ISO/IEC in Brazil Helping SME of Brazil in Becoming more Competitive Getting Competitiveness to VSE

Some aspects Brazilian Scenario

IBSS Software Market IT Industry 97,3% are SME and have up to 19 people > companies > U$ 21 billions > 94% of SME CMMI MPS.BR < 5% has some of then

 How to be competitive ( in local, regional and internacional markets )?  How to achieve market confidence ( assure that SME can produce quality products and services with )  How to communicate to the market a clear quality message ( How much “better” is this level than the other? ) Our challenge

 How to be competitive ( to internal and internacional market )?  How achieve market's confidence ( assure that SME can produce products and services with quality )  How communicate to the market a clear quality message ( How many “better” is this level than the other? ) Our challenge Quality! Competitiveness! Market’s confidence!

Very Small Entities ISO/IEC Series

Show VSEs that they can be recognized as high quality software producers in specific domains in local, regional and international markets

29110 series is already an adopted Brazilian standards...

What are we doing?...  Dissemination  Collaboration Project for Standardization and Innovation in SME  Agency Government x NB x Industry (SEBRAE/ABNT)  Training  Seminars  Courses  Academy (in negotiation)

What are we doing in Brazil?...  Implementation  Basic Profile  Agile perspective  ISO 9001 Integration Approach  System Engineering Approach  ISO/IEC diagnoses  Certification

ISO/IEC Certification

Retrospective Issue: developing a proposal for a certification scheme Brazil proposed a certification scheme carry out pilot audits in software development VSE Premisses: Low-cost & simple Conformity assessment driven!

Rioinfo 5 setembro 2012 There is already a worldwide infrastructure that manages the certification system Certification System IAF Accreditation Body Certification Body Certified Companies Market (Consumers)

Task Force Document development SG, NB, AB, CB Procedures AB, SG Training People Accreditation Body feasibility Perform Audits VSE preparation Document Preparation Auditor Training ( training audits ) Pilot audits Accreditation Decision ‘ 2013 Certification Program is done! Formal Certification is already running! Certification Program is done! Formal Certification is already running!

Requirements for conformity assessment programs for VSE’s software development life cycle processes Establish requirements for setting and operating Certification Schemes against to ABNT NBR ISO/IEC :2012 Addressed to Certification Bodies, Accreditation Bodies, Auditors Certification Scheme proposed WD

ISO/IEC :2012 ISO/IEC 17000:2005, Conformity assessment – Vocabulary and General Principles ISO/IEC 17021:2011, Conformity assessment — Requirements for bodies providing audit and certification of management systems ISO/IEC FDIS 17065, Conformity assessment - - Requirements for bodies certifying products, processes and services ISO/IEC 19011:2011, Guidelines for auditing management Systems References

application for certification certification initial audit certification decision surveillance Certification Process Stages conformity assessment program for VSE

The Secret...  Partnership and colaboration  Government  Accreditation Bodies  Certification Bodies  Industry

Microsoft Process Template

Partnership and colaboration  Microsoft x NetCenter Brasil

Microsoft projects in Brazil for Fernando Gebara Filho LATAM Regional Standards Officer

The initial approach Determine which are the standards that have local priority Is there a way to help the local groups working on these standards to be more effective? – SC 7 (WG 7, WG 24, WG 26), SC 27, SC 34, SC 38, ISO/TC 159/SC 4 How is the local group working with the local market? – Is the set of standard valuable enough to help foster a strong local IT ecosystem? Is there a good alignment between the group plans and the Microsoft local programs?

The current answers The series has good support both from the government side and the market side and the recognition of the Brazilian SME agency A strong small IT ecosystem is fundamental for the long term success and growth of the local IT industry Helping small IT companies and start-ups to create and maintain good development practices is fundamental to enhance quality and help them compete in a broader market (even internationally) – These good practices tend to result in better product quality

What we have now Creation of a process template that helps companies using Visual Studio 2012 to follow the practices of Can help small IT companies generate evidence to future auditing and/or certification processes We are working very close to Riosoft Version 1 is a simple adaptation of the generic template as a proof of concept A new Project is under negotiation to – Enhance Version 1 to make it really aligned to requirements – Evaluate how the Agile template can be used for conformance – Translate the template to English and Spanish to allow international usage The current template is located at

Thanks!