Software Configuration Management
Software Configuration Management
Authors: Keyes J.
Published year: 2006
Pages: 102/235
Buy this book on amazon.com >>

ISO

In 1946, the International Organization for Standardization (ISO; www.iso.ch) was founded in Geneva, Switzerland. More than 75 countries , including the United States through ANSI, have member organizations. The ISO has over 160 technical committees and 2300 sub- committees working on a variety of standards. Indeed, the ISO has developed more than 13,000 standards in such esoteric disciplines as clothing, road vehicles, railway engineering, and information technology.

ISO 9000 is the most recognizable of ISO standards. It defines the criteria for quality in the manufacturing and service industries. It was first popularized in Europe but its popularity has spread worldwide as more and more companies deem "ISO certification" to be a competitive advantage.

ISO 9000 is actually a "family" of standards (see Table 12.2).

Table 12.2: ISO 9000 Family of Standards
  1. ISO 9000 ” is the actual standard. ISO 9001, ISO 9002, and ISO 9003 are the three quality assurance models against which organizations can be certified.

  2. ISO 9001 ” is the standard of interest for companies that perform the entire range of activities, from design and development to testing. ISO 9001 is of most interest to the software developer. It is this standard that provides the all-important checklist of quality initiatives such as:

    1. Develop your quality management system:

      1. Identify the processes that make up your quality system.

      2. Describe your quality management processes.

    2. Implement your quality management system:

      1. Use quality system processes.

      2. Manage process performance

    3. Improve your quality management system:

      1. Monitor process performance.

      2. Improve process performance

    ISO 9001 is directly applicable to configuration management as it specifies that change requests be maintained and tracked.

  3. ISO 9002 ” is the standard for companies that do not engage in design and development. This standard focuses on production, installation, and service.

  4. ISO 9003 ” is the appropriate standard for companies whose business processes do not include design control, process control, purchasing, or servicing . This standard focuses on testing and inspection.

ISO Software Engineering Standards Summary

The ISO standards listed in Table 12.3, including configuration management standards, are summarized. Boldfaced titles indicate applicability to configuration management.

Table 12.3: ISO Software Engineering Standards Summary

ISO/IEC 2382-20:1990

Information technology ” vocabulary ” Part 20: System development

ISO 3535:1977

Forms DESIGN SHEET and LAYOUT CHART

ISO 5806:1984

Information processing ” specification of single-hit decision tables

ISO 5807:1985

Information processing ” documentation symbols and conventions for data, program, and system flowcharts, program network charts, and system resources charts

ISO/IEC 6592:2000

Information technology ” guidelines for the documentation of computer-based application systems. No abstract.

ISO 6593:1985

Information processing ” program flow for processing sequential files in terms of record groups

ISO/IEC 8211:1994

Information technology ” specification for a data descriptive file for information interchange

ISO/IEC 8631:1989

Information technology ” program constructs and conventions for their representation

ISO 8790:1987

Information processing systems ” computer system configuration diagram symbols and conventions

ISO 9000-3:1997

Quality management and quality assurance standards ” Part 3: Guidelines for the application of ISO 9001:1994 to the development, supply, installation, and maintenance of computer software. No abstract.

ISO/IEC 9126-1:2001

Software engineering ” product quality ” Part 1: Quality model. No abstract.

ISO 9127:1988

Information processing systems ” user documentation and cover information for consumer software packages

ISO/IEC TR 9294:1990

Information technology ” guidelines for the management of software documentation

ISO 10007:2003

Quality management systems ” guidelines for configuration management

ISO/IEC 10746-1:1998

Information technology ” Open Distributed Processing ” Reference Model: Overview. No abstract.

ISO/IEC 10746-2:1996

Information technology ” Open Distributed Processing ” Reference Model: Foundations

ISO/IEC 10746-3:1996

Information technology ” Open Distributed Processing ” Reference Model: Architecture

ISO/IEC 10746-4:1998

Information technology ” Open Distributed Processing ” Reference Model: Architectural semantics. No abstract.

ISO/IEC 10746-4:1998/Amd 1:2001

Computational formalization. No abstract.

ISO/IEC 11411:1995

Information technology ” representation for human communication of state transition of software

ISO/IEC 12119:1994

Information technology ” Software packages ” quality requirements and testing

ISO/IEC TR 12182:1998

Information technology ” Categorization of software. No abstract.

ISO/IEC 12207:1995

Information technology ” Software life-cycle processes

ISO/IEC 12207:1995/Amd 1:2002

 

ISO/IEC 13235-1:1998

Information technology ” Open Distributed Processing ” Trading function: Specification. No abstract.

ISO/IEC 13235-3:1998

Information technology ” Open Distributed Processing ” Trading Function ” Part 3: Provision of Trading Function using OSI Directory Service. No abstract.

ISO/IEC 13244:1998

Information technology ” Open Distributed Management Architecture. No abstract.

ISO/IEC 13244:1998/Amd 1:1999

Support using Common Object Request Broker Architecture (CORBA). No abstract.

ISO/IEC 13800:1996

Information technology ” procedure for the registration of identifiers and attributes for volume and file structure. No abstract.

ISO/IEC 14102:1995

Information technology ” guideline for the evaluation and selection of CASE tools. No abstract.

ISO/IEC 14143-1:1998

Information technology ” Software measurement ” functional size measurement ” Part 1: Definition of concepts

ISO/IEC 14143-2:2002

Information technology ” Software measurement ” functional size measurement ” Part 2: Conformity evaluation of software size measurement methods to ISO/IEC 14143-1:1998. No abstract.

ISO/IEC TR 14143-3:2003

Information technology ” Software measurement ” functional size measurement ” Part 3: Verification of functional size measurement methods

ISO/IEC TR 14143-4:2002

Information technology ” Software measurement ” functional size measurement ” Part 4: Reference model. No abstract.

ISO/IEC TR 14471:1999

Information technology ” Software engineering ” guidelines for the adoption of CASE tools. No abstract.

ISO/IEC 14598-1:1999

Information technology ” Software product evaluation ” Part 1: General overview. No abstract.

ISO/IEC 14598-2:2000

Software engineering ” Product evaluation ” Part 2: Planning and management. No abstract.

ISO/IEC 14598-3:2000

Software engineering ” Product evaluation ” Part 3: Process for developers. No abstract.

ISO/IEC 14598-4:1999

Software engineering ” Product evaluation ” Part 4: Process for acquirers . No abstract.

ISO/IEC 14598-5:1998

Information technology ” Software product evaluation ” Part 5: Process for evaluators . No abstract.

ISO/IEC 14598-6:2001

Software engineering ” Product evaluation ” Part 6: Documentation of evaluation modules. No abstract.

ISO/IEC 14750:1999

Information technology ” Open Distributed Processing ” Interface Definition Language. No abstract.

ISO/IEC 14752:2000

Information technology ” Open Distributed Processing ” protocol support for computational interactions. No abstract.

ISO/IEC 14753:1999

Information technology ” Open Distributed Processing ” interface references and binding. No abstract.

ISO/IEC 14756:1999

Information technology ” measurement and rating of performance of computer-based software systems. No abstract.

ISO/IEC TR 14759:1999

Software engineering ” Mock-up and prototype ” a categorization of software mock-up and prototype models and their use. No abstract.

ISO/IEC 14764:1999

Information technology ” Software maintenance. No abstract.

ISO/IEC 14769:2001

Information technology ” Open Distributed Processing ” Type Repository Function. No abstract.

ISO/IEC 14771:1999

Information technology ” Open Distributed Processing ” naming framework. No abstract.

ISO/IEC 14834:1996

Information technology ” Distributed Transaction Processing ” the XA Specification

ISO/IEC 14863:1996

Information technology ” System-Independent Data Format (SIDF). No abstract.

ISO/IEC 15026:1998

Information technology ” System and software integrity levels. No abstract.

ISO/IEC TR 15271:1998

Information technology ” Guide for ISO/IEC 12207 (Software Life-Cycle Processes). No abstract.

ISO/IEC 15288:2002

Systems engineering ” System life-cycle processes. No abstract.

ISO/IEC 15414:2002

Information technology ” Open distributed processing ” Reference model ” Enterprise language. No abstract.

ISO/IEC 15437:2001

Information technology ” Enhancements to LOTOS (E-LOTOS). No abstract.

ISO/IEC 15474-1:2002

Information technology ” CDIF framework ” Part 1: Overview. No abstract.

ISO/IEC 15474-2:2002

Information technology ” CDIF framework ” Part 2: Modeling and extensibility. No abstract.

ISO/IEC 15475-1:2002

Information technology ” CDIF transfer format ” Part 1: General rules for syntaxes and encodings. No abstract.

ISO/IEC 15475-2:2002

Information technology ” CDIF transfer format ” Part 2: Syntax SYNTAX.1. No abstract.

ISO/IEC 15475-3:2002

Information technology ” CDIF transfer format ” Part 3: Encoding ENCODING.1. No abstract.

ISO/IEC 15476-1:2002

Information technology ” CDIF semantic metamodel ” Part 1: Foundation. No abstract.

ISO/IEC 15476-2:2002

Information technology ” CDIF semantic metamodel ” Part 2: Common. No abstract.

ISO/IEC TR 15504-1:1998

Information technology ” Software process assessment ” Part 1: Concepts and introductory guide. No abstract.

ISO/IEC TR 15504-2:1998

Information technology ” Software process assessment ” Part 2: A reference model for processes and process capability. No abstract.

ISO/IEC TR 15504-3:1998

Information technology ” Software process assessment ” Part 3: Performing an assessment. No abstract.

ISO/IEC TR 15504-4:1998

Information technology ” Software process assessment ” Part 4: Guide to performing assessments. No abstract.

ISO/IEC TR 15504-5:1999

Information technology ” Software process assessment ” Part 5: An assessment model and indicator guidance. No abstract.

ISO/IEC TR 15504-6:1998

Information technology ” Software process assessment ” Part 6: Guide to competency of assessors. No abstract.

ISO/IEC TR 15504-7:1998

Information technology ” Software process assessment ” Part 7: Guide for use in process improvement. No abstract.

ISO/IEC TR 15504-8:1998

Information technology ” Software process assessment ” Part 8: Guide for use in determining supplier process capability. No abstract.

ISO/IEC TR 15504-9:1998

Information technology ” Software process assessment ” Part 9: Vocabulary. No abstract.

ISO/IEC TR 15846:1998

Information technology ” Software life-cycle processes ” Configuration Management. No abstract.

ISO/IEC 15910:1999

Information technology ” Software user documentation process. No abstract.

ISO/IEC 15939:2002

Software engineering ” Software measurement process. No abstract.

ISO/IEC TR 16326:1999

Software engineering ” Guide for the application of ISO/IEC 12207 to project management. No abstract.

ISO/IEC 19500-2:2003

Information technology ” Open Distributed Processing ” Part 2: General Inter-ORB Protocol (GIOP)/Internet Inter-ORB Protocol (IIOP)

ISO/IEC 19761:2003

Software engineering ” COSMIC-FFP ” a functional size measurement method

ISO/IEC 20968:2002

Software engineering ” Mk II Function Point Analysis ” counting practices manual

ISO/IEC 2382-20:1990 Information technology ” Vocabulary ” Part 20: System development

Serves to facilitate international communication in information processing. Presents English and French terms and definitions of selected concepts as regards the field of information processing and defines relationships between the entries. The provided concepts concern a system life cycle ranging from the requirements analysis to the implementation, including system design and quality assurance.

ISO 3535:1977 Forms design sheet and layout chart

Abstract: Lays down the basic principles for the design of forms, whether discrete forms or continuous forms, and establishes a forms design sheet and a layout chart based on these principles. Applies to the design of forms for administrative, commercial, and technical use, whether for completion in handwriting or by mechanical means such as typewriters and automatic printers.

ISO 5806:1984 Information processing ” Specification of single-hit decision tables

Abstract: The basic format of single-hit decision tables and relevant definitions are described, together with recommended conventions for preparation and use. Is concerned with the use of decision tables in the context of documentation of computer-based information systems.

ISO 5807:1985 Information processing ” Documentation symbols and conventions for data, program, and system flowcharts; program network charts; and system resources charts

Abstract: Defines symbols to be used in information processing documentation and gives guidance on conventions for their use in data flowcharts, program flowcharts, system flowcharts, program network charts, and system resources charts. Applicable in conjunction with ISO 2382/1.

ISO 6593:1985 Information processing ” Program flow for processing sequential files in terms of record groups

Abstract: Describes two alternative general procedures for any program for processing sequential files logically organized in groups of records: Method A ” checking of control head conditions after termination of appropriate level; Method B ” checking of control head conditions before initiation of appropriate level.

ISO/IEC 8211:1994 Information technology ” Specification for a data descriptive file for information interchange

Abstract: Cancels and replaces the first edition (1985). Specifies an interchange format to facilitate the moving of files or parts of files containing data records between computer systems. Specifies: media-independent file and data record descriptions for information interchange; the description of data elements, vectors, arrays, and hierarchies containing character strings, bit strings, and numeric forms; a data descriptive file; a data descriptive record; three levels of complexity of file and record structure; FTAM unstructured and structured document types.

ISO/IEC 8631:1989 Information technology ” Program constructs and conventions for their representation

Abstract: Is concerned with the expression of procedure-oriented algorithms. Defines: (1) the nature of program constructs; (2) the manner in which constructs can be combined; (3) specifications for a set of constructs; a variety of subsets of the defined constructs.

ISO 8790:1987 Information processing systems ” Computer system configuration diagram symbols and conventions

Abstract: Defines graphical symbols and their conventions for use in configuration diagrams for computer systems, including automatic data processing systems.

ISO 9127:1988 Information processing systems ” User documentation and cover information for consumer software packages

Abstract: Describes user documentation and cover information supplied with software packages. Is applicable to software packages sold off-the-shelf to consumers for business, scientific, educational, and home use. References: ISO 6592; ISO 7185.

ISO/IEC TR 9294:1990 Information technology ” Guidelines for the management of software documentation

Abstract: Addresses the policies, standards, procedures, resources, and plans to produce effective software. Applicable to all types of software, from the simplest program to the most complex software system and to all stages of the software life cycle. Detailed advice on the content and layout of software documentation is not provided. Annex A contains checklists of the policies, standards, procedures, and project planning on the software production.

ISO 10007:2003 Quality management systems ” Guidelines for configuration management

Abstract: ISO 10007:2003 gives guidance on the use of configuration management within an organization. It is applicable to the support of products from concept to disposal.

It first outlines the responsibilities and authorities before describing the configuration management process that includes configuration management planning, configuration identification, change control, configuration status accounting, and configuration audit.

Since ISO 10007:2003 is a guidance document, it is not intended to be used for certification/registration purposes.

ISO/IEC 10746-2:1996 Information technology ” Open Distributed Processing ” Reference Model: Foundations

Abstract: Contains the concepts needed to perform the modeling of ODP systems, and the principles of conformance to ODP systems.

ISO/IEC 10746-3:1996 Information technology ” Open Distributed Processing ” Reference Model: Architecture

Abstract: Defines how ODP systems are specified, making use of concepts in ITU-T Recommendation X.902 (ISO/IEC 10746-2); identifies the characteristics that qualify systems as ODP systems.

ISO/IEC 11411:1995 Information technology ” Representation for human communication of state transition of software

Abstract: Defines diagrams and symbols for representing software functions and transitions, and in improving human communication. Covers development, communication, and review of software requirement analysis and design. Effective in interactive software, data communication software, and language/command.

ISO/IEC 12119:1994 Information technology ” Software packages ” quality requirements and testing

Abstract: Applicable to software packages. Establishes requirements for software packages and instructions on how to test a software package against these requirements. Deals only with software packages as offered and delivered; does not deal with their production process. The quality system of a supplier is outside the scope of this standard.

ISO/IEC 12207:1995 Information technology ” Software life-cycle processes

Abstract: Establishes a system for software life-cycle processes with well-defined terminology. Contains processes, activities, and tasks that are to be applied during the acquisition of a system that contains software, a stand-alone software product, and software services.

ISO/IEC TR 14143-3:2003 Information technology ” Software measurement ” functional size measurement ” Part 3: Verification of functional size measurement methods

Abstract: ISO/IEC TR 14143-3:2003 establishes a framework for verifying the statements of an FSM method and/or for conducting tests requested by the verification sponsor, relative to the following performance properties:

  1. Repeatability and reproducibility

  2. Accuracy

  3. Convertibility

  4. Discrimination threshold

  5. Applicability to functional domains

Note  

Statements and test requests relative to other performance properties are outside the scope of ISO/IEC TR 14143-3:2003.

ISO/IEC TR 14143-3:2003 aims to ensure that the output from the verification is objective, impartial, consistent, and repeatable.

The verification report, produced as a result of applying ISO/IEC TR 14143-3:2003, will enable prospective users to select the FSM method that best meets their needs.

ISO/IEC 14834:1996 Information technology ” Distributed Transaction Processing ” the XA specification

Abstract: Specifies the bi-directional interface between a transaction manager and a resource manager (the XA interface) in an X/Open Distributed Transaction Processing (DTP) environment. Technically identical to X/Open CAE specification. Also contains the text of the X/Open DTP Reference Model Version 3.

ISO/IEC 19500-2:2003 Information technology ” Open Distributed Processing ” Part 2: General Inter-ORB Protocol (GIOP)/Internet Inter-ORB Protocol (IIOP)

Abstract: ISO/IEC 19500-2:2003 specifies the General Inter-ORB Protocol (GIOP) for Object Request Broker (ORB) interoperability. GIOP can be mapped onto any connection-oriented transport protocol that meets a minimal set of assumptions defined by this standard.

  • ISO/IEC 19500-2:2003 also defines the Internet Inter-ORB Protocol (IIOP), a specific mapping of the GIOP that runs directly over connections that use the Internet Protocol and the Transmission Control Protocol (TCP/IP connections).

  • ISO/IEC 19500-2:2003 provides a widely implemented and used particularization of ITU-T Rec. X.931 ISO/IEC 14752. It supports interoperability and location transparency in ODP systems.

ISO/IEC 19761:2003 Software engineering ” COSMIC-FFP ” a functional size measurement method

Abstract: ISO/IEC 19761:2003 specifies the set of definitions, conventions, and activities of the COSMIC-FFP Functional Size Measurement Method. It is applicable to software from the following functional domains:

  1. Application software that is needed to support business administration

  2. Real-time software, the task of which is to keep up with or control events happening in the real world

  3. Hybrids of the above

ISO/IEC 19761:2003 has not been designed to measure the functional size of a piece of software, or its parts, which:

  1. Are characterized by complex mathematical algorithms or other specialized and complex rules, such as may be found in expert systems, simulation software, self-learning software, and weather forecasting systems, or

  2. Process continuous variables such as audio sounds or video images, such as may be found, for example, in computer game software, musical instruments, and the like.

However, within the local environment of an organization using the COSMIC-FFP Functional Size Measurement Method, it might be possible to measure these FUR (Functional User Requirement) in a way that is meaningful as a local standard. ISO/IEC 19761:2003 contains provision for the local customization of the method for this purpose.

ISO/IEC 20968:2002 Software engineering ” Mk II Function Point Analysis ” Counting Practices Manual

Abstract: ISO/IEC 20968:2002 specifies the set of definitions, conventions, and activities of the MkII FPA Functional Size Measurement Method.

The method can be used to measure the functional size of any software application that can be described in terms of logical transactions, each comprising an input, process, and output component. The sizing rules were designed to apply to application software from the domain of business information systems, where the processing component of each transaction tends to be dominated by considerations of the storage or retrieval of data.

The method may be applicable to software from other domains, but the user should note that the sizing rules do not take into account contributions to size such as from complex algorithms as typically found in scientific and engineering software, nor do the rules specifically take into account real-time requirements.

Mk II FPA is independent of the project management method to be used and of the development method employed. It is a measure of the logical business requirements, but is independent of how they are implemented.


Software Configuration Management
Authors: Keyes J.
Published year: 2006
Pages: 102/235
Buy this book on amazon.com >>

Similar books on Amazon