Software Quality

Management

Prof. R. Mall
Dept. of CSE, IIT, Kharagpur

1
 ISO 9000
 ISO (international Standards
Organization):
• a consortium of 63 countries
established to formulate and foster
standardization.
 ISO published its 9000 series of
standards in 1987.

2
 What is ISO 9000
Certification?
 ISO 9000 certification:
• Serves as a reference for
contract between independent
parties.
 The ISO 9000 standard:
• Specifies guidelines for
maintaining a quality system.
3
 What is ISO 9000
Certification?
 ISO 9000 specifies:
• Guidelines for repeatable and high
quality product development.
• Also addresses organizational
aspects
 Responsibilities, reporting, procedures,
processes, and resources for
implementing quality management.

4
 ISO 9000
 A set of guidelines for the
production process.
• Not directly concerned about
the product it self.
• A series of three standards:
 ISO 9001, ISO 9002, and ISO
9003.
5
 ISO 9000
 Based on the premise:
• If a proper process is
followed for production:
 Good quality products are
bound to follow.

6
 ISO 9001
 Applies to:
• Organizations engaged in design,
development, production, and
servicing of goods.
• Applicable to most software
development organizations.

7
 ISO 9002
 ISO 9002 applies to:
• Organizations who do not design products:
 but are only involved in production.
 Examples of this category of industries:
• Steel or car manufacturing industries
• Buy the product and plant designs from external
sources:
 only manufacture products.
• Not applicable to software development
organizations.
8
 ISO 9003
 ISO 9003 applies to:
• Organizations involved only in
installation and testing of the
products.

9
 ISO 9000 for Software
Industry
 ISO 9000 is a generic standard:
• Applicable to many industries,
 Starting from a steel manufacturing industry
to a service rendering company.
 Many clauses of ISO 9000 documents:
• Use generic terminologies
• Very difficult to interpret them in the
context of software organizations.

10
 ISO 9000 Part-3
 ISO released a separate
document called ISO 9000 part-3
in 1991:
• To help interpret the ISO standard
for software industry.
 At present:
• Official guidance is inadequate.

11
 ISO 9000: 2000
 ISO 9001:2000:
• Combines the three standards 9001, 9002,
and 9003 into one.
 Design and development procedures are
required:
• Only if a company does in fact engage in the
creation of new products.
 The 2000 version sought to make a
radical change in thinking:
• By actually highlighting the concept of
process management.
12
 ISO 9000: 2000
 Another goal is to improve
effectiveness via process
performance metrics:
• Numerical measurement of the
effectiveness of tasks and activities.
• Continual process improvement and
tracking customer satisfaction were
made explicit.
13
 Why Get ISO 9000
Certification?
 Several benefits:
• Confidence of customers in an
organization increases.
 If organization qualified for ISO
9001 certification.
 This is especially true in the
international market.

14
 Why Get ISO 9000
Certification?
 Many international software
development contracts insist:
• Development organization to
have ISO 9000 certification.

15
 Why Get ISO 9000
Certification?
 Requires:
• A well-documented software
production process to be in place.
• Contributes to repeatable and higher
quality software.
 Makes development process:
• Focussed, efficient, and cost-
effective
16
 Why Get ISO 9000
Certification?
 Points out the weakness of an
organizations:
• Recommends remedial action.
 Sets the basic framework:
• For development of an optimal
process and TQM.

17
 How to Get ISO 9000
Certification?
 An organization intending to
obtain ISO 9000 certification:
• Applies to a ISO 9000 registrar
for registration.
 ISO 9000 registration process
consists of several stages.

18
 How to Get ISO 9000
Certification?
 Application stage:
• Applies to a registrar for
registration.
 Pre-assessment:
• The registrar makes a rough
assessment of the organization.
19
 How to Get ISO 9000
Certification?
 Document review and adequacy
audit:
• Process and quality-related
documents.
• The registrar reviews the
documents.
• Makes suggestions for
improvements.
20
 How to Get ISO 9000
Certification?
 Compliance audit: The
registrar checks:
 Whether the suggestions made
by it during review have been
complied.

21
 How to Get ISO 9000
Certification?
 Registration:
• The registrar awards ISO 9000
certificate after successful
completions of all previous phases.
 Continued surveillance:
• The registrar continues monitoring
the organization periodically.
22
 ISO 9000 Certification
 An ISO certified organization :
• Can use the certificate for corporate
advertizements.
• Cannot use the certificate to advertize
its products.
 ISO 9000 certifies organization's process
 Not any product of the organization.
• An organization using ISO certificate
for product advertizements:
 Risks withdrawal of the certificate.
23