ISO/IEC 16350:2015
(Main)Information technology — Systems and software engineering — Application management
Information technology — Systems and software engineering — Application management
ISO 16350:2015 establishes a common framework for application management processes with well-defined terminology that can be referenced by the software industry. It contains processes, activities, and tasks that apply during the stage of operation and use from the point of view of the supplier organization that enhances, maintains, and renews the application software and the software-related products such as data-structures, architecture, designs, and other documentation. It applies to the supply, maintenance, and renewal of applications, whether performed internally or externally with respect to the organization that uses the applications.
Technologies de l'information — Gestion d'application — Exigences pour la gestion d'application
General Information
Standards Content (Sample)
INTERNATIONAL ISO/IEC
STANDARD 16350
First edition
2015-08-01
Information technology — Systems
and software engineering —
Application management
Technologies de l’information — Gestion d’application — Exigences
pour la gestion d’application
Reference number
©
ISO/IEC 2015
© ISO/IEC 2015, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. +41 22 749 01 11
Fax +41 22 749 09 47
copyright@iso.org
www.iso.org
ii © ISO/IEC 2015 – All rights reserved
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
1.1 General . 1
1.2 Applicability . 4
1.2.1 Audience. 4
1.2.2 Field of application . 5
1.3 Limitations . 5
2 Conformance . 6
2.1 Intended usage . 6
2.2 Full conformance. 6
2.2.1 General. 6
2.2.2 Full conformance to outcomes . 6
2.2.3 Full conformance to tasks . 6
2.3 Tailored conformance . 6
3 Normative references . 7
4 Terms and definitions . 7
5 Application Management Processes .13
5.1 Application Support Processes .13
5.1.1 Use Support .13
5.1.2 Configuration Management .15
5.1.3 Application Operation Management .18
5.1.4 Continuity Management .21
5.2 Application Maintenance and Renewal Processes .23
5.2.1 Impact Analysis .23
5.2.2 Software Design .26
5.2.3 Software Construction and Integration .29
5.2.4 Software Testing .33
5.2.5 Preparation of Transfer to Production .35
5.3 Connecting Processes .37
5.3.1 Application Change Management .38
5.3.2 Software Control and Distribution .40
5.4 Management Processes .42
5.4.1 Agreement Management .42
5.4.2 Planning and Control.45
5.4.3 Quality Management .49
5.4.4 Financial Management .52
5.4.5 Supplier Management .55
5.5 Application Strategy Processes .58
5.5.1 Analysis of Developments in IT .58
5.5.2 Customer Organizations Analysis .59
5.5.3 Customer Environment Analysis .60
5.5.4 Application Life Cycle Management .62
5.5.5 Application Portfolio Management .63
5.6 Application Management Organization Strategy Processes .65
5.6.1 Account and Market Definition .65
5.6.2 Capabilities Definition .66
5.6.3 Technology Definition .68
5.6.4 Sourcing Definition .69
5.6.5 Service Delivery Definition .71
Annex A (informative) Explanatory statements .75
Annex B (normative) Tailoring Process .77
© ISO/IEC 2015 – All rights reserved iii
Annex C (informative) Process Reference Model for assessment purposes .79
Annex D (informative) Relationship to ISO/IEC 15504-8:2012 .81
Annex E (informative) References made to ISO/IEC 20000-1 and ISO/IEC 12207 .82
Bibliography .85
iv © ISO/IEC 2015 – All rights reserved
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work. In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights.
Details of any patent rights identified during the development of the document will be in the Introduction
and/or on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical Barriers
to Trade (TBT) see the following URL: Foreword - Supplementary information.
The committee responsible for this document is ISO/IEC JTC 1, Information technology, Subcommittee
SC 7, Software and systems engineering.
Its contents are based on the Dutch national standard, NEN 3434, Information technology — Application
management — Requirements for application management, which will be withdrawn after publication of
this International Standard.
© ISO/IEC 2015 – All rights reserved v
Introduction
Applications can live for decades. Applications that were developed twenty or thirty years ago are still
being used and most applications that have recently been developed will still be in use for the many
years to come. During their life cycle, these applications and the related data structures will have to be
monitored, enhanced, and sometimes renewed or renovated. This means that very often, in total, more
money and work is needed for the stage of operation and use than for the initial development stage.
But the emphasis very often lies at the initial development stage; there are various frameworks and
(international) standards covering initial application development. For the stage of operation and use,
there are little frameworks and standards. This International Standard has been developed to fill this gap.
initial
Stage of operation
development
anduse
Figure 1 — Stage of the lifecycle in scope
The initial development of applications usually takes place in a rather protected project environment
with a relatively small amount of operational interaction with the business processes, as they are not yet
support
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.