ISo12207-iso 15271

Welcome to
Rufus A. Turpin, CSQE, CQA, CPSA

Carpe Diem Informatics Inc.
Larry F. Jones, M.M.

CQA, CSQE, CQMgr, CPSA, FC-ITIL/ITSMf
LFJ Group Inc.

LFJ Group Inc. Quality Management Services
www.carpedieminfo.ca
Introduction to 12207
Introduction to ISO/IEC 12207

Information Technology Software Life
Cycle Processes
What is ISO/IEC 12207?

An international standard for software

related processes, activities and tasks
Scope of application is the management of
software development projects
Tailorable for any organization or project
High-level process architecture with an
inventory or processes to choose from
What is an International Standard

ISO/IEC implements a World-wide

consensus on what activities
constitute a software project!
Quality
Provides the requirements for a comprehensive

set of processes covering the software life cycle
Provides each process with access to a plando-check-act cycle through the improvement
process
Treats all quality related activities as an integral
part of the software life cycle and appropriates
these activities to relevant processes of the life
cycle
ISO/IEC 12207 Integrates Quality into the

Life Cycle
Defined at process level vs.

procedures
Prescribes continuing responsibilities
vs. things to do
Prescribes functions to be performed
vs. organizational setup
Prescribes a minimum systems
context vs. software in isolation
12207 Software Life Cycle Standard
12207 Evolution
DoD 2167
DoD 2167A
MIL 498
IEEE 1074
ISO/IEC 12207
IEEE/EIA
12207
ISO/IEC 15504

MIL 1679
Relationships Among Standards

ISO/IEC 15504
SEI CMMI
ISO/IEC 15288
Assessment Standards
ISO/IEC 12207
Life Cycle Standards

Guidance
ISO 9000-3
Quality System

ISO 9001
12207 Process Architecture

Designed to handle all types of
software projects
Organizational
Primary
Supporting
One process for each major function

One process for each party (acquirer /
supplier)
17 Processes
Process Structure
Process
Process
A set of
interrelated
activities, which
transform
inputs into
outputs
Activity
Activity
Activity
Detailed set of
tasks
Purpose
Activity
Task
Task
Task
Task
An achievable
result of the
successful
achievement
of the process
purpose

Outcomes
Task
Action with
inputs and
outputs
High level
objective of
performing the
process and the
likely outcomes
of effective
implementation
of the process.
12207 Life Cycle Processes
Management
Infrastructure
Training
Improvement
Primary [5]
Acquisition
Supply
Development
Operation
Maintenance
Support [6]
Documentation
Configuration
Management
Quality Assurance
Audit
Verification
Validation
Joint Review
Problem Resolution

Organizational [7]
12207 & IEEE Software Standards

ISO / IEC 12207
Acquisition
IEEE SW Engg Standards

1062, 1362, 1220, 1233
Supply
Development
1014, 1008, 1016, 1016.1,

830, 829, 1228
Operation
Maintenance
Primary

ISO / IEC 12207
IEEE SW Engg Standards
Supply
Quality
Assurance
730, 730.1, 1061
Configuration
Management
828, 1042
Verification &
Validation
1012
Joint Review
1028
Audit
1028
Problem
Resolution
1044, 1044.1

Documentation

ISO / IEC 12207
Management
1058, 982.1, 982,2, 1045
Infrastructure
1209, 1348, 1420, 1430
Training
Improvement

Organization
IEEE SW Engg
Standards
Relationships Between Primary and

Supporting Processes
Q u a lity
A s s u ra n c e
A c q u is itio n
V e r ific a tio n
S u p p ly
V a lid a tio n
D o c u m e n ta tio n
D e v e lo p m e n t
J o in t
R e v ie w
C o n fig u r a tio n
M anagem ent
O p e r a tio n
M a in te n a n c e
P r o b le m
R e s o lu tio n

A u d it
Roles Viewed in a 12207 Context

Employs
Acquisition Process
Supply Process
Contract
Acquirer
Contract
View
Supplier
Employs
Management Process
Management
View
Employs
Operator
Maintenance
Process
Supporting Processes
Operating
View
Development
Process
Validation
Documentation
Joint Review
Configuration Management
Audit
Quality Assurance
Problem Resolution
Verification
Management
Training
Organizational Processes
Infrastructure
User
Developer
Engineering
View
Supporting
View
Maintainer
Employer
of Supporting
Processes
Improvement

Operation Process
Employs
Manager

Application of 12207
Application of the standard ISO/IEC

12207

Areas to cover:
1. Using & Tailoring ISO/IEC 12207
2. Example Usage of ISO/IEC 12207 in
Procurement
3. Example Configuring an SDLC with
ISO/IEC 12207
The World & Software / IT ubiquitous,

complex, inter-connected with increasingly
high reliability / safety needs
Software has become an essential
commodity for our world
Software project failure / poor delivery is
the norm
Canadian IT Issues Survey Results 2002
Athabasca University & CIO Canada
Using & Tailoring the standard

ISO/IEC 12207: Context & Situation
Using & Tailoring ISO/IEC 12207

Situation: 2002 Canadian IT Issues Survey
Results
Perceptions of senior managements

IT competency has declined in the
past 3 years
There has been a deterioration in the

confidence that the managers &
Professionals have in Senior
Managements IT competency
Using & Tailoring ISO/IEC 12207

Situation: 2002 Canadian IT Issues Survey
Results
There is an urgent need to address

deficiencies in IT training and skills
development organizations had not
allocated sufficient time or money for
training
There is a very clear and urgent need to

improve the competency of Canadas senior
managers in IT management
Using & Tailoring any Standard

Why?
Why Bother with any standards?
Standards are not about rigidity, but

rather about consistency, adaptability
and agility (key tenets of innovation)
using defined degrees of freedom
(Slack Tom DeMarco)
Look at the world of other products and

their delivery & learn
What other product deliver is done
without standards?

ISO/IEC 12207 Why this one?
widely adopted and accepted; basis of
other frameworks and models
Basis of TBS Enhanced Management Framework
DND adopted as LC standard
U.S. DoD adopted as LC standard
Adopted as base Life Cycle standard for IEEE
Software Engineering Standards Collection
Base reference model for the ISO/IEC 15504
Links to ISO 9000-3 and ISO 9001


ISO/IEC 12207 Model/Picture
5.PRIMARY LIFE CYCLE PROCESSES
6.SUPPORTING LIFE CYCLE PROCESSES

6.1 Documentation
5.1 Acquisition
6.2 Configuration Management

5.2 Supply
6.3 Quality Assurance
6.4 Verification
5.4
Operation
6.5 Validation
5.2
Development
6.6 Joint Review

6.7 Audit
5.5
Maintenance
7. ORGANIZATIONAL LIFE CYCLE PROCESSES

7.1 Management
7.3 Infrastructure
7.2 Improvement
7.4 Training
6.8 Problem Resolution
Example Usage of ISO/IEC

12207 in Procurement
RFP & Evaluation Method:
Federal Government
Multi-million dollar Information

Technology based project
Looking for System Integrators (2) to

build, test and deploy the system
from a internally generated set
requirements capture
Requirements subject to changes
ranging from minor to significant
many partner organizations involved
national impact
Example Usage of ISO/IEC 12207

in Procurement - Situation

in Procurement Method of Use
mandatory requirement to address all clauses of

standard in the context of the requirement
manner of addressing each clause was specific
to Bidders approach
ISO / IEC 12207 together with ISO 9001,

ISO 9000-3 were used as an evaluation /
assessment method in the procurement
process framed to the assessment
standard ISO/IEC 15504 (SPICE)
technique: in Approach & Methodology
segment of Bid

in Procurement Results
rigorous and objective Bid evaluation
objective risk identification and

mitigation strategy and planning
clear picture of strengths and

weaknesses for the project in various
areas
Treasury Board is increasing emphasis on

the use of industry best practices with
standards such as ISO / IEC 12207 being
referred to as the framework
funding for large IT projects will be based,
in part, on the visible application of this
framework (ISO/IEC 12207)
Why ? because it is structured for
conducting assessments and audits in a
consistent and objective manner (using e.g.
ISO/IEC 15504 / ISO 9001-2000)

in Procurement General Meaning
Approach is fully scalable to any size / level

of project or organization
Focused
Objective
Repeatable
Process-oriented; Timely
Built on & connected to powerful set of
internationally-based standards &
guidelines
Supported by independently certified
assessors / auditors

in Procurement: Specific Benefits & Value
ISO/IEC 12207 - Tailoring

Identify project
environment &
characteristics
Solicit inputs
Select processes, activities
and tasks
Document tailoring
decisions and rationale
Example Configuring an SDLC

with ISO/IEC 12207 to cover

Supporting Standards ISO/IEC

15271 and IEEE/EIA 12207.1,
12207.2
Extract of ISO/IEC 12207
Application of Extract
ISO/IEC TR 15271 Information

Technology Guide for ISO/IEC 12207
IEEE/EIA 12207.1 Industry
Implementation of ISO/IEC 12207- Life
Cycle Data
IEEE/EIA 12207.2 Industry
Implementation of ISO/IEC 12207Implementation Considerations
ISO/IEC TR 16326 Software Engineering
Guide for the application of ISO/IEC
12207 to project management

with 12207:Supporting Standards

with 12207: 15271 Generic L-C
Needs Determination
Concept Definition
Demonstration
Use Acquistion Process to decide

technical / operational economic
feasibility.
U s e A c q u i st i o n , S u p p l y a n d
Development Processes to define draft
s y s t e m r e q u i r e m e n t s , d e ve l o p
protoypes, and analyse user feedback
to get proposed solutions.
Devel o p m en t Pr o cesses t o defi ne
s y s t em requirement s , s y s t em
arc hi t ec t ure,
and draft s oft ware
requirements for software items.
Development
Production
Deployment
U s e A c q u i st i o n
and S uppl y
Processes to trigger the Development
Process . Use Development Process
(fully) to build, test and integrate the
product.
Use S upporting Processes to control

and verify the replication of the products.
Development Processes to install and
check-out products.
Operations
Maintenance and Support
Retirement
Op erati o n
Pro cesses t o provi de
operational services.
M ai ntenance
P r o c e sse s f o r
maintenance and support.
Us e A cq u i sti o n and M ai n ten an ce

Processes for retirement.
End

Start

with 12207: Extract
Extract of ISO/IEC 12207
5.3.7 Software coding and testing - Tasks

5.3.8 Software integration - Tasks
5.3.7 Software coding and testing - Tasks

For each software (configuration) item
Develop & document each software unit &
database, test procedures & data for testing
Test each unit to the requirement results
documented
Update user documentation
Update test requirements for Software
Integration
Evaluate software code & test results to criteria

with 12207: Extract 1 Application
5.3.8 Software integration - Tasks

For each Software (configuration) item
Documented Integration Plan test requirements,
procedures, data, responsibilities & schedule
Trace to requirements; All documentation updates
Integration & Test Results documented
Ongoing Evaluation to established criteria
documented
Joint Reviews (in accordance with 6.6)

with 12207: Extract 2 Application
ISO/IEC 15504 Capability Levels

Optimizing
-5-
Predictable
Process
Change
Process
Continuous
Improvement
-4-
Established Measurement
-3-
Managed
-2-
-1-
Incomplete
Process
Performance
Process
Control
Process
Resource
Work Product
Management
-0LFJ Group Inc. Quality Management Services

Performed
Performance
Management
Process
Definition
Assessments
Capability
Level 0 Incomplete
Little or no evidence of any systematic achievement of any of the

defined attributes
Level 1 Performed
Scope of work and work products are understood

Work products support achievement of process outcomes
Objectives for performance of process understood and identified

Responsibilities and authorities assigned
Performance of process is managed
Requirements of specified work products are defined
Requirements for documentation and control of work products are
defined
Dependencies among controlled work products are identified
Work products are identified, documented and changes controlled
Work products are verified and adjusted to meet defined requirements
Level 2 Managed

Describe how your test environment is structured, controlled, and kept current?
To what extent are documented processes and procedures available and used for things like test
execution, problem reporting, reviews and status reporting?
What criteria are used to determine the completion and/or success of testing activities? How do
you share results with users?
Are the requirements for a software product reviewed for testability, accuracy, completeness and
consistency?
Is there a standard testing life cycle employed on your project (s)?
How are deficiencies discovered in testing identified, recorded, tracked, reported and resolved?
How is user / client feedback obtained and used as input into test and/or improvement planning?
How are estimates (time, budget, tools) arrived at, utilized, tracked, reported and documented?
How is the status of testing activities determined and tracked?
10
Are those responsible for testing trained to develop test specifications, test designs, test cases,
and test plans?

Testing Questionnaire
Information on Presenters
LFJ Group Inc.
Carpe Diem Informatics Inc.

Software Process Performance
Provides full project and organizational

support for software quality initiatives
based on international and industry
standards. Support includes quality
assurance, process definition, process
assessments and audits, risk
management, requirements
management, metrics and
measurement and problem and
change management.
Contact: Rufus A. Turpin

Ph.: 613.277.5496
Email: Rufus@Carpedieminfo.ca
Quality Management Services

Provides a broad range of Quality
Management Services in
organizational and projects
improvements (often with an IT
flavour) using international and
industry standards and best
practices.
Contact: Larry F. Jones

Ph.: 613-299-2770
Email: Joneslf@magma.ca

ISo12207-iso 15271

Enviado por

Dados do documento

Direitos autorais

Formatos disponíveis

Compartilhar este documento

Compartilhar ou incorporar documento

Opções de compartilhamento

Você considera este documento útil?

Este conteúdo é inapropriado?

Direitos autorais:

Formatos disponíveis

ISo12207-iso 15271

Enviado por

Direitos autorais:

Formatos disponíveis

Welcome to

Rufus A. Turpin, CSQE, CQA, CPSA

Larry F. Jones, M.M.

LFJ Group Inc.

Introduction to ISO/IEC 12207

What is ISO/IEC 12207?

LFJ Group Inc. Quality Management Services

An international standard for software

What is an International Standard

LFJ Group Inc. Quality Management Services

ISO/IEC implements a World-wide

Provides the requirements for a comprehensive

ISO/IEC 12207 Integrates Quality into the

Defined at process level vs.

12207 Software Life Cycle Standard

LFJ Group Inc. Quality Management Services

Relationships Among Standards

Life Cycle Standards

LFJ Group Inc. Quality Management Services

12207 Process Architecture

One process for each major function

LFJ Group Inc. Quality Management Services

12207 Life Cycle Processes

LFJ Group Inc. Quality Management Services

12207 & IEEE Software Standards

IEEE SW Engg Standards

1014, 1008, 1016, 1016.1,

12207 & IEEE Software Standards

IEEE SW Engg Standards

730, 730.1, 1061

LFJ Group Inc. Quality Management Services

12207 & IEEE Software Standards

1058, 982.1, 982,2, 1045

1209, 1348, 1420, 1430

LFJ Group Inc. Quality Management Services

Relationships Between Primary and

LFJ Group Inc. Quality Management Services

Roles Viewed in a 12207 Context

LFJ Group Inc. Quality Management Services

LFJ Group Inc. Quality Management Services

Application of the standard ISO/IEC

LFJ Group Inc. Quality Management Services

The World & Software / IT ubiquitous,

Using & Tailoring the standard

Using & Tailoring ISO/IEC 12207

Perceptions of senior managements

There has been a deterioration in the

Using & Tailoring ISO/IEC 12207

There is an urgent need to address

There is a very clear and urgent need to

Using & Tailoring any Standard

Standards are not about rigidity, but

Look at the world of other products and

Using & Tailoring the standard

LFJ Group Inc. Quality Management Services

Using & Tailoring the standard

6.SUPPORTING LIFE CYCLE PROCESSES

6.2 Configuration Management

6.6 Joint Review

7. ORGANIZATIONAL LIFE CYCLE PROCESSES

6.8 Problem Resolution

Example Usage of ISO/IEC

Multi-million dollar Information

Looking for System Integrators (2) to