ISOIEC 12207 IEEEEIA 12207 Software Life Cycle Processes

ISO/IEC 12207 IEEE/EIA 12207 Software Life Cycle Processes Supporting Life Cycle Processes

Contents 1. 2. 3. 4. 5. 6. 7. Overview of 12207 Quality Assurance Process Verification Process Validation Process Joint Review Process Audit Process Problem Resolution Process Source: - Ferguson, J. , ‘Leveraging your CMM Efforts for IEEE/EIA 12207’, IEEE Software, Sept. 1998. - Wells, J. , ‘An Introduction to IEEEEIA 12207’, US Do. D, SEPO, 1999 - Gray, L. , ‘Guidebook to IEEE/EIA 12207 Standard for Information Technology, Software Life Cycle Processes’, Abelia Corporation, Fairfax, Virginia, 2000. - Singh, R. , ‘An Introduction to International Standard ISOIEC 12207 Software Life Cycle 11/29/2020 Processes’, 1998. 2

Outline of IEEE/EIA 12207. 0: “Software Life Cycle Processes” Forward 1. Scope 2. Normative references 3. Definitions 4. Application of this Standard 5. Primary processes 6. Supporting processes 7. Organizational processes IS Annexes A - D O /IE C 12 20 7 11/29/2020 Annexes E - J total: 85 pages 3

12207 Life-Cycle Processes 11/29/2020 4

QUALITY ASSURANCE PROCESS ACTIVITIES AND TASKS 1. PROCESS IMPLEMENTATION 3. PROCESS ASSURANCE • ESTABLISH A TAILORED QA PROCESS FOR THE PROJECT ASSURE THAT: • DEVELOP/DOCUMENT/ EXECUTE QA PLAN • COORDINATE WITH VERIFICATION, VALIDATION, JOINT REVIEW, AUDIT PROCESSES • EMPLOYED PROCESSES ARE COMPLIANT & ADHERENT • INTERNAL ENGINEERING PRACTICES ARE COMPLIANT • PRIME REQUIREMENTS ARE PASSED DOWN TO SUBCONTRACTORS 2. PRODUCT ASSURANCE • OTHER PARTIES ARE PROVIDED SUPPORT ASSURE THAT: • TRAINED STAFF AND TRAINING ARE IN PLACE • PLANS ARE DOCUMENTED/ COMPLIANT/EXECUTED • PRODUCTS/DOCUMENTATION ARE COMPLIANT & ADHERENT • PRODUCTS ARE DELIVERABLE/ ACCEPTABLE TO ACQUIRER 11/29/2020 4. ASSURANCE OF QUALITY SYSTEM • ADDITIONAL QUALITY MANAGEMENT PER ISO 9001 6

QUALITY ASSURANCE PROCESS • FOR ASSURING CONFORMANCE OF PRODUCTS/SERVICES WITH REQUIREMENTS AND ADHERENCE TO PLANS • EXTERNAL, WITH ORGANIZATIONAL FREEDOM • USES THE TERM "ASSURE" INSTEAD OF "EVALUATE" ACTIVITIES PROCESS IMPLEMENTATION PRODUCT ASSURANCE INTERNAL USE INVOKED PROCESS V&V, JT. REVIEW, AUDIT AS TECHNIQUES PROBLEM RESOLUTION INCLUDE RESULTS OF V&V, JT. REVIEW, AUDIT, AND INTERNAL EVALUATIONS OUTPUTS QUALITY ASSURANCE PLAN PRODUCTS ASSURED PROCESSES ASSURANCE ASSURED ASSURANCE OF QUALITY SYSTEMS AS SPECIFIED IN THE CONTRACT 11/29/2020 ISO 9001 7

QUALITY ASSURANCE PROCESS List of activities This process consists of the following activities: 1) Process implementation; 2) Product assurance; 3) Process assurance; 4) Assurance of quality systems. 11/29/2020 8

1. Process implementation Tasks – 6. 3. 1. 1 A quality assurance process tailored to the project shall be established. – 6. 3. 1. 2 The quality assurance process should be coordinated with the related Verification (6. 4), Validation (6. 5), Joint Review (6. 6), and Audit (6. 7) Processes. – 6. 3. 1. 3 A plan for conducting the quality assurance process activities and tasks shall be developed, documented, implemented, and maintained for the life of the contract. – 6. 3. 1. 4 Scheduled and on-going quality assurance activities and tasks shall be executed. – 6. 3. 1. 5 Records of quality assurance activities and tasks shall be made available to the acquirer as specified in the contract. – 6. 3. 1. 6 It shall be assured that persons responsible for assuring compliance with the contract requirements have the organizational freedom, resources, and authority to permit objective evaluations and to initiate, effect, resolve, and verify problem resolutions. 11/29/2020 9

2. Product assurance Tasks – 6. 3. 2. 1 It shall be assured that all the plans required by the contract are documented, comply with the contract, are mutually consistent, and are being executed as required. – 6. 3. 2. 2 It shall be assured that software products and related documentation comply with the contract and adhere to the plans. – 6. 3. 2. 3 In preparation for the delivery of the software products, it shall be assured that they have fully satisfied their contractual requirements and are acceptable to the acquirer. 11/29/2020 10

3. Process assurance Tasks – 6. 3. 3. 1 It shall be assured that those software life cycle processes (supply, development, operation, maintenance, and supporting processes including quality assurance) employed for the project comply with the contract and adhere to the plans. – 6. 3. 3. 2 It shall be assured that the internal software engineering practices, development environment, test environment, and libraries comply with the contract. – 6. 3. 3. 3 It shall be assured that applicable prime-contract requirements are passed down to the subcontractor, and that the subcontractor's software products satisfy prime-contract requirements. – 6. 3. 3. 4 It shall be assured that the acquirer and other parties are provided the required support and cooperation in accordance with the contract, negotiations, and plans. – 6. 3. 3. 5 It should be assured that software product and process measurements are in accordance with established standards and procedures. – 6. 3. 3. 6 It shall be assured that the staff assigned have the skill and knowledge needed to meet the requirements of the project and receive any necessary training. 11/29/2020 11

4. Assurance of quality systems Task – 6. 3. 4. 1 Additional quality management activities shall be assured in accordance with the clauses of ISO 9001 as specified in the contract. 11/29/2020 12

VERIFICATION PROCESS • FOR VERIFICATION OF REQUIREMENTS IN AN ACTIVITY AGAINST THOSE FROM PREVIOUS ACTIVITY • INTERNAL OR INDEPENDENT • USES THE TERM "VERIFY" INSTEAD OF "EVALUATE" ACTIVITIES PROCESS IMPLEMENTATION INTERNAL USE INVOKED PROCESS PROBLEM RESOLUTION OUTPUTS VERIFICATION PLAN VERIFICATION - CONTRACT - PROCESS - REQUIREMENTS - DESIGN - CODE - INTEGRATION - DOCUMENTATION VERIFIED PRODUCTS AND SERVICES EACH WITH OWN CRITERIA 11/29/2020 13

VERIFICATION PROCESS ACTIVITIES AND TASKS 1. PROCESS IMPLEMENTATION • DETERMINE IF AND HOW MUCH NEEDED - USE CRITICALITY FACTORS • DETERMINE DEGREE OF INDEPENDENCE 2. CONTRACT VERIFICATION • SUPPLIER IS CAPABLE • USER NEEDS ARE COVERED • HANDLING REQS CHANGES ADEQUATE • PARTIES' INTERFACES STIPULATED 3. PROCESS VERIFICATION • PLANNING ADEQUATE/TIMELY • PROCESSES ADEQUATE/IMPLEMENTED BEING EXECUTED/COMPLIANT • STANDARDS/PROCEDURES/ ENVIRONMENTS ADEQUATE • PERSONNEL STAFFED AND TRAINED 4. REQS. VERIFICATION • CONSISTENT/FEASIBLE/TESTABLE • ALLOCATIONS APPROPRIATE • CRITICALITY REQS. CORRECT BY 11/29/2020 RIGOROUS METHODS 5. DESIGN VERIFICATION • CORRECT/CONSISTENTTRACEABLE • PROPER SEQUENCE/ALLOCATION OF EVENTS, I/O, INTERFACES, LOGIC, TIMING, SIZING, RECOVERY, . . . • DESIGN IMPLEMENTS CRITICALITY REQS. CORRECTLY [SHOW BY RIGOROUS METHODS] 6. CODE VERIFICATION • CORRECT/TESTABLETRACEABLE • SIMILAR TO ABOVE 7. INTEGRATION VERIFICATION • COMPONENTS/UNITS INTEGRATED COMPLETELY/CORRECTLY • ITEMS INTEGRATED INTO SYSTEM COMPLETELY AND CORRECTLY • PERFORMED PER PLANS 8. DOC. VERIFICATION • ADEQUATE/COMPLETE/CONSISTENT • TIMELY • FOLLOWS CM 14

VALIDATION PROCESS • FOR VALIDATION OF AS-BUILT PRODUCTS AGAINST SPECIFIED CRITERIA • INTERNAL OR INDEPENDENT • USES THE TERM "VALIDATE" INSTEAD OF "EVALUATE" • CONFIDENCE IN VALIDATION: THROUGH TESTING ACTIVITIES PROCESS IMPLEMENTATION VALIDATION 4/5 TASKS TESTING 1 TASK: INTENDED USE 11/29/2020 INTERNAL USE PROBLEM RESOLUTION INVOKED PROCESS OUTPUTS VALIDATION PLAN VALIDATED PRODUCTS AND SERVICES 15

JOINT REVIEW PROCESS • FOR JOINT REVIEWS BETWEEN REVIEWER AND REVIEWEE - TYPICALLY BY SUPPLIER WITH ACQUIRER - BOTH TECHNICAL AND MANAGEMENT • REVIEW OF PROJECT STATUS, PRODUCTS AND TASKS FOR COMPLETENESS, COMPLIANCE AND ADHERENCE ACTIVITIES PROCESS IMPLEMENTATION INTERNAL USE PROBLEM RESOLUTION INVOKED PROCESS OUTPUTS AGENDA, SCOPE, FORUM, ETC. PROJECT MANAGEMENT REVIEWS PROJECT STATUS TECHNICAL REVIEWS RESULTS 11/29/2020 RESULTS 16

AUDIT PROCESS • FOR AUDITS BETWEEN AUDITOR AND AUDITEE - TYPICALLY BY ACQUIRER WITH SUPPLIER • FOR COMPLIANCE WITH REQUIREMENTS/PLANS/CONTRACT ACTIVITIES PROCESS IMPLEMENTATION INTERNAL USE PROBLEM RESOLUTION INVOKED PROCESS X X X OUTPUTS AGENDA, SCOPE, FORUM, ETC. AUDIT 11/29/2020 RESULTS 17

PROBLEM RESOLUTION PROCESS • FOR ANALYZING AND RESOLVING PROBLEMS, TAKING CORRECTIVE ACTIONS, AND DETECTING TRENDS • A CLOSED LOOP PROCESS: - PROBLEMS REPORTED/ENTERED - ACTION TAKEN - CAUSES IDENTIFIED/ELIMINATED - RESOLUTION/DISPOSITION ACHIEVED/RECORDED - TREND DETECTED • NOTE: NOT EVERY PROBLEM NEEDS A CORRECTIVE ACTION ACTIVITIES INTERNAL USE INVOKED PROCESS OUTPUTS PROCESS IMPLEMENTATION PROBLEM RESOLUTION 11/29/2020 RESOLVED PROBLEMS 18

How The Life Cycle Processes Interact MAINTENANCE ACQUISITION MANAGEMENT contract • OPERATION SUPPLY DEVELOPMENT CM DOCUMENTATION PROB. RES. VERIFICATION QA JOINT REVIEW AUDIT VALIDATION SUPPORTING PROCESSES INFRASTRUCTURE TRAINING IMPROVEMENT ORGANIZATIONAL PROCESSES 11/29/2020 19

Summary 1. 2. 3. 4. 5. 6. 7. 11/29/2020 Overview of 12207 Quality Assurance Process Verification Process Validation Process Joint Review Process Audit Process Problem Resolution Process Claude Y Laporte 20