2020 - Chapter 2 Software Quality Standards
2020 - Chapter 2 Software Quality Standards
Chapter 2
Software Quality Standards
Learning Outcomes
2
What Are Standards?
• A standard might simply be defined as 'a set of
rules for ensuring quality'.
• A standard is an agreed way of doing something.
It could be about making a product, managing a
process, delivering a service or supplying
materials – standards can cover a huge range of
activities undertaken by organizations and used
by their customers.
Term Definition
• The term 'standard', used in generic sense and has
been defined by D. Reck as:
11
Standards and Procedures
• Framework for which Software Evolves
• Standards
– Established Criteria to which Software Products are
Compared
• Procedures
– Established Criteria to which Development and Control
Procedures are Followed
• SQA is based on the Following of Standards and
Procedures
12
Standards and Procedures
• Proper documentation of Standards and
Procedures is necessary for SQA
• SQA Activities of Process Monitoring, Product
Evaluation, and Auditing rely on these
Standards and Procedures
• Any number of different Standards and
Procedures can be used on a given system
13
Standards and Procedures
• Requirement Standards
– Specify the Form and Content of how Requirements are
defined in a System
– Establishes a System of how to write a Requirement
• Short Phrase Describing Requirement
• Elaborate into more Detail
– Use a Numbering System for the Major Requirements and
Sub-Requirements
– Many Major Companies have Software to aid in the
Requirement Writing Process
14
Standards and Procedures
• Design Standards
– Specify the Content and Form of how Design
Documents are Developed
– Provide Rules and Methods to Transfer:
• Software Requirements to Software Design
• Software Design into Software Design Documentation
– Many Major Companies have Design Development
Software to aid in the Process
15
Standards and Procedures
• Code Standards
– Specify what Language the Code is written in and Define
any Restrictions on Language Features
– Code Standards Define:
• Legal Language Structures
• Style Conventions
• Rules for Data Structures and Interfaces
• Internal Code Documentation
– Using Methods such as “Peer Reviews”, “Buddy Checks”,
and Code Analysis can Enforce Standards
16
Standards and Procedures
• Code Standards
– A good thing but too many will Force Productivity and
Creativity to Suffer
– Examples of Good Code Standards:
• Reduction or Elimination of Global Variables
• Function and Method Sizes should be Minimized
• Each Line of Code should be Seventy Characters Maximum
• One Code Statement per Line
• Etc…
17
Standards and Procedures
• Documentation Standards
– Specify Form and Content for Planning, Control,
and Product Documentation
– Provide Consistency throughout a System
– Documentation can be written in any form
– Each Practice should be Documented so it can be
Repeated or Changed later if needed
18
Organizations involved in SQA
Standards Development
Most prominent developers of SQA standards:
19
Software quality assurance standards
Several standards that are related to software quality assurance are available.
29
Approach to ISO 9000
• ISO 9000 provides a starting place for all-encompassing
quality efforts. The standards merely stipulate where
organizations need documentation to validate processes and
approaches but never dictate how much they require.
• ISO 9000 is not a product registration standard; it in no way
measures or recognizes the quality of a company's product,
nor does it mean that two companies with ISO 9000
registrations are equivalent.
30
Approach to ISO 9000
• ISO 9000 requires:
– Management that is committed, involved, focused and responsive.
– People who are organized, responsible, authorized, competent, empowered and
knowledgeable.
– Processes that are visible, traceable, consistent, repeatable, measurable and
documentable.
– Documents that are appropriate, relevant, simple, understandable and consistent with
processes in use.
31
ISO 9000
• Any organization wishing to adopt ISO standards
should start be using ISO 9000 and then select the
appropriate standard according to the type of their
business
• The ISO 9000 standard is continually being revised by
standing technical committees and advisory groups,
who receive feedback from those professionals who
are implementing the standard. The last version Is
ISO 9000- 2015
Other ISO Standards
ISO 9001 is the broadest standard and provides a model for
design, development, production, installation and servicing
ISO 9002 is limited to production, installation and servicing
ISO 9003 is further limited to inspection and testing
ISO 9000-3 is further limited for software quality
A company should first use ISO 9000 to design and to
implement a quality system. Once the quality has been
installed, the company may use the quality assurance models
of ISO 9001, ISO 9002, or ISO 9003 to demonstrate the
adequacy of the quality system.
33
Basic Steps in ISO 9000 Registration
• Planning
• Training
• Preparing documentation
• Internal assessment
• Internal auditing
• Pre-registration assessment
• Registration assessment
• Certification
35
A three-step process to ISO 9000 registration includes:
1. Management involvement and organizational
commitment, along with team spirit.
2. The preparation process, which entails understanding
the requirements, developing a good assessment of
current compliance (gap analysis), establishing an
internal audit system and documenting the processes.
3. Audit preparation, which includes undergoing a
simulation, everyone understanding the quality policy
and showing a professional attitude, and fostering a
good working relationship with external auditors.
36
Registration road map
ISO 9000 registration steps include the following:
39
Benefits of ISO 9000
• ISO 9000 provides a foundation and complementary approach to quality by focusing on
process documentation and maintaining appropriate records. The standards lay the
foundation for a total quality management program by concentrating on three fundamental
aspects: implementing quality controls, documenting the various processes and procedures,
and ensuring that the appropriate quality emphasis is established and followed by everyone
in the organization. ISO 9000 standards form a template for the creation of a sound quality
process. ISO 9000 enables suppliers to provide assurance that they have established an
operational quality system.
International customers have started to make ISO 9000 compliance an integral part of their
purchase agreements. Customers use the standards as a way to differentiate the offerings of
various suppliers, particularly when products and services are substantially similar. Customers
see compliance as a way to gain a degree of assurance that suppliers are doing what they say
they are doing.
The organization seeking registration has a great deal of flexibility in deciding on the scope of
the registration. Individual product lines or functional entities can be registered separately, a
single site can be registered or a division with multiple sites/locations can be registered.
40
Negative aspects of ISO 9000
• Extra time and money involved in the
registration process.
• Distraction from other quality programs
• A lot of work
The Success Factors in ISO 9000
Registration
• Clear planning
• Hard work of each employee
• Commitment from top level
• Management support at every level
• Cross-functional team work
• Weekly meetings
• Extensive training resulting in knowledgeable
individuals
Making ISO9000 works for you
o Implementing ISO 9000 leads to improved competitiveness because participants:
o Enforce an explicit statement of declared aims or specifications.
o Enforce a system of monitoring and keeping records.
o Provide the necessary discipline to carry out audits and reviews of systems to get to the
root causes of problems.
o Define responsibilities.
o Provide an auditable system that can be verified by external auditors.
o Help to successfully implement the feedback loop.
o Focus on customer needs.
o Apply a supplier/customer relationship with well-defined and mutually agreed-upon
requirements.
o Develop a prevention attitude throughout the company, accompanied by an early
detection and correction system.
o Establish clearly documented procedures, understood by everyone concerned.
o Provide adequate quality training for everyone that includes general comprehension of
what quality means and training in the use of specific tools.
43
Managerial Implications
• ISO 9000 are becoming an integral part of
global business
• Managers must understand what the critical
success factors are before starting the ISO
9000 registration
• There are extensive benefits to the company
beyond the certification.
• Consider certification to other standards.
ISO 9001 Quality Management
What is ISO 9001?
• ISO 9001 is a standard that sets out the requirements for a quality
management system.
• It helps businesses and organizations to be more efficient and improve
customer satisfaction.
• With over 1.1 million certificates issued worldwide, ISO 9001 helps
organizations demonstrate to customers that they can offer products and
services of consistently good quality. It also acts as a tool to streamline
their processes and make them more efficient at what they do.
• A common framework for all management system standards
– ISO9001 uses high level structure, that was developed within ISO community
to try and provide the level of consistency for all management system
standards, to ensure consistency
What is a quality management system?
• Put your customers first, making sure you consistently meet their needs
and enhance their satisfaction. This can lead to repeat custom, new
clients and increased business for your organization.
What benefits will it bring to my
business or organization? (Cont.)
• Work in a more efficient way as all your processes will be
aligned and understood by everyone in the business or
organization. This increases productivity and efficiency,
bringing internal costs down.
• Meet the necessary statutory and regulatory
requirements.
• Expand into new markets, as some sectors and clients
require ISO 9001 before doing business.
• Identify and address the risks associated with your
organization
Why was ISO 9001 revised?
• All ISO standards are reviewed and revised regularly to make sure they
remain relevant to the marketplace. ISO 9001 has been updated to take
into account the different challenges that businesses now face.
53
ISO 9001:2015
Quality management systems -- Requirements
54
What are the key improvements to ISO
9001:2015?
o Increased emphasis on achieving value for the organization
and its customers
o A greater emphasis on leadership and organizational context
o Focus on risk-based thinking. This has always been part of the
standard, but the new version gives it increased prominence.
o Emphasis on objectives, measurements and change
o Stakeholder-focused communication and awareness
o Decreased emphasis on documentation
ISO9001- Key Differences
56
ISO 9001- Different Terminology
57
What benefits does the
new version bring?
The new version of the standard brings the user a number of benefits.
ISO 9001:2015:
• Puts greater emphasis on leadership engagement
• ISO does not perform certification. For more information about the
certification process, see www.iso.org and the publication ISO
9001:2015 – How to use it.
Malaysian Standards Development Structure
• Department of Standards Malaysia (DSM) is the National
Standards Body for Malaysia established under Standards
of Malaysia Act 1996.
• SIRIM Berhad is appointed as the sole national standards
development agency by DSM.
• DSM is responsible for all policy matters with regard to
standardization and operational responsibility is delegated
to SIRIM Berhad.
• Amendment of Act 549 in year 2012 has allowed Standards
Malaysia to appoint more Standards Development Agency
(SDAs) for faster development of Malaysian Standards (MS)
according to its areas of expertise.
60
DSM’S AND SIRIM BERHAD’S TASKS
DSM
• Standards policy development and implementation
• Participation in International and Regional Bodies
• Accreditation of laboratories and certification bodies
SIRIM Berhad
• Managing the standards development infrastructure
• Managing Malaysian representation in regional and international
standards bodies
• Publishing, printing, selling and distributing Malaysian Standards
61
Minister of Science, Technology and Innovation
DSM
Malaysian Standards and -Policy & Advisory
Accreditation Council (MSAC)
Sectorial Committees 20
63
STANDARDS OF MALAYSIA ACT
REQUIREMENTS IN STANDARDS OF
MALAYSIA ACT (ARTICLES 15 (1), (5) & 15 (3),
64
IMPLEMENTATION OF CODE OF GOOD PRACTICE
65
STANDARDS DEVELOPMENT PROCESS FOR MALAYSIAN STANDARDS
Approval by Minister
Verification by DSM
Working Draft
Approval by Minister
Verification by DSM
Working Draft
68
PARTICIPATION AND COMPOSITION OF COMMITTEES
GOVERNMENT AGENCIES
PROFESSIONAL BODIES
RESEARCH ORGANISATIONS
CONSUMER ASSOCIATIONS
INDUSTRIES
69
TRANSPARENCY IN DEVELOPMENT OF MS
70
Summary
• A standard might simply be defined as 'a set of rules
for ensuring quality'.
• Standards improve software quality by adopting
highest professional procedures
• There are several benefits for using standards
• Several organizations produce different standards
• Certification is important to ensure that standard has
been applied correctly and adequately