SQA Process & Software Life Cycle Outcomes

1. SQA Process & Software Life Cycle Outcomes • John Walz • P730 WG FTF on 16-Feb-2010

2. ISO/IEC 12207:2008 Life Cycle Process Outcomes • 2.2 Full conformanceA claim of full conformance declares the set of processes for which conformance is claimed. Full conformance is achieved by demonstrating that all of the requirements of the declared set of processes have been satisfied using the outcomes as evidence. • 4 Terms and definitions • 4.26 process purpose high level objective of performing the process and the likely outcomes of effective implementation of the process • 4.50 task requirement, recommendation, or permissible action, intended to contribute to the achievement of one or more outcomes of a process • 5.1 Key concepts • 5.1.9 Description of processes • The outcomes express the observable results expected from the successful performance of the process • The activities are a list of actions that are used to achieve the outcomes • 5.2 Organization • 5.2.1 Each of the life cycle processes within those groups is described in terms of its purpose and desired outcomes and lists activities and tasks which need to be performed to achieve those outcomes.

3. Inputs information products (documentation) Outcomes information products (documentation) Process Activities and Tasks Process Outcomes • evidence • observable results

4. Information Products (documentation) • ISO/IEC CD 15289.2 S2E - Content of life-cycle information products (documentation) Introduction • ISO/IEC 12207:2008 clauses often do not specify the contents of documents. The information items identified in ISO/IEC 15289 aid in planning, producing, and evaluating the results of the life-cycle • processes. Information items are essential to preserving what transpired when using system life cycle processes, and may be identified as deliverable documents. • IS 12207 6.4 Management of information items (documents) • The management of information items shall be performed by applying the Information Management process of ISO/IEC 12207:2008 and ISO/IEC 15288:2008, and the Documentation Management process of ISO/IEC 12207:2008, including the knowledge management activities of ISO/IEC 15288:2008 clause 6.2.4. The Information Management Process should support the needs of a project and the related product or service. It should include procedures for preparing, collecting, identifying, classifying, distributing, storing, updating, archiving, and retrieving information.

5. SQA Process 7.2.3.2 Outcomes • As a result of successful implementation of the Software Quality Assurance Process: • a) a strategy for conducting quality assurance is developed; • b) evidence of software quality assurance is produced and maintained; • c) problems and/or non-conformance with requirements are identified and recorded; and • d) adherence of products, processes and activities to the applicable standards, procedures and requirements are verified.

6. 12207:2008 Process Inputs & Outcomes

7. Specific SQA records

8. Quality management plan • IS15289.2 10.50Quality management plan • ISO/IEC 15288:2008 reference: 6.2.5.3, 6.3.1.3 • ISO/IEC 12207:2008 reference: 6.1.2.3.4.3, 6.2.5.3.1.5, 6.3.1.3, 7.2.3.3.1.3 • Generic type: Plan • The quality management plan (or quality assurance plan) (in accordance with ISO 9001:2008 or other quality standard) presents the approach to fulfill the quality aspects of the program, product or service. It includes the following: • a) the project or organization's quality objectives and the organization’s quality policies • b) product and service improvement plans • c) product and service assessment plans, with assessment requirements, criteria, responsibilities, and allocations • d) the minimum documentation requirements for quality management • e) required records of the quality activities and tasks, as well as records of problems and problem resolutions • f) the configuration management of quality records • g) specific reviews and audits for the tasks of testing, problem reporting, and corrective action included in the verification, validation, and software audit processes • h) assessment of configuration control of system or software configuration items and media • i) required coordination of software quality assurance activities with other project activities.

9. Quality management procedure • IS 15289.2 10.51 Quality management procedure • ISO/IEC 12207:2008 reference: 6.2.5.2, 6.2.5.3.1.1 • ISO/IEC 15288:2008 reference: 6.2.5.2, 6.2.5.3 • Generic type: Procedure • The quality management procedure (or quality assurance procedure) explains how the quality aspects of the program, product or service will be performed. It includes procedures for contract reviews; inspections, assessments, and reviews and audits for the tasks of testing, problem reporting, process improvement, and corrective action; as included in the quality management, software quality assurance, software audit, verification, validation, and process improvement processes.

10. Verification plan • IS 15289.210.80 Verification plan • ISO/IEC 15288:2008 reference: 6.4.6.3 • ISO/IEC 12207:2008 references: 7.2.4.3.1.5, 7.2.4.3.1.6 • Generic type: Plan • The verification plan (or integration and test plan) may also address unit, system, and qualification tests. It enables an assessment of the adequacy of planning for testing. It includes the following: • k) the assigned responsibilities for executing the test procedures, including the locations and organizations for the test manager, testers, quality assurance, configuration management, test evaluation and reporting, and supplier involvement in testing