How ISO 9001 Fits Into The Software World?
Management of Software Projects and PersonnelCIS 6516
March 6, 2006
Prepared byOlgu Yilmaz
Swapna Mekala
Areas of discussion Background and Introduction Evidence
Motivations Benefits and challenges How ISO 9001 compares with the
CMM ? Case Studies
Conclusion
Introduction What is ISO?ISO stands for International
standards organization History-Where did it come from?World War-IIIndustry later on realized its merit
Introduction ‘contd Different countries used different standardsAnd concentrated on product orientation Later on transition from product to process
occurred As market became global ,companies thus
found having to meet many standards for
different countries that were sometimes conflicting and usually confusing
To eliminate confusion ISO 9000 was issued
What is ISO 9000 series about? ISO 9000 is a series of documented
standards prescribing quality management. Written by the International Organization for Standardization. ISO was established in 1987.
More than 226,000 organizations in 129 countries had received ISO 9000 registration by the end of 1997. (Hysell,D. , 1999)
Family of ISO 9000 standards ISO 9000 and ISO 9004 are guidelines for quality management and are notMandatory for certification ISO 9001 ISO 9002 Quality system standards ISO 9003
ISO 9001,9002,9003 ISO 9001 is the broadest standard and
provides a model for design ,development,production,installation and servicing
ISO 9002 is limited to production,installation and servicing
ISO 9003 is further limited to inspection and testing
Overview of the ISO 9000
Overview of the ISO 9000 A company should first use ISO
9000 to design and to implement a quality system. Once the quality has been installed, the company may use the quality assurance models of ISO 9001, ISO 9002, or ISO 9003 to demonstrate the adequacy of the quality system.
ISO 9001 ISO 9001 is the one of the basic ISO 9000
series of standards for Quality Assurance
The standard requires: a) Say what you do
b) Do what you say c) Record what is done d) Improve, based on results
Why ISO 9000 Certification The stakeholder-motivated
approach The company implements a quality system in response to demands by customers or other stakeholders.
The management-motivated approach. The company’s own management initiates the effort to install a quality system.
Reasons for Implementing a Quality System
Why ISO 9000 Certification- II Better organizational definition greater quality awareness better documentation of processes increased control of operations Ongoing analysis of and solution to
problems Positive cultural change Improved customer satisfaction and
increased market opportunities
Quality System Requirements Management Responsibility Quality System Contract Review
The Standard Interpretation Design Control Document and data control Purchasing Control of customer-supplied product Product identification and traceability Process control Inspection and testing
The Standard Interpretation Control of inspection, measuring
and test equipment Inspection and test status Control of nonconforming product Corrective and preventive action Handling, storage, packaging,
preservation and delivery
The Standard Interpretation Control of quality records Internal quality audits Training Servicing Statistical Techniques
How does ISO 9000 Compare with the CMM? CMM
Capability Maturity Model, CMM, is a framework characterizing a path for software process improvement.
The path describes key practices at each five levels.
Level 1 - The initial level Level 2 – Repeatable Level 3 – Defined Level 4 – Managed Level 5 - Optimizing
How does ISO 9000 Compare with the CMM? The CMM, developed by the Software
Engineering Institute ISO 9000 series of standards, developed
by the International Standards. The CMM focuses strictly on software ISO 9000 has a much broader scope:
hardware, software, processed materials and services.
They both share a common concern with quality and process management.
How does ISO 9000 Compare with the CMM? CMM is popular among the
companies that target the US market.
On the other hand for European market certification, ISO 9000 is the most common one.
ISO 9000 vs. CMM ISO certification requires auditors.
The certificate will be valid for 3 years.
Follow up audits every 6 months No certification with CMM. ISO 9000 standard is 50 pages,
while the CMM is over 500 pages.
More about CMM comparison Marc Paulk did a study on the
similarities between ISO 9000 and the CMM in 1994.
He points outs that if a company has ISO 9000 certification, a CMM audit would help the organization obtain that certification.
Was he biased?
Case Study – I (Demirors et al., 1998 ) In this case study, ISO 9001
compliant quality system was installed to a small organization. The purpose of the study is to report the status of the work done.
The company has 39 employees, 8 of them working in software developments.
Findings from the Study - Challenges
Lack of guidance Lack of action knowledge Lack of maturity Lack of quality personnel
Case Study – II (Hysell, 1999)
This study is about OCLC’s ( Online computer Library Center, Inc.) implementation of ISO 9001.
Before Few written procedures and no
controlled process for maintaining them.
Much confusion about the development process and their roles in it.
Much inconsistency in styles and methods.
Weak control of their electronic files.
After The ISO 9001 implementation provided
A tracking method to ensure that staff members have understood procedures and a device to motivate them to follow the procedures consistently.
Written work instructions Well-defined checkpoint, testing and quality
records Written procedures approved by the
organization.
After – II Easy access to the procedures and
quality records of the entire organization
Improved communication A document management system. A team-building experience – an
opportunity for managers and staff to collaborate on model workflow.
Conclusion Searching continuously for best quality
is the way to evolve. Corporations should be aware that ISO
9000 requires a serious commitment of time, energy , and financial resources. However, Eventually the corporations will get the benefit of having a strong future in the market and in their products.
Question ?