ISO/IEC 25001:2007
(Main)Software engineering — Software product Quality Requirements and Evaluation (SQuaRE) — Planning and management
Software engineering — Software product Quality Requirements and Evaluation (SQuaRE) — Planning and management
ISO/IEC 25001:2007 provides details about the planning and management requirements associated with software product quality requirements and evaluation. While it is mainly concerned with product quality requirements and evaluation, wherever it is relevant the corresponding process requirements and evaluation activities are also discussed. ISO/IEC 25001:2007 aims to clarify the requirements which should be identified by the organization in order to ensure the success of specifying quality requirements and executing the evaluation. ISO/IEC 25001:2007 is intended to be used in conjunction with the other parts of the SQuaRE series (ISO/IEC 25000-ISO/IEC 25051) of International Standards, and with ISO/IEC 14598 and ISO/IEC 9126-1 until superseded by the ISO/IEC 25000 series of International Standards. ISO/IEC 25001:2007 complies with the technical processes identified in ISO/IEC 15288 related to quality requirements definition and analysis.
Ingénierie du logiciel — Exigences de qualité et évaluation du produit logiciel (SQuaRE) — Planification et gestion
General Information
Relations
Standards Content (Sample)
INTERNATIONAL ISO/IEC
STANDARD 25001
First edition
2007-02-01
Software engineering — Software product
Quality Requirements and Evaluation
(SQuaRE) — Planning and management
Ingénierie du logiciel — Exigences de qualité et évaluation du produit
logiciel (SQuaRE) — Planification et gestion
Reference number
ISO/IEC 25001:2007(E)
©
ISO/IEC 2007
---------------------- Page: 1 ----------------------
ISO/IEC 25001:2007(E)
PDF disclaimer
This PDF file may contain embedded typefaces. In accordance with Adobe's licensing policy, this file may be printed or viewed but
shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In
downloading this file, parties accept therein the responsibility of not infringing Adobe's licensing policy. The ISO Central Secretariat
accepts no liability in this area.
Adobe is a trademark of Adobe Systems Incorporated.
Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation
parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In
the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below.
© ISO/IEC 2007
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means,
electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or
ISO's member body in the country of the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Published in Switzerland
ii © ISO/IEC 2007 – All rights reserved
---------------------- Page: 2 ----------------------
ISO/IEC 25001:2007(E)
Contents
FOREWORD .iv
INTRODUCTION.v
1 SCOPE .1
2 CONFORMANCE .1
3 NORMATIVE REFERENCES .2
4 TERMS AND DEFINITIONS .3
4.1 EVALUATION ACTIVITY .3
4.2 EVALUATION GROUP .3
4.3 EVALUATION TECHNOLOGY (TECHNOLOGY USED FOR EVALUATION) .3
4.4 TECHNIQUES .3
5 EVALUATION MANAGEMENT CONCEPTS .3
6 REQUIREMENTS AND RECOMMENDATIONS FOR SOFTWARE QUALITY
REQUIREMENTS SPECIFICATION QUALITY EVALUATION .4
6.1 GENERAL .4
6.2 ORGANISATION LEVEL ACTIVITIES .5
6.3 PROJECT MANAGEMENT LEVEL ACTIVITIES .8
6.4 ANALYSIS AND USE OF EVALUATION RESULTS .9
Annex A (Informative) Quality Evaluation Project Plan Template .11
Bibliography.15
© ISO/IEC 2007 – All rights reserved iii
---------------------- Page: 3 ----------------------
ISO/IEC 25001:2007(E)
Foreword
ISO (the International Organization for Standardization) and IEC (the International
Electrotechnical Commission) form the specialized system for worldwide
standardization. National bodies that are members of ISO or IEC participate in the
development of International Standards through technical committees established by
the respective organization to deal with particular fields of technical activity. ISO and
IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also
take part in the work. In the field of information technology, ISO and IEC have
established a joint technical committee, ISO/IEC JTC 1.
International Standards are drafted in accordance with the rules given in the
ISO/IEC Directives, Part 2.
The main task of the joint technical committee is to prepare International Standards.
Draft International Standards adopted by the joint technical committee are circulated
to national bodies for voting. Publication as an International Standard requires
approval by at least 75 % of the national bodies casting a vote.
Attention is drawn to the possibility that some of the elements of
ISO/IEC 25001 may be the subject of patent rights. ISO and IEC shall not be held
responsible for identifying any or all such patent rights.
ISO/IEC 25001 makes a part of SQuaRE series of standards and was prepared by Joint
Technical Committee ISO/IEC JTC 1, Information Technology, Subcommittee SC 7, Software
and system engineering.
SQuaRE series of standards consists of the following divisions under the general title Software
product Quality Requirements and Evaluation:
— Quality Management Division (2500n),
— Quality Model Division (2501n),
— Quality Measurement Division (2502n),
— Quality Requirements Division (2503n), and
— Quality Evaluation Division (2504n).
iv © ISO/IEC 2007 – All rights reserved
---------------------- Page: 4 ----------------------
ISO/IEC 25001:2007(E)
Introduction
ISO/IEC 25001 provides details about the planning and management requirements
associated with software product quality requirements and evaluation.
While this standard is mainly concerned with product quality requirements and evaluation,
wherever it is relevant the corresponding process requirements and evaluation activities are also
discussed.
This standard aims to clarify the requirements which should be identified by the organization in
order to ensure the success of specifying quality requirements and executing the evaluation.
This International Standard is intended to be used in conjunction with the other parts of the
SQuaRE series (ISO/IEC 250nn) of standards, and with ISO/IEC 14598 and
ISO/IEC 9126-1 until superseded by the ISO/IEC 25000 series of standards.
This International Standard complies with the technical processes identified in ISO/IEC
15288 related to quality requirements definition and analysis.
Quality Model
Division
2501n
Quality
Quality
Quality
Evaluation
Requirements
Management Division
Division
Division
2500n
2504n
2503n
Quality
Measurement Division
2502n
Figure 1 — Organization of SQuaRE series of standards
Figure 1 (quoted after ISO/IEC 25000) illustrates the organisation of the SQuaRE series
representing families of standards, further called Divisions.
The Divisions within SQuaRE model are:
• ISO/IEC 2500n — Quality Management Division. The standards that form this division define all
common models, terms and definitions referred further by all other standards from SQuaRE series.
Referring paths (guidance through SQuaRE documents) and high level practical suggestions in
applying proper standards to specific application cases offer help to all types of users. The division
© ISO/IEC 2007 – All rights reserved v
---------------------- Page: 5 ----------------------
ISO/IEC 25001:2007(E)
also provides requirements and guidance for an evaluation group which is responsible for the
management of software product quality requirements specification and quality evaluation.
• ISO/IEC 2501n — Quality Model Division. The standard that forms this division presents a detailed
quality model including characteristics for internal, external and quality in use. Furthermore, the
internal and external software quality characteristics are decomposed into subcharacteristics.
Practical guidance on the use of the quality model is also provided.
• ISO/IEC 2502n — Quality Measurement Division. The standards that form this division include a
software product quality measurement reference model, mathematical definitions of quality
measures, and practical guidance for their application. Presented measures apply to internal
software quality, external software quality and quality in use. Quality measure elements forming
foundations for the latter measures are defined and presented,
• ISO/IEC 2503n — Quality Requirements Division. The standard that forms this division helps
specifying quality requirements. These quality requirements can be used in the process of quality
requirements elicitation for a software product to be developed or as input for an evaluation
process. The requirements definition process is mapped to technical processes defined in
ISO/IEC 15288,
• ISO/IEC 2504n — Quality Evaluation Division. The standards that form this division provide
requirements, recommendations and guidelines for software product evaluation, whether
performed by evaluators, acquirers or developers. The support for documenting a measure as an
Evaluation Module is also presented.
vi © ISO/IEC 2007 – All rights reserved
---------------------- Page: 6 ----------------------
INTERNATIONAL STANDARD ISO/IEC 25001:2007(E)
Software engineering — Software product Quality
Requirements and Evaluation (SQuaRE) — Planning and
management
1 Scope
This International Standard provides requirements and recommendations for an organization responsible
for implementing and managing the software product quality requirements specification and
software quality evaluation activities through the provision of technology, tools, experiences and
management skills.
The role of the evaluation group includes motivating people and training them for the
requirements specification activities and the evaluation activities, preparing appropriate
documents, identification or development of required methods, and responding to queries on
relevant technologies.
Technology management is related to the planning and management of a software quality
requirements specification and evaluation process, measures and tools. This includes the
management of development, acquisition, standardization, control, transfer and feedback of
requirements specification and evaluation technology experiences within the organisation.
The intended users of ISO/IEC 25001 are those responsible for:
— managing technologies used for requirements specification and evaluation execution,
— specifying software product quality requirements,
— supporting software product quality evaluation,
— managing software development organisations,
as well as those in a quality assurance function. It is also applicable to managers
involved in other software related activities.
2 Conformance
In order to conform to ISO/IEC 25001, an organization shall apply requirements from Clause 6
giving the reasons for any exclusion, or describe its own recommendations and provide a
mapping to the original requirements.
© ISO/IEC 2007 – All rights reserved 1
---------------------- Page: 7 ----------------------
ISO/IEC 25001:2007(E)
3 Normative references
The following referenced documents are indispensable for the application of this document.
For dated references, only the edition cited applies. For undated references, the latest edition of
the referenced document (including any amendments) applies.
ISO/IEC 25000, Software engineering — Software product Quality Requirements and
Evaluation (SQuaRE) — Guide to SQuaRE
ISO/IEC 25020, Software and System Engineering — Software product Quality Requirements and
Evaluation (SQuaRE) — Quality measurement — Measurement reference model and guide
ISO/IEC 25030, Software engineering — Software product Quality Requirements and Evaluation
(SQuaRE) — Quality requirements
ISO/IEC 25051, Software engineering — Software product Quality Requirements and
Evaluation (SQuaRE) — Requirements for quality of Commercial Off-The-Shelf (COTS)
software product and instructions for testing
ISO/IEC 15288, Systems engineering — System life cycle processes
2 © ISO/IEC 2007 – All rights reserved
---------------------- Page: 8 ----------------------
ISO/IEC 25001:2007(E)
4 Terms and definitions
For the purpose of this document, the terms and definitions given in ISO/IEC 25000 and the
following apply.
4.1
evaluation activity
assessment of a software product against identified and applicable quality characteristics
performed using applicable techniques or methods
4.2
evaluation group
organization responsible for specifying the software quality requirements as well as managing
and implementing the software quality evaluation activities through the provision of technology,
tools, experiences, and management skills
4.3
evaluation technology (technology used for evaluation)
techniques, processes, tools, measures and relevant technical information used for evaluation
NOTE These include internal, external or quality in use measures or specific evaluation processes designed
for developers, acquirers or independent evaluators.
4.4
techniques
methods and skills required to carry out a specific activity
5 Evaluation management concepts
The ISO/IEC 25001 is applicable to the evaluation group, which provides the organisation-wide
support to all projects in software development, software acquisition and third party evaluation
organisations (see Table 1).
DEVELOPED SOFTWARE ACQUIRED SOFTWARE
Development Activities Evaluation Activities Acquisition Activities
Evaluation Activities
The "deliverables" are Evaluation of Evaluate the product
Purchase of the
dependent upon the specific to be acquired
commercial-off-the-shelf
chosen life cycle (see "deliverables" applying appropriate
(COTS) software
ISO/IEC 15288) e.g. (output of the SQuaRE series
products
System Requirements project) e.g. standards
Specification, System Design
Systems Design Review
Specification
Table 1 - Software quality evaluation activities
© ISO/IEC 2007 – All rights reserved 3
---------------------- Page: 9 ----------------------
ISO/IEC 25001:2007(E)
The main responsibilities of the evaluation group are:
• leading and management of software quality evaluation related activities,
• leading the identification and definition of quality requirements,
• execution of quality requirements specification and quality evaluation projects,
• development of criteria for setting benchmarks for the evaluation,
• collection and analysis of evaluation group activities results,
• dissemination of results of evaluation group activities within the organisation,
• acquisition of relevant technical information,
• acquisition of evaluation technology,
• development of the proprietary (company-specific) standards and tools,
• evaluation of effectiveness and quality of software acquisition and development,
• facilitation of technology transfer.
NOTE The evaluation group can be external or internal with respect to the organisation which is
evaluating the software.
6 Requirements and recommendations for software quality requirements
specification and quality evaluation
6.1 General
The organisation shall develop policies and plans for quality requirements specification and
quality evaluation activities, which also includes the roles of the evaluation group.
For the requirements specification purposes, ISO/IEC 25030 shall be applied. For the evaluation
execution purposes, ISO/IEC 25040, 41, 42, 43 and 44 shall be applied. Until this series
of standards is published the ISO/IEC 14598 series is applicable.
For the requirements specification, quality measurement and evaluation execution purposes,
ISO/IEC 25020, 21, 22, 23 and 24 shall be applied. Until this series of standards is published
the ISO/IEC 9126 series is applicable.
The Quality Evaluation Project Plan (template example: Annex A) for an evaluation project shall
identify and describe activities applicable in the steps below:
• specifying software quality requirements,
• defining the objectives of the software quality evaluation,
• establishing evaluation requirements
• specifying the evaluation,
• designing the evaluation,
• executing the evaluation,
• analysing results.
4 © ISO/IEC 2007 – All rights reserved
---------------------- Page: 10 ----------------------
ISO/IEC 25001:2007(E)
The software quality evaluation shall satisfy pre-defined criteria, including the following:
• conformance to international, national or internal standards (if applicable),
• ability to quantify and clearly present traceable results,
• use of suitable and effective technology and best practices.
6.2 Organisation level activities
Any organisation that develops, acquires or evaluates software shall identify the associated
software quality evaluation responsibilities and incorporate them into an organisation policy.
6.2.1 Organisation environment management
The organization shall implement the following in accordance with applicable organization
policies and procedures:
• prepare software quality evaluation plan and procedures that are consistent with
organisation strategic and organization quality policies,
• define the roles, responsibilities and authorities to facilitate strategic management of
software quality,
• define target values for software quality evaluation,
• conduct periodic reviews of the software quality model applied in software quality
requirements and evaluation projects.
NOTE The above requirements are based on clause 5.3 of ISO/IEC 15288.
6.2.2 Resources management
The organization shall implement the following in accordance with applicable organization
policies and procedures:
• determine and provide the resource infrastructure support needed to execute software
quality requirements specification and evaluation project,
• maintain and manage the pool of personnel necessary to staff ongoing projects,
• manage schedule conflicts that may result from executing multiple project in parallel.
6.2.3 Planning the use and improvement of the quality requirements specification and quality evaluation
technology
An overall plan for improving the
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.