Systems and software engineering -- Lifecycle profiles for Very Small Entities (VSEs)

Titre manque

General Information

Status

Published

ICS

35.080 - Software

Technical Committee

ISO/IEC JTC 1/SC 7 - Software and systems engineering

Drafting Committee

ISO/IEC JTC 1/SC 7/WG 24 - Systems and software standards for Very Small Entities

Current Stage

Ref Project

Buy Standard

Draft

ISO/IEC DIS 29110-4-2:Version 25-apr-2020 - Systems and software engineering -- Lifecycle profiles for Very Small Entities (VSEs)

English language

17 pages

sale 15% off

Preview

sale 15% off

Preview

Draft

ISO/IEC PRF 29110-4-2 - Systems and software engineering -- Lifecycle profiles for Very Small Entities (VSEs)

English language

16 pages

sale 15% off

Preview

sale 15% off

Preview

Standards Content (sample)

DRAFT INTERNATIONAL STANDARD
ISO/IEC DIS 29110-4-2
ISO/IEC JTC 1/SC 7 Secretariat: BIS
Voting begins on: Voting terminates on:
2019-09-13 2019-12-06
Systems and software engineering — Lifecycle profiles for
Very Small Entities (VSEs) —
Part 4-2:
Software engineering — Profile specifications:
Organizational management profile group
ICS: 35.080
THIS DOCUMENT IS A DRAFT CIRCULATED
FOR COMMENT AND APPROVAL. IT IS
THEREFORE SUBJECT TO CHANGE AND MAY
NOT BE REFERRED TO AS AN INTERNATIONAL
STANDARD UNTIL PUBLISHED AS SUCH.
IN ADDITION TO THEIR EVALUATION AS
BEING ACCEPTABLE FOR INDUSTRIAL,
This document is circulated as received from the committee secretariat.
TECHNOLOGICAL, COMMERCIAL AND
USER PURPOSES, DRAFT INTERNATIONAL
STANDARDS MAY ON OCCASION HAVE TO
BE CONSIDERED IN THE LIGHT OF THEIR
POTENTIAL TO BECOME STANDARDS TO
WHICH REFERENCE MAY BE MADE IN
Reference number
NATIONAL REGULATIONS.
ISO/IEC DIS 29110-4-2:2019(E)
RECIPIENTS OF THIS DRAFT ARE INVITED
TO SUBMIT, WITH THEIR COMMENTS,
NOTIFICATION OF ANY RELEVANT PATENT
RIGHTS OF WHICH THEY ARE AWARE AND TO
PROVIDE SUPPORTING DOCUMENTATION. ISO/IEC 2019
---------------------- Page: 1 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2019

be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting

on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address

below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Fax: +41 22 749 09 47
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii © ISO/IEC 2019 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
Contents Page

Foreword ........................................................................................................................................................................................................................................iv

Introduction ..................................................................................................................................................................................................................................v

1 Scope ................................................................................................................................................................................................................................. 1

2 Normative references ...................................................................................................................................................................................... 1

3 Terms, definitions and abbreviated terms ................................................................................................................................ 1

3.1 Terms and definitions ....................................................................................................................................................................... 1

3.2 Abbreviated terms ............................................................................................................................................................................... 2

4 Conformance ............................................................................................................................................................................................................. 2

4.1 Conformance situations .................................................................................................................................................................. 2

4.2 Process conformance ......................................................................................................................................................................... 3

5 Naming, diagramming and definition conventions .......................................................................................................... 3

6 Profile specification and its conformance with base standards ......................................................................... 3

6.1 Minimal conditions for Organisational Management profile use ................................................................ 3

7 Organisational Management profile specifications ......................................................................................................... 3

7.1 Introduction .............................................................................................................................................................................................. 3

7.2 Organisational Management process specification ................................................................................................. 4

7.2.1 Organisational Management requirements .............................................................................................. 4

7.3 Resource Management process specification............................................................................................................... 4

7.3.1 Resource Management requirements............................................................................................................ 4

7.4 Process Management process specification .................................................................................................................. 4

7.4.1 Process Management requirements ............................................................................................................... 4

7.5 Project Portfolio Management process specification ............................................................................................ 5

7.5.1 Project Portfolio Management requirements ......................................................................................... 5

Annex A (normative) Organisational Management profile base document references..................................6

Annex B (informative) Organisational Management Profile PRM ......................................................................................12

Bibliography .............................................................................................................................................................................................................................17

© ISO/IEC 2019 – All rights reserved iii
---------------------- Page: 3 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
Foreword

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical

Commission) form the specialized system for worldwide standardization. National bodies that are

members of ISO or IEC participate in the development of International Standards through technical

committees established by the respective organization to deal with particular fields of technical

activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international

organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the

work. In the field of information technology, ISO and IEC have established a joint technical committee,

ISO/IEC JTC 1.

The procedures used to develop this document and those intended for its further maintenance are

described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for

the different types of document should be noted. This document was drafted in accordance with the

editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/directives).

Attention is drawn to the possibility that some of the elements of this document may be the subject

of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent

rights. Details of any patent rights identified during the development of the document will be in the

Introduction and/or on the ISO list of patent declarations received (see www .iso .org/patents).

Any trade name used in this document is information given for the convenience of users and does not

constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and

expressions related to conformity assessment, as well as information about ISO's adherence to the

World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www .iso

.org/iso/foreword .html.

Any feedback or questions on this document should be directed to the user’s national standards body. A

complete listing of these bodies can be found at www .iso .org/members .html.

This document was prepared by Technical Committee ISO/IEC JTC 1, Information technology,

Subcommittee SC 7, Software and systems engineering.

A list of all parts in the ISO/IEC 29110 series is available on the ISO and IEC website.

iv © ISO/IEC 2019 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
Introduction

Very Small Entities (VSEs) around the world are contributing to valuable products and services. For the

purpose of ISO/IEC 29110, a Very Small Entity (VSE) is an enterprise, an organisation, a department

or a project having up to 25 people. Since many VSEs develop and/or maintain system elements and

software components used in systems, or sold to be used by others, a recognition of VSEs as suppliers of

high-quality products is required.

According to the Organization for Economic Co-operation and Development (OECD) SME and

Entrepreneurship Outlook 2019 report, ‘Small and medium-sized enterprises (SMEs) and

entrepreneurship are essential drivers of economic and social well-being. Representing 99% of all

businesses, generating about 60% of employment and totalling between 50% and 60% of value added

in the OECD area’. The challenge facing OECD governments is to provide a business environment that

supports the competitiveness of this large heterogeneous business population and that promotes a

vibrant entrepreneurial culture.

From studies and surveys conducted, it is clear that the majority of International Standards do not

address the needs of VSEs. Implementation of and conformance with these standards is difficult, if not

impossible. Subsequently VSEs have no, or very limited, ways to be recognized as entities that produce

quality systems/system elements including software in their domain. Therefore, VSEs are often cut off

from some economic activities.

It has been found that VSEs find it difficult to relate International Standards to their business needs

and to justify the application of standards to their business practices. Most VSEs can neither afford the

resources, in terms of number of employees, expertise, budget and time, nor do they see a net benefit

in establishing systems or software lifecycle processes. To rectify some of these difficulties, a set of

guides has been developed according to a set of VSE characteristics. The guides are based on subsets of

appropriate standards processes, activities, tasks, and outcomes, referred to as Profiles. The purpose

of a profile is to define a subset of International Standards relevant to the VSEs’ context; for example,

[2]

processes, activities, tasks, and outcomes of ISO/IEC/IEEE 12207 for software; and processes,

[3]

activities, tasks, and outcomes of ISO/IEC/IEEE 15288 for systems; and information products

[4]
(documentation) of ISO/IEC/IEEE 15289 for software and systems.

VSEs can achieve recognition through implementing a profile and by being audited against

ISO/IEC 29110 specifications.

The ISO/IEC 29110 series of standards and technical reports can be applied at any phase of system or

software development within a lifecycle. This series of standards and technical reports is intended to

be used by VSEs that do not have experience or expertise in adapting/tailoring ISO/IEC/IEEE 12207 or

ISO/IEC/IEEE 15288 standards to the needs of a specific project. VSEs that have expertise in adapting/

tailoring ISO/IEC/IEEE 12207 or ISO/IEC/IEEE 15288 are encouraged to use those standards instead of

ISO/IEC 29110.

ISO/IEC 29110 is intended to be used with any lifecycles such as: waterfall, iterative, incremental,

evolutionary or agile.

Systems, in the context of the ISO/IEC 29110 series, are typically composed of hardware and software

components.

ISO/IEC 29110 series, targeted by audience, has been developed to improve system or software and/or

service quality, and process performance. See Table 1.
© ISO/IEC 2019 – All rights reserved v
---------------------- Page: 5 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
Table 1 — ISO/IEC 29110 target audience
ISO/IEC 29110 Title Target audience
ISO/IEC 29110-1 Overview VSEs and their customers, assessors,
standards producers, tool vendors
and methodology vendors.
ISO/IEC 29110-2 Framework for profile Profile producers, tool vendors and
preparation methodology vendors.
Not intended for VSEs.

ISO/IEC 29110-3 Certification and assessment VSEs and their customers, assessors,

guidance accreditation bodies.
ISO/IEC 29110-4 Profile specifications VSEs, customers, standards produc-
ers, tool vendors and methodology
vendors.
ISO/IEC 29110-5 Management, engineering and VSEs and their customers.
service delivery guidelines
ISO/IEC 29110-6 Profile specifications VSEs, customers, standards produc-
ers, tool vendors and methodology
vendors.
ISO/IEC 29110-7 Specific profile guidelines VSEs and their customers.

If a new profile is needed, ISO/IEC 29110-4 or ISO/IEC 29110-6 and or ISO/IEC TR 29110-7

ISO/IEC TR 29110-5 can be developed with minimal impact to existing documents.

ISO/IEC 29110-1 defines the terms common to the Set of ISO/IEC 29110 Documents. It introduces

processes, lifecycle and standardization concepts, the taxonomy (catalogue) of ISO/IEC 29110 profiles

and the ISO/IEC 29110 series. It also introduces the characteristics and needs of a VSE, and clarifies the

rationale for specific profiles, documents, standards and guides.

ISO/IEC 29110-2 introduces the concepts for systems and software engineering profiles for VSEs. It

establishes the logic behind the definition and application of profiles. For standardized profiles, it

specifies the elements common to all profiles (structure, requirements, conformance, assessment). For

domain-specific profiles (profiles that are not standardized and developed outside of the ISO process),

it provides general guidance adapted from the definition of standardized profiles.

ISO/IEC 29110-3 defines certification schemes, assessment guidelines and compliance requirements

for process capability assessment, conformity assessments, and self-assessments for process

improvements. ISO/IEC 29110-3 also contains information that can be useful to developers of

certification and assessment methods and developers of certification and assessment tools.

ISO/IEC 29110-3 is addressed to people who have direct involvement with the assessment process, e.g.

the auditor, certification and accreditation bodies and the sponsor of the audit, who need guidance on

ensuring that the requirements for performing an audit have been met.

ISO/IEC 29110-4-m provides the specification for all profiles in one profile group that are based on

subsets of appropriate standards elements.

ISO/IEC TR 29110-5-m-n provides a management and engineering guide for each profile in one

profile group.

ISO/IEC 29110-6-m provides the specification for specific profiles that are based on subsets of

appropriate standards elements.

ISO/IEC TR 29110-7-x provides a guide for each profile in the specific profile group.

This document provides the specifications for the Organisational Management profile of the

Management profile group. It is based on subsets of appropriate standards elements.

vi © ISO/IEC 2019 – All rights reserved
---------------------- Page: 6 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)

Figure 1 describes the ISO/IEC 29110 International Standards (IS) and Technical Reports (TR) and

positions the parts within the framework of reference. Overview, assessment guide, management and

engineering guide are available from ISO as freely available Technical Reports (TR). The Framework

document, profile specifications and certification schemes are published as International Standards (IS).

Figure 1 — ISO/IEC 29110 series of standard
© ISO/IEC 2019 – All rights reserved vii
---------------------- Page: 7 ----------------------
DRAFT INTERNATIONAL STANDARD ISO/IEC DIS 29110-4-2:2019(E)
Systems and software engineering — Lifecycle profiles for
Very Small Entities (VSEs) —
Part 4-2:
Software engineering — Profile specifications:
Organizational management profile group
1 Scope

The ISO/IEC 29110 series is applicable to Very Small Entities (VSEs). VSEs are enterprises, organisations,

departments or projects having up to 25 people. The lifecycle processes described in the ISO/IEC 29110

series are not intended to preclude or discourage their use by larger organisations than VSEs.

The lifecycle processes defined in the ISO/IEC 29110 series can be used by VSEs when using, as well

as when creating and supplying, a system or software. They can be applied at any level in a system’s

or software’s structure and at any stage in the lifecycle. The processes described in the ISO/IEC 29110

series are not intended to preclude or discourage the use of additional processes that VSEs find useful.

This document is not intended to preclude the use of different life cycles such as: waterfall, iterative,

incremental, evolutionary or agile.

This document provides a profile specification for the Organisational Management profile. The

Organisational Management profile applies to VSEs involved in systems engineering and/or software

engineering development.

This document provides the normative and informative links to the subset of ISO/IEC/IEEE 12207

and ISO 9001 organisational, resources, processes and project portfolio process elements from the

organisational perspective.
2 Normative references

The following documents are referred to in the text in such a way that some of their content constitutes

requirements of this document. Although this profile is partly based on requirements from ISO 9001,

use of the profile does not result in a Quality Management System conformant to ISO 9001. For dated

references, only the edition cited applies. For undated references, the latest edition of the referenced

document (including any amendments) applies.

NOTE The relationship between ISO 9001 and ISO/IEC/IEEE 12207:2017 has been presented in

ISO/IEC/IEEE 90003.

ISO/IEC 29110-2-1:2015, Software engineering — Lifecycle profiles for Very Small Entities (VSEs) —

Part 2-1: Framework and taxonomy

ISO/IEC/IEEE 12207:2017, Systems and software engineering — Software life cycle processes

ISO 9001:2015, Quality management systems — Requirements
3 Terms, definitions and abbreviated terms
3.1 Terms and definitions

For the purposes of this document, the terms and definitions given in ISO/IEC 29110-2-1:2015 apply.

© ISO/IEC 2019 – All rights reserved 1
---------------------- Page: 8 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)

ISO and IEC maintain terminological databases for use in standardisation at the following addresses:

— IEC Electropedia: available at http: //www .electropedia .org/
— ISO Online browsing platform: available at http: //www .iso .org/obp
3.1.1
Organisational management
task and responsibilities to direct and control an organisation
3.1.2
Organisational management profile

profile targeted at VSEs to provide them with additional organisational management guidance

[SOURCE: ISO/IEC TR 29110-1]
3.1.3
Organisational management profile group

profile group that provides additional organisational management profile and guidance for systems

engineering and software engineering profiles and guidelines
[SOURCE: ISO/IEC TR 29110-1]
3.1.4
Small and medium-sized enterprise
enterprise with less than 250 persons employed
[SOURCE: OECD 2019]
3.2 Abbreviated terms
MF Measurement Framework
OM Organisational Management
PAM Process Assessment Model
PPM Project Portfolio Management
PSM Process Management
RM Resource Management
SME Small and medium-sized enterprise
VSE Very Small Entity
4 Conformance
4.1 Conformance situations

This document can be implemented by organisations or projects implementing and using the processes

and products required by this part of ISO/IEC 29110. Therefore, organisations can claim conformance

to this document.
There are two types of conformance situations:

— Process conformance: Conformance to the requirements in the process part of the profile

specification;
2 © ISO/IEC 2019 – All rights reserved
---------------------- Page: 9 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)

— Product conformance: Conformance to the requirements in the product part of the profile

specification.

Conformance may be interpreted differently for various situations. The relevant situation shall be

identified in the claim of conformance.

Conformance can be attested by a third party. It can be mandated as part of procurement and

contractual processes.
4.2 Process conformance

A VSE can claim conformance to the process part of the profile if it meets all the mandatory profile

process requirements as identified in its specification Clause 7, and the associated properties and

requirements as described in the base standards when applicable.
NOTE Requirements of this document are mandatory and use the word "shall".
5 Naming, diagramming and definition conventions

Conventions for naming, diagramming, describing and defining Profiles are defined in

ISO/IEC 29110-2-1:2015.
6 Profile specification and its conformance with base standards
6.1 Minimal conditions for Organisational Management profile use

To use the Organisational Management Profile, it is assumed that the VSE already fulfils the following

conditions:
a) There is a group of up to 25 people call itself a VSE.
b) There is or will be at least one productive process deployed in the VSE.
c) There is or will be a Project Management process deployed in the VSE.
7 Organisational Management profile specifications
7.1 Introduction

This clause contains the specification of the standardised profile requirements. It contains the

specification for the following profile elements:
— In clause 7.2 Organisational Management process;
— In clause 7.3 Resource Management process;
— In clause 7.4 Process Management process;
— In clause 7.5 Project Portfolio Management process;

The requirements are expressed following ISO/IEC 29110-2-1 and ISO/IEC 33004 requirements.

These requirements are the result of Organisational Management, Resource Management, Process

Management and Project Portfolio Management purpose achievement.

Annex A specifies the references between the standardized profile elements and the source standards.

Annex B gives additional information on the Process Reference Model for the Organisational Profile.

© ISO/IEC 2019 – All rights reserved 3
---------------------- Page: 10 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
7.2 Organisational Management process specification
7.2.1 Organisational Management requirements

As a result of successful implementation of the Organisational Management Process:

a) mission, vision, values and required functional areas shall be defined, communicated and

maintained;

b) functional areas and processes responsibility and authority shall be assigned;

c) a strategic plan, budget and measurable objectives shall be defined, communicated, maintained

and monitored;

d) a customer strategy focuses on enhancing customer satisfaction shall be defined, communicated,

maintained and monitored;

e) required resources needed for the VSE's operation shall be identified and made available;

f) required processes and their objectives shall be identified, communicated and monitored;

g) a risk management plan shall be defined, communicated, reviewed, maintained and monitored;

7.3 Resource Management process specification
7.3.1 Resource Management requirements
As a result of successful implementation of the Resource Management Process:

a) policies and mechanisms for resources procurement shall be defined, communicated, enhanced

and monitored;

b) the necessary competence of the VSE's personnel shall be determined and skills of personnel shall

be developed, maintained or enhanced;

c) requested and necessary human resources shall be provided to processes and to projects;

d) requested, stable, necessary and reliable infrastructure elements shall be provided or acquired to

operate the processes and the projects;
e) the infrastructure shall be maintained and controlled;

f) external providers of processes, products and services shall meet the VSE's supplier requirements;

g) conflicts in multi-project resource demands shall be resolved considering the capabilities of, and

constraints on, existing internal resources; or to be obtained from external providers;

h) an organisational repository strategy shall be defined, communicated, enhanced and monitored;

7.4 Process Management process specification
7.4.1 Process Management requirements
As a result of successful implementation of the Process Management Process:

a) process definition, training, deployment, perform, evaluation and improvement activities shall be

planned, communicated and monitored;

b) processes objectives, resources, information and documentation shall be identified, recorded,

reviewed and made available;
4 © ISO/IEC 2019 – All rights reserved
---------------------- Page: 11 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)

c) responsibilities and authorities for performing the process shall be defined, assigned and

communicated to assure the delivery of their intended outputs;

d) the required processes data shall be collected, stored, analysed, and the results shall be interpreted

and informed;

e) adherence of products, processes and activities to the applicable standards, procedures and

requirements shall be evaluated, and the results documented;

f) process data and evaluation results shall be used to support decisions and provide an objective

basis for process improvement;
7.5 Project Portfolio Management process specification
7.5.1 Project Portfolio Management requirements

As a result of successful implementation of the Project Portfolio Management Process:

a) policies and mechanisms for project portfolio management and customer relationship shall be

defined, communicated, enhanced and monitored;

b) an agreement shall be established between the VSE and the customer for developing, maintaining,

operating, packaging, delivering, and installing a product and/or a service;

c) project management accountability and authorities for a particular project shall be defined;

d) the product and/or service shall be delivered to the customer in accordance with the agreed

requirements;

e) management and technical review meetings with the customer shall be held, the status of customer

satisfaction shall be monitored, and the review results shall be made known to all affected parties;

f) risks, problems and action items resulting from reviews shall be identified, recorded and tracked

to closure;
© ISO/IEC 2019 – All rights reserved 5
---------------------- Page: 12 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
Annex A
(normative)
Organisational Management profile base document references
A.1 Introduction

This annex establishes the reference between the standardised profile elements and the source

standards, in Tables A.1 and A.2. The explanation of the column names and contents is stated in

ISO/IEC 29110-2-1:2015, clauses 6 and 7.

Some profile elements are not included in the tables. Although explicit reference is not made in the

body of this document to activities, tasks and work products, more information can be found in

ISO/IEC TR 29110-5-2-1:2011.
A.2 Profile requirements definition and composition references
A.2.1 OM Process – Organisational Management
Table A.1 — OM Process - Profile Requirements mapping to base standards
Base
Profile re-
Profile requirement Source doc. ID standard Base standard name
quirement ID
mission, vision, values
and required func-
a) tional areas shall be
defined, communicat-
ed and maintained;
b) Responsibility, accountability, and
ISO/IEC/ authority within life cycle policies,
6.2.1.2
IEEE 12207:2017 processes, models, and procedures
functional areas and
are defined
processes responsibil-
The organization shall
ity and authority shall
be assigned; h) engaging, directing and support-
ISO 9001: 2015 5.1.1
ing persons to contribute to the
effectiveness of the quality manage-
ment system;
b) Projects are identified.
c) Resources and budgets for each
a strategic plan,
project are allocated.
budget and measur-
e) Projects meeting agreement
able objectives shall ISO/IEC /IEEE
c) 6.2.3.2
and stakeholder requirements are
be defined, communi- 12207:2017
sustained.
cated, maintained and
monitored;
f) Projects not meeting agreement or
satisfying stakeholder requirements
are redirected or terminated
6 © ISO/IEC 2019 – All rights reserved
---------------------- Page: 13 ----------------------
ISO/IEC DIS 29110-4-2:2019(E)
Table A.1 (continued)
Base
Profile re-
Profile requirement Source doc. ID standard Base standard name
quirement ID
a) Business venture opportunities,
ISO/IEC/IEEE
6.2.3.2 investments or necessities are quali-
12207:2017
fied and prioritized.
a customer strategy
ISO/IEC/ b) Quality evaluation
...

INTERNATIONAL ISO/IEC
STANDARD 29110-4-2
First edition
Systems and software engineering —
Lifecycle profiles for Very Small
Entities (VSEs) —
Part 4-2:
Software engineering: Profile
specifications: Organizational
management profile group
PROOF/ÉPREUVE
Reference number
ISO/IEC 29110-4-2:2021(E)
ISO/IEC 2021
---------------------- Page: 1 ----------------------
ISO/IEC 29110-4-2:2021(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2021

be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting

on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address

below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii PROOF/ÉPREUVE © ISO/IEC 2021 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/IEC 29110-4-2:2021(E)
Contents Page

3 Terms, definitions and abbreviated terms ................................................................................................................................ 1

3.1 Terms and definitions ....................................................................................................................................................................... 1

3.2 Abbreviated terms ............................................................................................................................................................................... 2

4.1 Conformance situations .................................................................................................................................................................. 2

4.2 Process conformance ......................................................................................................................................................................... 3

5 Naming, diagramming and definition conventions .......................................................................................................... 3

6 Minimal conditions for organizational management profile use ...................................................................... 3

7 Organizational management profile specifications ......................................................................................................... 3

7.1 General ........................................................................................................................................................................................................... 3

7.2 Organizational management process requirements .............................................................................................. 3

7.3 Resource management process requirements ............................................................................................................ 4

7.4 Process management process requirements ................................................................................................................ 4

7.5 Project portfolio management process requirements .......................................................................................... 4

Annex A (informative) Organizational management profile base document references ..............................6

Annex B (informative) Organizational management profile PRM ......................................................................................12

© ISO/IEC 2021 – All rights reserved PROOF/ÉPREUVE iii
---------------------- Page: 3 ----------------------
ISO/IEC 29110-4-2:2021(E)
Foreword

ISO (the International Organization for Standardization) and IEC (the International Electrotechnical

Commission) form the specialized system for worldwide standardization. National bodies that

are members of ISO or IEC participate in the development of International Standards through

technical committees established by the respective organization to deal with particular fields of

technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other

international organizations, governmental and non-governmental, in liaison with ISO and IEC, also

take part in the work.

The procedures used to develop this document and those intended for its further maintenance are

described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for

the different types of document should be noted. This document was drafted in accordance with the

editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/ directives).

Attention is drawn to the possibility that some of the elements of this document may be the subject

of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent

rights. Details of any patent rights identified during the development of the document will be in the

Introduction and/or on the ISO list of patent declarations received (see www .iso .org/ patents) or the IEC

list of patent declarations received (see patents.iec.ch).

Any trade name used in this document is information given for the convenience of users and does not

constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and

expressions related to conformity assessment, as well as information about ISO's adherence to the

World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www .iso .org/

iso/ foreword .html.

This document was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology,

Subcommittee SC 7, Software and systems engineering.
A list of all parts in the ISO/IEC 29110 series can be found on the ISO website.

Any feedback or questions on this document should be directed to the user’s national standards body. A

complete listing of these bodies can be found at www .iso .org/ members .html.
iv PROOF/ÉPREUVE © ISO/IEC 2021 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/IEC 29110-4-2:2021(E)
Introduction

Very Small Entities (VSEs) around the world are contributing to valuable products and services. For

the purpose of the ISO/IEC 29110 series, a Very Small Entity (VSE) is an enterprise, an organisation,

a department or a project having up to 25 people. Since many VSEs develop and/or maintain system

elements and software components used in systems, or sold to be used by others, a recognition of VSEs

as suppliers of high-quality products is required.

According to the Organization for Economic Co-operation and Development (OECD) SME and

Entrepreneurship Outlook 2019 report, ‘Small and medium-sized enterprises (SMEs) and

entrepreneurship are essential drivers of economic and social well-being. Representing 99 % of all

businesses, generating about 60 % of employment and totalling between 50 % and 60 % of value added

in the OECD area’. The challenge facing OECD governments is to provide a business environment that

supports the competitiveness of this large heterogeneous business population and that promotes a

vibrant entrepreneurial culture.

From studies and surveys conducted, it is clear that the majority of International Standards do not

address the needs of VSEs. Implementation of and conformance with these standards is difficult, if not

impossible. Subsequently VSEs have no, or very limited, ways to be recognized as entities that produce

quality systems/system elements including software in their domain. Therefore, VSEs are often cut off

from some economic activities.

It has been found that VSEs find it difficult to relate International Standards to their business needs

and to justify the application of standards to their business practices. Most VSEs can neither afford the

resources, in terms of number of employees, expertise, budget and time, nor do they see a net benefit

in establishing systems or software lifecycle processes. To rectify some of these difficulties, a set of

guides has been developed according to a set of VSE characteristics. The guides are based on subsets of

appropriate standards processes, activities, tasks, and outcomes, referred to as Profiles. The purpose

of a profile is to define a subset of International Standards relevant to the VSEs’ context; for example,

processes, activities, tasks, and outcomes of ISO/IEC/IEEE 12207 for software; and processes, activities,

tasks, and outcomes of ISO/IEC/IEEE 15288 for systems; and information products (documentation) of

ISO/IEC/IEEE 15289 for software and systems.

VSEs can achieve recognition through implementing a profile and by being audited against

ISO/IEC 29110 specifications.

The ISO/IEC 29110 series can be applied at any phase of system or software development within a

lifecycle. This series is intended to be used by VSEs that do not have experience or expertise in adapting/

tailoring ISO/IEC/IEEE 12207 or ISO/IEC/IEEE 15288 standards to the needs of a specific project. VSEs

that have expertise in adapting/tailoring ISO/IEC/IEEE 12207 or ISO/IEC/IEEE 15288 are encouraged

to use those standards instead of ISO/IEC 29110.

The ISO/IEC 29110 series is intended to be used with any lifecycles such as: waterfall, iterative,

incremental, evolutionary or agile. The lifecycle processes described in the ISO/IEC 29110 series are

not intended to preclude or discourage their use by larger organisations than VSEs.

The lifecycle processes defined in the ISO/IEC 29110 series can be used by VSEs when using, as well as

when creating and supplying, a system or software. They can be applied at any level in a system’s or

software’s structure and at any stage in the lifecycle.

Systems, in the context of the ISO/IEC 29110 series, are typically composed of hardware and software

components.

The ISO/IEC 29110 series, targeted by audience, has been developed to improve system or software

and/or service quality, and process performance. See Table 1.
© ISO/IEC 2021 – All rights reserved PROOF/ÉPREUVE v
---------------------- Page: 5 ----------------------
ISO/IEC 29110-4-2:2021(E)
Table 1 — ISO/IEC 29110 target audience
ISO/IEC 29110 Title Target audience
ISO/IEC TR 29110- Overview VSEs and their customers, assessors,
1 standards producers, tool vendors
and methodology vendors.
ISO/IEC 29110-2 Framework for profile Profile producers, tool vendors and
preparation methodology vendors.
Not intended for VSEs.

ISO/IEC 29110-3 Certification and assessment VSEs and their customers, assessors,

guidance accreditation bodies.
ISO/IEC 29110-4 Profile specifications VSEs, customers, standards produc-
ers, tool vendors and methodology
vendors.
ISO/ Management, engineering and VSEs and their customers.
IEC TR 29110-5 service delivery guidelines

ISO/IEC 29110-6 Specific profile specifications VSEs, customers, standards produc-

ers, tool vendors and methodology
vendors.
ISO/IEC TR 29110- Specific profile guidelines VSEs and their customers.

If a new profile is needed, ISO/IEC 29110-4 or ISO/IEC 29110-6 and/or ISO/IEC TR 29110-7

ISO/IEC TR 29110-5 can be developed with minimal impact on existing documents.

ISO/IEC TR 29110-1 defines the terms common to the ISO/IEC 29110 series. It introduces processes,

lifecycle and standardization concepts, the taxonomy (catalogue) of ISO/IEC 29110 profiles and

the ISO/IEC 29110 series. It also introduces the characteristics and needs of a VSE, and clarifies the