ISO/IEC 12207 IEEE/EIA 12207 Software Life Cycle Processes Supporting Life Cycle Processes

1
ISO/IEC 12207IEEE/EIA 12207 Software Life Cycle
ProcessesSupporting Life Cycle Processes
2
Contents

1. Overview of 12207
2. Quality Assurance Process
3. Verification Process
4. Validation Process
5. Joint Review Process
6. Audit Process
7. Problem Resolution Process

Source - Ferguson, J., Leveraging your CMM
Efforts for IEEE/EIA 12207, IEEE Software, Sept.
1998. - Wells, J., An
Introduction to IEEEEIA 12207, US DoD, SEPO,
1999 - Gray, L., Guidebook to
IEEE/EIA 12207 Standard for Information
Technology, Software Life
Cycle Processes, Abelia Corporation, Fairfax,
Virginia, 2000. - Singh, R., An
Introduction to International Standard ISOIEC
12207 Software Life Cycle Processes, 1998.
3
Outline of IEEE/EIA 12207.0Software Life Cycle
Processes
Forward 1. Scope 2. Normative
references 3. Definitions 4. Application
of this Standard 5. Primary
processes 6. Supporting processes 7
. Organizational processes Annexes A -
D Annexes E - J
total 85 pages
4
12207 Life-Cycle Processes
5
Basic ConceptsActivity Tasks

• An activity is divided into tasks, which are
  grouped according
• to similarity of actions
• TASK
• - A what-to-do action not a how-to-do
  action
• - Verbs used

VERB
WILL (Self-declaration of purpose or intent by
one party)
SHALL (Express a binding provision between two or
more parties)
SHOULD (Express a recommendation among other
possibilities)
MAY (Permission, a course of action permissible)
CAN (Possibility, when needed)
MUST (Unavoidable action) Not used in the
standard
None of the above Present tense
Not a requirement. Used in preamble,
assumption, or to complete the context
6
QUALITY ASSURANCE PROCESSACTIVITIES AND TASKS
1. PROCESS IMPLEMENTATION
3. PROCESS ASSURANCE
ASSURE THAT
ESTABLISH A TAILORED QA PROCESS FOR THE
PROJECT
EMPLOYED PROCESSES ARE COMPLIANT ADHERENT
DEVELOP/DOCUMENT/ EXECUTE QA PLAN
INTERNAL ENGINEERING PRACTICES ARE COMPLIANT
COORDINATE WITH VERIFICATION, VALIDATION,
JOINT REVIEW, AUDIT PROCESSES
PRIME REQUIREMENTS ARE PASSED DOWN TO
SUBCONTRACTORS
OTHER PARTIES ARE PROVIDED SUPPORT
2. PRODUCT ASSURANCE
TRAINED STAFF AND TRAINING ARE IN PLACE
ASSURE THAT
PLANS ARE DOCUMENTED/ COMPLIANT/EXECUTED
4. ASSURANCE OF QUALITY SYSTEM
PRODUCTS/DOCUMENTATION ARE COMPLIANT
ADHERENT
ADDITIONAL QUALITY MANAGEMENT PER ISO 9001
PRODUCTS ARE DELIVERABLE/ ACCEPTABLE TO
ACQUIRER
7
QUALITY ASSURANCE PROCESS

• FOR ASSURING CONFORMANCE OF PRODUCTS/SERVICES
  WITH REQUIREMENTS AND ADHERENCE TO PLANS
  EXTERNAL, WITH ORGANIZATIONAL FREEDOM USES
  THE TERM "ASSURE" INSTEAD OF "EVALUATE"

OUTPUTS
ACTIVITIES
INTERNAL USE
INVOKED PROCESS
QUALITY
PROCESS
PROBLEMRESOLUTION
VV, JT. REVIEW,AUDIT AS TECHNIQUES
ASSURANCE
IMPLEMENTATION
PLAN
PRODUCTS
PRODUCT
INCLUDE RESULTS OF VV, JT. REVIEW,AUDIT, AND
INTERNAL EVALUATIONS
ASSURED
ASSURANCE
PROCESS
PROCESSES
ASSURED
ASSURANCE
AS SPECIFIED
ASSURANCE
IN THE
ISO 9001
OF QUALITY
SYSTEMS
CONTRACT
8
QUALITY ASSURANCE PROCESS List of activities

• This process consists of the following
  activities
• 1) Process implementation
• 2) Product assurance
• 3) Process assurance
• 4) Assurance of quality systems.

9
1. Process implementation Tasks

• 6.3.1.1 A quality assurance process tailored to
  the project shall be established.
• 6.3.1.2 The quality assurance process should be
  coordinated with the related Verification (6.4),
  Validation (6.5), Joint Review (6.6), and Audit
  (6.7) Processes.
• 6.3.1.3 A plan for conducting the quality
  assurance process activities and tasks shall be
  developed, documented, implemented, and
  maintained for the life of the contract.
• 6.3.1.4 Scheduled and on-going quality assurance
  activities and tasks shall be executed.
• 6.3.1.5 Records of quality assurance activities
  and tasks shall be made available to the acquirer
  as specified in the contract.
• 6.3.1.6 It shall be assured that persons
  responsible for assuring compliance with the
  contract requirements have the organizational
  freedom, resources, and authority to permit
  objective evaluations and to initiate, effect,
  resolve, and verify problem resolutions.

10
2. Product assurance Tasks

• 6.3.2.1 It shall be assured that all the plans
  required by the contract are documented, comply
  with the contract, are mutually consistent, and
  are being executed as required.
• 6.3.2.2 It shall be assured that software
  products and related documentation comply with
  the contract and adhere to the plans.
• 6.3.2.3 In preparation for the delivery of the
  software products, it shall be assured that they
  have fully satisfied their contractual
  requirements and are acceptable to the acquirer.

11
3. Process assurance Tasks

• 6.3.3.1 It shall be assured that those software
  life cycle processes (supply, development,
  operation, maintenance, and supporting processes
  including quality assurance) employed for the
  project comply with the contract and adhere to
  the plans.
• 6.3.3.2 It shall be assured that the internal
  software engineering practices, development
  environment, test environment, and libraries
  comply with the contract.
• 6.3.3.3 It shall be assured that applicable
  prime-contract requirements are passed down to
  the subcontractor, and that the subcontractor's
  software products satisfy prime-contract
  requirements.
• 6.3.3.4 It shall be assured that the acquirer and
  other parties are provided the required support
  and cooperation in accordance with the contract,
  negotiations, and plans.
• 6.3.3.5 It should be assured that software
  product and process measurements are in
  accordance with established standards and
  procedures.
• 6.3.3.6 It shall be assured that the staff
  assigned have the skill and knowledge needed to
  meet the requirements of the project and receive
  any necessary training.

12
4. Assurance of quality systems Task

• 6.3.4.1 Additional quality management activities
  shall be assured in accordance with the clauses
  of ISO 9001 as specified in the contract.

13
VERIFICATION PROCESS
FOR VERIFICATION OF REQUIREMENTS IN AN
ACTIVITY AGAINST THOSE FROM PREVIOUS ACTIVITY
INTERNAL OR INDEPENDENT USES THE TERM "VERIFY"
INSTEAD OF "EVALUATE"
OUTPUTS
ACTIVITIES
INVOKED PROCESS
INTERNAL USE
PROCESSIMPLEMENTATION
PROBLEM
VERIFICATION
RESOLUTION
PLAN
VERIFICATION
- CONTRACT- PROCESS- REQUIREMENTS- DESIGN-
CODE- INTEGRATION- DOCUMENTATION
VERIFIED
PRODUCTS
AND
SERVICES
EACH WITHOWN CRITERIA
14
VERIFICATION PROCESSACTIVITIES AND TASKS
1. PROCESS IMPLEMENTATION
5. DESIGN VERIFICATION
DETERMINE IF AND HOW MUCH NEEDED - USE
CRITICALITY FACTORS DETERMINE DEGREE OF
INDEPENDENCE
CORRECT/CONSISTENT\TRACEABLE PROPER
SEQUENCE/ALLOCATION OF EVENTS, I/O, INTERFACES,
LOGIC, TIMING, SIZING, RECOVERY, ... DESIGN
IMPLEMENTS CRITICALITY REQS. CORRECTLY SHOW
BY RIGOROUS METHODS
2. CONTRACT VERIFICATION
SUPPLIER IS CAPABLE USER NEEDS ARE COVERED
HANDLING REQS CHANGES ADEQUATE PARTIES'
INTERFACES STIPULATED
6. CODE VERIFICATION
CORRECT/TESTABLE\TRACEABLE SIMILAR TO ABOVE
3. PROCESS VERIFICATION
PLANNING ADEQUATE/TIMELY PROCESSES
ADEQUATE/IMPLEMENTED BEING EXECUTED/COMPLIANT
STANDARDS/PROCEDURES/ ENVIRONMENTS ADEQUATE
PERSONNEL STAFFED AND TRAINED
7. INTEGRATION VERIFICATION
COMPONENTS/UNITS INTEGRATED
COMPLETELY/CORRECTLY ITEMS INTEGRATED INTO
SYSTEM COMPLETELY AND CORRECTLY PERFORMED PER
PLANS
4. REQS. VERIFICATION
8. DOC. VERIFICATION
CONSISTENT/FEASIBLE/TESTABLE ALLOCATIONS
APPROPRIATE CRITICALITY REQS. CORRECT BY
RIGOROUS METHODS
ADEQUATE/COMPLETE/CONSISTENT TIMELY FOLLOWS
CM
15
VALIDATION PROCESS
FOR VALIDATION OF AS-BUILT PRODUCTS AGAINST
SPECIFIED CRITERIA INTERNAL OR INDEPENDENT
USES THE TERM "VALIDATE" INSTEAD OF "EVALUATE"
CONFIDENCE IN VALIDATION THROUGH TESTING
OUTPUTS
ACTIVITIES
INTERNAL USE
INVOKED PROCESS
PROCESS
VALIDATION
PROBLEM
IMPLEMENTATION
RESOLUTION
PLAN
VALIDATION
VALIDATEDPRODUCTSANDSERVICES
4/5 TASKS TESTING1 TASK INTENDED USE
16
JOINT REVIEW PROCESS

• REVIEW OF PROJECT STATUS, PRODUCTS AND TASKS
  FOR COMPLETENESS, COMPLIANCE AND ADHERENCE

OUTPUTS
ACTIVITIES
INVOKED PROCESS
INTERNAL USE
PROCESS
PROBLEM
AGENDA, SCOPE,FORUM, ETC.
IMPLEMENTATION
RESOLUTION
PROJECT
PROJECT STATUS
MANAGEMENT
RESULTS
REVIEWS
REVIEW
TECHNICAL
REVIEWS
RESULTS
17
AUDIT PROCESS

• FOR AUDITS BETWEEN AUDITOR AND AUDITEE

- TYPICALLY BY ACQUIRER WITH SUPPLIER

• FOR COMPLIANCE WITH REQUIREMENTS/PLANS/CONTRACT

OUTPUTS
ACTIVITIES
INVOKED PROCESS
INTERNAL USE
PROCESS
PROBLEM
AGENDA, SCOPE,FORUM, ETC.
IMPLEMENTATION
RESOLUTION
AUDIT
AUDIT
RESULTS
18
PROBLEM RESOLUTION PROCESS

• FOR ANALYZING AND RESOLVING PROBLEMS, TAKING
  CORRECTIVE ACTIONS, AND DETECTING TRENDS

• A CLOSED LOOP PROCESS - PROBLEMS
  REPORTED/ENTERED - ACTION TAKEN - CAUSES
  IDENTIFIED/ELIMINATED - RESOLUTION/DISPOSITION
  ACHIEVED/RECORDED - TREND DETECTED

• NOTE NOT EVERY PROBLEM NEEDS A CORRECTIVE ACTION

OUTPUTS
ACTIVITIES
INTERNAL USE
INVOKED PROCESS
PROCESS
IMPLEMENTATION
RESOLVED
PROBLEM
PROBLEMS
RESOLUTION
19
How The Life Cycle Processes Interact
20
Summary

1. Overview of 12207
2. Quality Assurance Process
3. Verification Process
4. Validation Process
5. Joint Review Process
6. Audit Process
7. Problem Resolution Process

Claude Y Laporte