Coallier, SC7 Chair ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 5

Current Standards of SC7 (1 of 2) Several legacy standards ISO/IEC 6592:2000, Guidelines for the documentation of computer-based application systems ISO/IEC 9126:1991, Product quality characteristics ISO 9127:1988, User documentation and cover information for consumer software packages ISO/IEC TR 9294:1990, Management of software documentation ISO/IEC 11411:1995, Representation of state transition diagrams ISO/IEC 12119:1994, Software packages: Quality requirements and testing ISO/IEC TR 12182:1998, Categorization of software ISO/IEC 12207:1995, Software life cycle processes ISO/IEC 14102:1995, Evaluation and selection of CASE tools ISO/IEC 14143-1:1998, Functional size measurement ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 6

Current Standards of SC7 (2 of 2) ISO/IEC TR 14471:1999 Information technology -- Software engineering -- Guidelines for the adoption of CASE tools ISO/IEC 14568:1997, Diagram exchange language for tree charts ISO/IEC 14598:2000, Software product evaluation (6 parts) ISO/IEC 14756:1999, Measurement and rating of performance ISO/IEC TR 14759:1999, Mockup and prototype ISO/IEC 14764:1999, Software maintenance ISO/IEC 15026:1998, System and software integrity levels ISO/IEC TR 15271:1998, Guide for ISO/IEC 12207 ISO/IEC TR 15504:1998, Software process assessment (9 parts) ISO/IEC TR 15846:1998, SWLC processes - Configuration management ISO/IEC 15910:1999, Software user documentation process ISO/IEC TR 16326:1999, Software project management ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 7

Scope of ISO/IEC JTC1/SC7 Standardization of processes, supporting tools and supporting technologies for the engineering of software products and systems. Engineering Data Requirements Data Process Product Data Products Tools Technologies Resources (Human & Material) ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 8

Management Sciences Industrial Engineering Quality Management (ISO TC 176) SOFTWARE and SYSTEM ENGINEERING APPLICATION DOMAINS (many TCs) Computer Sciences and Engineering Dependability Engineering (IEC TC 56) Safety (IEC TC65) Based on a chart by François Coallier, SC7 Chair ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 9

Some Important SC7 Standards ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 10

ISO/IEC 9126:1991, Software Product Quality Characteristics 9126 defines the characteristics and subcharacteristics intended to cover all aspects of software quality resulting from the ISO definition of quality. ISO/IEC 9126 Functionality Reliability Usability Efficiency Maintainability Portability Suitability Accuracy Interoperability Compliance Security Maturity Fault tolerance Recoverability Understandability Learnability Operability Time behavior Resource behavior Analyzability Changeability Stability Testability Adaptability Installability Conformance Replaceability ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 11

New Generation of 9126 Family ISO/IEC 12119 Quality Requirement and Testing Adapted from a chart by Motoei Azuma ISO/IEC 9126 Quality Model and Metrics 9126-1 Quality Model 9126-2 External Char. and Metrics 9126-3 Internal Char. and Metrics 9126-4 Quality in Use Char. and Metrics ISO/IEC14598 Product Evaluation 14598-1: General Overview 14598-2: Planning and Management 14598-3: Developers Process 14598-4: Acquirers Process 14598-5: Evaluators Process 14598-6: Documentation of Evaluation Module ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 12

ISO/IEC 12207:1995, Software Life Cycle Processes To establish a common framework for the life cycle of software Broad scope: Acquire, supply, develop, operate, and maintain software Recognizes that software is part of a system and that a project is part of an enterprise To establish a basis for world trade in software Amendment underway to describes processes at level of purpose and outcome ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 13

Example Use of 12207 Processes An Enterprise Acquisition An Enterprise Supply Management Infrastructure Training Improvement Documentation Quality Assurance Verification Validation Configuration Mgmt Joint Review Audit Problem Resolution ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 14

ISO/IEC TR 15504, Software Process Assessment A nine-part Technical Report -- not a standard Currently under revision to become a five-part Standard Will have a process dimension provided by an externally supplied process reference model* Will have a 6 point capability dimension : Incomplete through Optimizing What conforms to 15504? -- the assessment. *Processes other than software may be supplied. ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 15

ISO/IEC 15026, System and Software Integrity Levels Risks, threats, frequency, initiators, consequences Risk dimensions System Design System integrity level Software component integrity levels Risk Analysis Risk containment, fault tolerance strategies Software Design ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 16

Draft ISO/IEC 15939, Software Measurement Process Activities and tasks necessary to identify, define, select, apply and improve software measurement with a project or organization. Based on principles of Practical Software Measurement (PSM) Designed to fit with ISO/IEC 12207, ISO/IEC 15504, and ISO 9000 series. ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 17

How to Characterize Measurement as a Process? Goals Constraints Control Measurement Action Needs Process Product Resources Source: [SESC93] ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 18

Draft ISO/IEC 15939 Organization Project Tech & Mgmt Processes Sustain Commitment Plan the Measurement Process Perform the Measurement Process Experience Base Evaluate Measurement Core Measurement Process Scope of Standard ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 19

Relationship to Quality Management Standards Current Situation ISO 9001 ISO 9000-3 ISO/IEC 12207 Current relationship will be made obsolete by the circa 2000 revision of the ISO 9000 series. SC7 will take responsibility for the replacement of ISO 9000-3 and other documents on SW QM ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 20

Systems Engineering in SC7 ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 21

Scope of SC7 was Changed in 1997 Standardization of processes, supporting tools and supporting technologies for the engineering of software products and systems JTC1 SC7 Scope: Information technology Scope: Engineering of software products and systems ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 22

Rationale Software generally is part of a system or product Tight integration of software and other component in many software based systems. Examples: Telecommunication products (Hardware, Silicon, Software) Fly-by-wire aircraft Based on a chart by François Coallier, SC7 Chair ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 23

Working Groups with System Scope WG2: System software documentation WG4: Tools and environment WG6: Evaluation & metrics WG7: Life cycle management WG9: System & SW integrity WG10: Process assessment WG11: Software data definition and representation WG12: Functional size measurement WG13: Software measurement process SWG1: Planning SWG2: Vocabulary SWG3: Process Architecture Ad Hoc: Quality Mgmt Study Group: SE Practices Plus four other WGs inherited from SC33 dealing with ODP and LOTOS ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 24

How Can You Participate? US delegates to meetings of ISO/IEC SC7 and its working groups are selected from representatives to the US Technical Advisory Group. US positions are developed by the TAG. Any US-domiciled organization can join the TAG -- $300 per year. The TAG meets three times a year. ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 25

Help Wanted! SW product quality models and metrics Systems processes and systems engineering practices Extension of process assessment to systems and business processes System/software dependability issues Non-traditional functional size measurement Comprehensive SW quality management Also... Documentation, CASE, electronic data interchange ASQ SSIG 2000, The MITRE Corporation. Permission is granted to reproduce without modification. James Moore 26