applying software lifecycle processes in very small ...applying software lifecycle processes in very...

Tony Coletta – Qual. I.T. ConsultingItalian delegation to ISO/IEC JTC1 SC7email:[email protected]

Automotive SPIN Italy – 3° workshop on Automotive So ftwarePisa (Italy) – 15 may 2008

Applying Software Lifecycle Processes in Very Small Enterprises

- New standard developments -

Applying Software Lifecycle Processes in Very Small Enterprises Slide 2DNV ITGS 2008©

Recent article in IEEE Computer magazine

March 2008


Agenda

� Overview of SC7 and its standards

� Why standards for VSE – requirements and objectives

� Current developments in SC7 WG24

- Approach followed – ISP (International Standard Profiles)

- Proposed incremental profiles

- Current (initial) working draft


ISO/IEC JTC1 SC7 System & Software Engineering Organizational chart

SC7 System & Software Engineering

WG 2 Systems & Software Documentation WG 4 Tools and Environment

WG 6 Software Product Measurement and Evaluation WG 7 Life Cycle Management

WG10 Process Assessment WG19 Techniques for Specifying IT Systems

WG 20 Software Engineering Body of Knowledge WG 21 Software Asset Management

WG 22 Vocabulary WG 23 Systems Quality Management

WG24 SLC Profiles and Guidelines for VSE WG 25 IT Service management

WG 26 S/W Testing WG 42 Architecture

SWG1 Business Planning Group SWG 5 Standards Management Group

WG 1A IT Governance JWG ISO/TC 54 CIF Usability


Process Implementation

and Assessment

12207

15271

90003

15504Process

Assessment

Software Engineering

15288

19760

Systems Engineering

65929294

1591018019

Documentation

15939Measurement

SC7’s legacy

353514759

1608515026

Risk & Integrity

19770Asset

Management

14764Software

maintenance

16326Project

Management

SoftwareQuality

91261459814756

Product Characteristics

Product packaging

9127

Product Evaluation

25051

SoftwareFunctional sizemeasurement

1414319761209262096824570

15289

Tools, Methods14102144711594018018Tools and

environment

5806 – 5807 – 6593 8631 – 8790 – 11411

SC7 Legacy Standards

10746, 1323514750, 1475214753, 1476914771, 1541415935, 19500

Specifications

Documentation

Vocabulary

24765

Software Body of

Knowledge(SWEBOK)

19759

Foundation

14568154741547515476

CDIF

1543715909195018807Modeling

Overview of the SC 7 collection

of standards

20000IT Service

Management

24748

Life Cycle Management

42010TBD

Architecture & Requirements

Engineering

24783

26702

SoftwareQuality

SQuaRe250xxSeries

Quality System

9001

Gov.Study Group

Governance

Life Cycle

Assessment and Certification


Definition of VSE

�Very Small Enterprise (VSE) is defined as organizations having less than 25 employees

�Usually not contractually obligated to follow a standard but …wants to use a standard that understands VSE constraints


Some data about VSE

� Europe – 85 % of IT sector’s companies have 1 to 10 employees

� Canada - 78 % of software development companies in the Montreal area have less than 25 employees – 50% have less than 10

� Enterprises with less than 10 employees represent - 93% of all companies in Europe- 56% in the US- 66% of total employment - Source - Organisation for Economic Cooperation and Development,

Small and Medium Enterprises Outlook, 2002


Need for standards for VSE

� International standards were not written for and/or are difficult to apply in small projects, small development organizations, or companies that have between 1 and 25 employees (VSE).

� Implementation of current standards requires a significant critical mass in terms of number of employees, cost and time.

� International Life Cycle Standard ISO/IEC 12207 and guide do notexplicitly address the needs of VSEs.

� VSEs cannot see a net benefit in establishing a software process as defined by current standards.

� VSE’s have no or very limited ways to be recognized as an enterprise that produces quality software systems in their domain.

� VSEs are cut off from some economic activities.


Main objectives of the new SC7 initiative

“Allow VSEs to be recognized as producing quality software systems without the initial expense of implementing and maintaining the entire use of a suite of Systems and Software Engineering standards or performing comprehensive assessments.”


Examples of Issues and Proposed Solutionsby Thailand about ISO/IEC 12207

Standard should be broken downin to stagesor levels in order to fit all sizesof SMEs.

SMEs are not readyto implement the whole12207 standard.

Need to modifyactivities to suit SMEs’ operation – product and project based type of business.

Not all 12207 activitiesare suitable for SMEs’operations.

A set of checklistwas developed for use by assessors.

There is no assessment model for VSE

Provide packaged templatesand examplesfor rapid documenting

Most software developers are not document-oriented.

Source: Thai Software Industry Promotion Agency


Requirements for a new standard

�Focus on lower levels of maturity

�Produce documents easy to understand

�Produce guidelines applicable to small teams or projects

�Address VSE market needs

�Provide examples

�Develop scalable profiles and guides


Brief history of the project

� New work item proposal (NWIP) – 06/2005

� NWIP approval and setup of WG24 – 09/2005

� WG24 first meeting – Bari 10/2005

� Consolidated requirements – 05/2007

� First working draft issued – 01/2008

� Comments deadline on WD1 – 04/2008

� Next meeting – Berlin, 19-23/05/2008

�Expected publication 2010


What is an ISP ?

� ISP – International Standard Profile:- A set of one or more base standard(s) - Identification of chosen classes, conforming subsets, options and parameters

of those base standards that are necessary to accomplish a particular function.

� NOTE - ISPs may contain normative references to specifications other than International Standards

� Reference: “ISO/IEC TR 10000-1 - Information technology — Framework and taxonomy of International Standardized Profiles — Part 1: General principles and documentation framework”

� ISO/IEC TR 10000-1 freely available at the ITTF web site http://standards.iso.org/ittf/PubliclyAvailableStandards/index.html


WG24's Process

Existing Standards

Profile(able)Elements

Decompose

Associate

Business Context &

Requirements

Identified Profiles

Identify

& Rationalize

Profiles

Compose

ProfilesSpecified

Profiles

Prepare

Guides

Assessment Guide

Engineering & Management

Guides


Proposed Profiles

�Profile 1 (BASIC) Project level- VSE< 10 people- One software development project process and product

control

�Profile 2 Project Portfolio level- VSE from 10 to 25 people- Several projects process and product control- Resource assignment and control- Organization´s Knowledge storage and availability

�Profile 3 Business level- Business Planning and Evaluation- Sales- Innovation and Improvement


VSE Proposed Model


31

3

2

Profiles Relationship


SoftwareProject

Management

SoftwareDesign &

Maintenance

Repository

Contract

Resources

Customer

Sw product

VSE

Profile 1 - BASIC


Profile 2 – Project portfolio

ProcessManagement

Project PortfolioManagement

Projects

P2 P3Knowledge

VSE

Strategic Plan

Contracts

Customers

P1

Resource Management


Profile 3 – Business Level

Project PortfolioManagement

ResourceManagementProcess

Management

Business Management

P1 P2 P3

Market Technology

Capital

VSEGrowth expectation


Structure of the standard ISO/IEC 29110


Another example – IT service management

ISO/ IEC 20000-1Specifications

ISO/ IEC 20000-4Process Reference Model

ISO/ IEC 20000-2Code of Practice

ISO/ IEC 20000-3Guidance on compliance

ISO/ IEC 20000 : Incremental Conformance

ISO/ IEC TR 20000-5Overview

ISO/ IEC ISP 20000-6Framework & Taxonomy

ISO/ IEC 20000-7.nProfiles

ISO/ IEC 20000-7.nProfiles

ISO/ IEC ISP 20000-7.nProfiles

Profiles for incremental conformity to ISO/IEC 20000-1


Thank you

applying software lifecycle processes in very small ...applying software lifecycle processes in very...

Documents