1. 26-Aug-04 1 Quality Management Standards for Software Sector U.S. TAG for ISO TC 176 Quality Management Washington, DC 26-Aug-04 John Walz IEEE Software & Systems Engr. Standards – Quality Management Planning Chair johnwalz@ameritech.net

2. 26-Aug-04 2 Software / Info. Tech. Market $1.4 trillion Business –The global information technology (IT) procurement industry, which includes telecommunication equipment, computer systems hardware, software licenses, semiconductors, and IT services, should now be around $1.4 trillion Gartner Dataquest, 1 Aug. 2002.

3. 26-Aug-04 3 Software / Info. Tech. Employment 3,196,000 Employment (US BLS, 2002): –500,000 Computer ProgrammersComputer Programmers –675,000 Computer Software EngineersComputer Software Engineers 394,000 computer applications software engineers 281,000 were computer systems software engineers –979,000 Computer Systems Analysts, Database Administrators, and Computer ScientistsComputer Systems Analysts, Database Administrators, and Computer Scientists 468,000 Computer systems analysts 186,000 Network systems and data communications analysts 110,000 Database administrators 23,000 Computer and information scientists, research 192,000 All other computer specialists –758,000 Computer Support Specialists and Systems AdministratorsComputer Support Specialists and Systems Administrators 507,000 Computer Support Specialists 251,000 Network and Computer Systems Administrators –284,000 Computer and Information Systems ManagersComputer and Information Systems Managers

4. 26-Aug-04 4 Are Software / IT organizations using ISO 9001? ISO 9001:2000 –N. America has 41,000 ISO 9001 registrations – QSU, Aug04 –80 US “software” org. people voted in TC176 SC2 on-line survey –US TAG to TC 176 membership involved in software / IT? ISO/IEC JTC1 –ISO/IEC 90003:2004 Software interpretation guide just out –50+ software / systems documents –Working to harmonize collection with IEEE IEEE Software & Systems Engineering (S2ESC) –40+ software / systems documents since 1981 –700 membership on balloting pool SEI CMMI v1.1 2002 –Aligned with ISO/IEC 15504 –Over 1000 reviewers, field trials, ROI studies, US DoD funding –Seems to have U.S. “mind share” What is the defacto standard for Software / IT org.?

5. 26-Aug-04 5 Quality Management Planning Group Agenda IEEE Software & Systems Engineering (S2ESC) Policy for Quality Management Quality Management Work Group Membership ISO/IEC 90003 Application of software to ISO 9001 –Proposed IEEE 90003 version with addendum JTC1 SC7 New Work Item– Guidelines for application of ISO 9001 to System Life Cycle Processes S2ESC Liaisons to other QM related groups

6. 26-Aug-04 6 IEEE S2ESC: Relationship to Quality Management Policy Statement –S2ESC standards have the goal of consistency with the quality management standards of ISO TC176 –S2ESC commits that ISO 9001:2000 will provide the principles and concepts for a quality program in future updates of the IEEE software & systems engineering standards. –S2ESC commits that ISO/IEC 90003:2004 will be recognized as the primary document for guidance of the application of quality systems for organizations involved with systems containing software and will serve as the basis for updates of standards involving quality systems in the IEEE software & systems engineering standards

7. 26-Aug-04 7 IEEE-S2ESC Planning Group on Quality Management Systems Membership –John Walz –Scott Duncan –U.S. TAG volunteers Wayne Blazek Eugene Kirsch Duane Allen 90003 12207 life cycle JTC1 std. IEEE std.

8. 26-Aug-04 8 Software engineering -- Guidelines for the application of ISO 9001:2000 to computer software Technical committee / subcommittee:JTC 1/SC 7 Abstract ISO/IEC 90003:2004 provides guidance for organizations in the application of ISO 9001:2000 to the acquisition, supply, development, operation and maintenance of computer software and related support services. ISO/IEC 90003:2004 does not add to or otherwise change the requirements of ISO 9001:2000. The guidelines provided in ISO/IEC 90003:2004 are not intended to be used as assessment criteria in quality management system registration/certification. The application of ISO/IEC 90003:2004 is appropriate to software that is part of a commercial contract with another organization, a product available for a market sector, used to support the processes of an organization, embedded in a hardware product, or related to software services. Some organizations may be involved in all the above activities; others may specialize in one area. Whatever the situation, the organization's quality management system should cover all aspects (software related and non-software related) of the business. ISO/IEC 90003:2004 identifies the issues which should be addressed and is independent of the technology, life cycle models, development processes, sequence of activities and organizational structure used by an organization. Additional guidance and frequent references to the ISO/IEC JTC 1/SC 7 software engineering standards are provided to assist in the application of ISO 9001:2000: in particular ISO/IEC 12207, ISO/IEC TR 9126, ISO/IEC 14598, ISO/IEC 15939 and ISO/IEC TR 15504. ISO/IEC 90003:2004 ICS:35.080 Software development and system documentation 03.120.10 Quality management and quality assurance

9. 26-Aug-04 9 ISO/IEC 90003:2004 w/ JTC1 SC7 References Guidelines for the application of ISO 9001:2000 to computer software

10. 26-Aug-04 10 Add IEEE S2ESC References IEEE 90003

11. 26-Aug-04 11 Guidelines for the application of ISO 9001 to System Life Cycle Processes (15288) Three requirements, listed below, are identified as top-level requirements for the study team’s work: –Ensure that the objectives and coverage of ISO 9001 and ISO/IEC 15288 act in a complementary. –Remove or describe differences in terminology of the two standards. –Clarify the boundaries between the two standards to identify where the two documents overlap or where there are gaps. Requirements for the new Technical Report –1. Clearly identify the areas of applicability of ISO 9001 and ISO/IEC 15288, and the interfaces between the two documents, that eliminates conflict and overlap, to ensure an integrated application of the requirements of these two standards. –2. Wherever possible, use a common, understandable set of terms and vocabulary from ISO 9001 and ISO/IEC 15288. –3. Where inconsistencies in terms and vocabulary appear, provide an explanation of the differences, and clarification on the application/usage of such terms, to promote a common understanding. –4. Facilitate the mapping of terms from the two standards, into the terminology of the enterprise, organization or project. –5. Use this Technical Report as an aid in monitoring, reviewing, auditing or assessing an enterprise, organization or project, as a means of evaluating technical performance, at appropriate levels, to identify findings. –6. Use this Technical Report as a basis of recommendations for future revisions of ISO 9001 and ISO/IEC 15288 (or its successor standard), to improve the interface/inter-relationship between the two standard(s). This will better align these two standards and improve the usability of both of them in future updates. –7. A key achievement of this Technical Report must be to simplify the joint application of these two standards. To that end, the scope (field of application) of this Technical Report shall be defined, so that it is clear what is covered. –ISO/IEC JTC 1/SC 7 N3041

12. 26-Aug-04 12 QMS Planning Group Task List IEEE 90003:2004 review & association –Executive Committee contributions on which S2ESC standards relate to ISO 9001 Clauses –Individual S2ESC & Industry standards experts assigned for confirmation and additions of specific standard’s Clauses –Reformat additional matrix at clause level –Possibly add an errata sheet –Create Ballot Pool, including selected non-S2ESC experts IEEE/ASQ 90003:2005 extension –Possible ASQ Z1 review & approval & publication New S2ESC PARs for missing coverage Contribution to ISO 9001:2008 Amendment Contribution to ISO/IEC 90003:2008 Amendment –Possibly replacing guidance text with reference to specific JTC1 & IEEE S2ESC standards

13. 26-Aug-04 13 IEEE S2ESC Liaisons to other QM related groups US TAG to TC 176 ASQ divisions: SW, QM, E&C SEI CMMI Telecom TL 9000 Aerospace AS 9100 Auto ISO 16949 Medical Device ISO 13485:2003 QAI / CSQA Project Mgmt – PMI

14. 26-Aug-04 14 Broaden S2ESC membership Need to “invite” industry software experts, who cross into other sectors and QM related membership, for P90003 Work Group and/or Ballot membership Call for volunteers from US TAG to TC176