How ISO 9001 Fits Into The Software World?

Management of Software Projects and PersonnelCIS 6516

March 6, 2006

Prepared byOlgu Yilmaz

Swapna Mekala

Areas of discussion Background and Introduction Evidence

Motivations Benefits and challenges How ISO 9001 compares with the

CMM ? Case Studies

Conclusion

Introduction What is ISO?ISO stands for International

standards organization History-Where did it come from?World War-IIIndustry later on realized its merit

Introduction ‘contd Different countries used different standardsAnd concentrated on product orientation Later on transition from product to process

occurred As market became global ,companies thus

found having to meet many standards for

different countries that were sometimes conflicting and usually confusing

To eliminate confusion ISO 9000 was issued

What is ISO 9000 series about? ISO 9000 is a series of documented

standards prescribing quality management. Written by the International Organization for Standardization. ISO was established in 1987.

More than 226,000 organizations in 129 countries had received ISO 9000 registration by the end of 1997. (Hysell,D. , 1999)

Family of ISO 9000 standards ISO 9000 and ISO 9004 are guidelines for quality management and are notMandatory for certification ISO 9001 ISO 9002 Quality system standards ISO 9003

ISO 9001,9002,9003 ISO 9001 is the broadest standard and

provides a model for design ,development,production,installation and servicing

ISO 9002 is limited to production,installation and servicing

ISO 9003 is further limited to inspection and testing

Overview of the ISO 9000

Overview of the ISO 9000 A company should first use ISO

9000 to design and to implement a quality system. Once the quality has been installed, the company may use the quality assurance models of ISO 9001, ISO 9002, or ISO 9003 to demonstrate the adequacy of the quality system.

ISO 9001 ISO 9001 is the one of the basic ISO 9000

series of standards for Quality Assurance

The standard requires: a) Say what you do

b) Do what you say c) Record what is done d) Improve, based on results

Why ISO 9000 Certification The stakeholder-motivated

approach The company implements a quality system in response to demands by customers or other stakeholders.

The management-motivated approach. The company’s own management initiates the effort to install a quality system.

Reasons for Implementing a Quality System

Why ISO 9000 Certification- II Better organizational definition greater quality awareness better documentation of processes increased control of operations Ongoing analysis of and solution to

problems Positive cultural change Improved customer satisfaction and

increased market opportunities

Quality System Requirements Management Responsibility Quality System Contract Review

The Standard Interpretation Design Control Document and data control Purchasing Control of customer-supplied product Product identification and traceability Process control Inspection and testing

The Standard Interpretation Control of inspection, measuring

and test equipment Inspection and test status Control of nonconforming product Corrective and preventive action Handling, storage, packaging,

preservation and delivery

The Standard Interpretation Control of quality records Internal quality audits Training Servicing Statistical Techniques

How does ISO 9000 Compare with the CMM? CMM

Capability Maturity Model, CMM, is a framework characterizing a path for software process improvement.

The path describes key practices at each five levels.

Level 1 - The initial level Level 2 – Repeatable Level 3 – Defined Level 4 – Managed Level 5 - Optimizing

How does ISO 9000 Compare with the CMM? The CMM, developed by the Software

Engineering Institute ISO 9000 series of standards, developed

by the International Standards. The CMM focuses strictly on software ISO 9000 has a much broader scope:

hardware, software, processed materials and services.

They both share a common concern with quality and process management.

How does ISO 9000 Compare with the CMM? CMM is popular among the

companies that target the US market.

On the other hand for European market certification, ISO 9000 is the most common one.

ISO 9000 vs. CMM ISO certification requires auditors.

The certificate will be valid for 3 years.

Follow up audits every 6 months No certification with CMM. ISO 9000 standard is 50 pages,

while the CMM is over 500 pages.

More about CMM comparison Marc Paulk did a study on the

similarities between ISO 9000 and the CMM in 1994.

He points outs that if a company has ISO 9000 certification, a CMM audit would help the organization obtain that certification.

Was he biased?

Case Study – I (Demirors et al., 1998 ) In this case study, ISO 9001

compliant quality system was installed to a small organization. The purpose of the study is to report the status of the work done.

The company has 39 employees, 8 of them working in software developments.

Findings from the Study - Challenges

Lack of guidance Lack of action knowledge Lack of maturity Lack of quality personnel

Case Study – II (Hysell, 1999)

This study is about OCLC’s ( Online computer Library Center, Inc.) implementation of ISO 9001.

Before Few written procedures and no

controlled process for maintaining them.

Much confusion about the development process and their roles in it.

Much inconsistency in styles and methods.

Weak control of their electronic files.

After The ISO 9001 implementation provided

A tracking method to ensure that staff members have understood procedures and a device to motivate them to follow the procedures consistently.

Written work instructions Well-defined checkpoint, testing and quality

records Written procedures approved by the

organization.

After – II Easy access to the procedures and

quality records of the entire organization

Improved communication A document management system. A team-building experience – an

opportunity for managers and staff to collaborate on model workflow.

Conclusion Searching continuously for best quality

is the way to evolve. Corporations should be aware that ISO

9000 requires a serious commitment of time, energy , and financial resources. However, Eventually the corporations will get the benefit of having a strong future in the market and in their products.

Question ?