Software Quality Models

1. Software Quality Models • International Standards Organization (ISO) General for all types of manufacturing concerns not specific to software Industries • SEI-CMM (Software Engineering Institutes-Capability Maturity Model ) Specific to Software Products and Processes • IEEE (Institute of Electrical and Electronics Engineers) For general IT products like N/W, Storages

2. ISO ISO is a foundation of quality management-which defines minimum quality standards for acceptability at international level. It specifies the guidelines for implementing and maintaining a quality system in the organization.

3. ISO • ISO (International Organization for Standardization) is the world's largest developer and publisher of International Standards. • ISO is a network of the national standards institutes of 157 countries, one member per country, with a Central Secretariat in Geneva, Switzerland, that coordinates the system. • ISO is a non-governmental organization that forms a bridge between the public and private sectors.

4. Discover ISO • Because "International Organization for Standardization" would have different acronyms in different languages ("IOS" in English, "OIN" in French for Organisation internationale de normalisation), its founders decided to give it also a short, all-purpose name. They chose "ISO", derived from the Greek isos, meaning "equal". Whatever the country, whatever the language, the short form of the organization's name is always ISO.

5. ISO Structure

6. ISO Standards • ISO has developed over 17000 International Standards on a variety of subjects and 1100 new ISO standards are published every year. The full range of technical fields can be seen from the listing International Standards. Users can browse that listing to find bibliographic information on each standard and, in many cases, a brief abstract. The online ISO Standards listing integrates both the ISO Catalogue of published standards and the ISO Technical programme of standards under development.

7. ISO • Emphasis on Documentation of the products and processes • Certification thru Audit from ISO appointed Committees (Capability, Agreement, Supervision or Inspection or Judgement) • Believes more on Management Dedication towards Quality

8. ISO The term ISO 9000refers to a set of quality management standards. ISO 9000 currently includes three quality standards: • ISO 9000:2000, • ISO 9001:2000, • ISO 9004:2000. In the past, ISO had three standards: ISO 9001:1994, ISO 9002:1994, ISO 9003:1994. Now there's only one standard: ISO 9001:2000!ISO 9002 and ISO 9003 have been dropped. ISO 9001:2000 presents requirements, while ISO 9000:2000 and ISO 9004:2000 present guidelines.

9. ISO-9001 ISO-9001 is International organization for standardization 9001 means a set of quality management standards, which are completed in 1982 and published in 1983. Now more than 90 countries have adopted ISO 9001 2000 as national standard. ISO is having following three series

10. ISO Indian equivalent for ISO-9000 is as IS-14000 • ISO-9001 (IS-14001) • Suitable for Organizations engaged in Design, Development, Production, Installation, Servicing etc. • ISO-9002 (IS-14002) • Production • Installation • Servicing • ISO-9003 (IS-14003) • Final Installation and Servicing

11. ISO-9001 The various benefits for adopting these standards are: • Quality of product or service improves • Management system improves • Less customer complaints indicates Customer satisfaction • Waste elimination • Internal communication of your organization improves • Market opportunity increases

12. SEI-CMM • Capability Maturity Model (CMM), has found it’s way from Carnegie Melon University’s (CMU) software engineering Institute (SEI) to major Software developers all over the world

13. What are CMM • Contain the essential elements of effective processes for one or more disciplines • Contain a framework that provides the ability to generate multiple models and associated • training and assessment materials. These models may represent • Software and systems engineering • Integrated product and process development • New disciplines • Combinations of disciplines • Provide guidance to use when developing processes

14. SEI-CMM • It helps to identify the Weaknesses and Strengths in SD process. • It supports Process Improvement Initiatives. • Evaluate the capability of Software Vendor. • 5-level Model which describes the effectiveness of SD process.

15. SEI-CMM • Level-1- Initial Unstable, Un-organized practices • Level-2 - Repeatable Stable, Organized practices • Level-3 - Defined Well-defined and Consistent implementation • Level-4 - Managed Measuring Quality & Quantity of Processes • Level-5 - Optimized Optimization of the processes and Continuous Improvement

16. Maturity Levels

17. Key Process Areas of CMM

18. Structure of CMM

19. Statistical SQA Product & Process Collect information on all defects Find the causes of the defects Move to provide fixes for the process measurement ... an understanding of how to improve quality ...

20. Six-Sigma for Software Engineering Six Sigma is the most widely used strategy for statistical quality assurance in industry today. Originally popularized by Motorola in the 1980’s, the Six Sigma is a rigorous and disciplined methodology that used data and statistical analysis to measure and improve a company’s operational performance by identifying and eliminating ‘defects’ in manufacturing and service-related processes. The term “six sigma” is derived from six standard deviations—3.4 instances (defects) per million occurrences—implying an extremely high quality standard. The Six Sigma methodology defines three core steps: Define customer requirements and deliverables and project goals via well-defined methods of customer communication Measure the existing process and its output to determine current quality performance (collect defect metrics) Analyze defect metrics and determine the vital few causes.

21. Six-Sigma for Software Engineering Cont… In an existing software process is in place, but improvement is required, Six Sigma suggest two additional steps: Improvethe process by eliminating the root causes of defects. Controlthe process to ensure that future work does not reintroduce the causes of defects. These core and additional steps are sometimes referred to as the DMAIC (Define, Measure, Analyze, Improve, and Control) method. If an organization is developing a software process, the core steps are augmented as follows Design: The process : a. To avoid the root causes of defects. b. To meet customer requirements. Verify : That the process model will, in fact, avoids defects and meet customer requirements. This validation is sometimes called the DMADV method.

22. Process Classification • Software processes can be observed in all organizations, from one person companies to large multinationals. These processes are of different types depending on the degree of formality of the process, the types of product developed, the size of organization, and so on. There are four classes of software processes: • Informal Processes: When there is strictly defined process model, the development team chooses the process that they will use. Informal processes may use formal procedures such as configuration management, but the procedures and the relationships between procedures are defined as required by development team. • Managed Processes: A defined process model is used to derive the development process. The process model defines the procedures, their scheduling and the relationships between procedures.

23. Process Classification Cont… • Methodical Processes: When some defined development method or methods are used, these processes benefit from CASE tool support for design and analysis processes. • Improving Processes: Processes that have inherent improvement objectives have a specific budget for improvements and procedures for introducing such improvements. As part of this, quantitative process measurement my be introduced.