INTRODUCTION

• ISO stands for the ‘International Organization for Standardization’.
• ISO quality management strongly uses the concept of the PDCA cycle, which includes-

Plan – Do – Check – Act

$$\boxed{\text{Plan → Do → Check → Act}}$$

Here,

• For example, to develop software:

PLAN
Define requirements, quality objectives and processes
        ↓
DO
Design, code and test
        ↓
CHECK
Review, audit and measure results
        ↓
ACT
Correct problems and
improve the process
        ↓
Repeat the process, if required

Thus, this makes quality improvement a continuous process rather than a one-time activity.

DEFINITION

• ISO 9000 is a family of international standards concerned with Quality Management Systems (QMS). It provides principles, terminology, and a framework that organizations can use to consistently deliver products and services that satisfy customer and applicable requirements and to continually improve their processes.

CHARACTERISTICS

• In software engineering, ISO 9000 concepts are important because software quality depends not only on testing the final program/product but also on having well-defined, controlled, documented, monitored, and continuously improved development processes.
• The basic idea or working principle of the ISO 9000 can be represented as:

  Customer Requirements – Controlled Processes – Product/Service – Customer Satisfaction – Improvement

TYPES OF ISO FAMILY

Some important and common standards in the ISO 9000 family in tabular form are:

ISO 9000 IN SOFTWARE DEVELOPMENT

• ISO 9000 principles can be applied throughout the software development life cycle.

DOCUMENTATION IN ISO 9000

• Documentation is important because it provides evidence that processes are defined and controlled.
• Depending on the organization’s QMS, documented information may include:
  • Quality policies and objectives
  • Procedures/process descriptions
  • Work instructions
  • Project plans
  • Requirement specifications
  • Design documents
  • Test plans and test reports
  • Review records
  • Audit reports
  • Corrective-action records
  • Training/competence records
  • Change and configuration records

ADVANTAGES/OBJECTIVES

• The main objective of the ISO 9000 family is to establish an effective quality management system within an organization.
• It fulfills:
  • Customer satisfaction
  • Consistent quality
  • Defined and controlled processes
  • Management responsibility
  • Proper documentation and records
  • Monitoring and measurement
  • Corrective action
  • Continual improvement
  • Risk-based thinking

DISADVANTAGES

ISO 9001

• Organizations are normally certified to ISO 9001, not “certified to ISO 9000.”
• ISO 9000 mainly provides the fundamentals and terminology, while ISO 9001 actually contains the auditable QMS requirements.
• ISO 9001 organizes QMS requirements very well.
• Modern ISO 9001 is less about producing excessive paperwork and more about maintaining the documented information necessary for an effective QMS.

ISO 9001 Quality Management Principles

• The ISO 9001 quality-management framework is built around seven quality management principles.
  • Customer Focus
    • The organization should understand customer requirements and work to meet or exceed customer expectations.
    • For software development, this means understanding what users actually require from the software.
  • Leadership
    • Organizational management should establish clear objectives, policies, responsibilities, and an environment supporting quality.
  • Engagement of People
    • Employees at all levels should be competent, involved, and responsible for contributing to quality.
    • For example, developers, testers, analysts, project managers, and support personnel all contribute to software quality.
  • Process Approach
    • Activities should be understood and managed as interconnected processes.
    • For example: Requirements – System Design – Coding – Testing -Deployment – Maintenance. Each stage should have defined inputs, activities, responsibilities, controls, and outputs.
  • Improvement
    • Organizations should continually improve their products, services, and processes.
    • Software organizations may improve development practices based on defects, customer feedback, audits, metrics, and lessons learned.
  • Evidence-Based Decision Making
    • Organizations’ decisions should be based on appropriate data and analysis rather than assumptions alone.
    • Examples of data and analysis include:

• • • • Defect statistics
      • Test results
      • Customer complaints
      • Project metrics
      • Audit results
      • Performance measurements
  • Relationship Management
    • Organizations should properly manage relationships with suppliers, partners, customers, and other interested parties.

8. ISO 9001 Certification Process

A typical certification process involves:

Develop QMS → Implement Processes → Maintain Records → Conduct Internal Audit → Management Review → External Certification Audit → Correct Nonconformities → Certification → Surveillance Audits

An independent certification body audits the organization’s QMS to determine whether it conforms to ISO 9001 requirements.

Certification does not mean every product is automatically defect-free. It indicates that the organization has established and maintains a quality management system conforming to the applicable ISO 9001 requirements.

9. Benefits of ISO 9000/ISO 9001

For software organizations, important benefits include:

• Better-defined development processes
• More consistent software quality
• Improved customer satisfaction
• Better documentation and traceability
• Improved management control
• Reduction in repeated errors
• Better handling of risks and changes
• Greater employee responsibility and awareness
• Continuous process improvement
• Increased confidence among customers
• Improved organizational credibility
• Better preparation for audits and contractual quality requirements

10. Limitations

ISO 9001 implementation can also have challenges:

• Implementation requires time and resources.
• Certification and audits involve cost.
• Poor implementation can become overly documentation-focused.
• Certification does not guarantee defect-free software.
• Employees require training and participation.
• Processes must be maintained continuously, not merely prepared for an audit.
• A compliant process does not by itself guarantee that a particular software design is technically superior.

ISO 9000 vs ISO 9001

Therefore, saying:

“Our organization is ISO 9001 certified”

is more technically correct than saying:

“Our organization is ISO 9000 certified.”

ISO 9000 and Software Quality Assurance

Software Quality Assurance (SQA) focuses on ensuring that appropriate software-development processes and quality activities are established and followed.

ISO 9001 provides a broader quality management system framework within which software quality activities can operate.

Thus:

$$\boxed{\text{ISO 9001 QMS + Effective Software Engineering Practices → Better Process and Product Quality}}$$

Short examination definition

ISO 9000 is a family of international standards for quality management systems developed by the International Organization for Standardization. It provides principles, fundamentals and terminology for managing quality and emphasizes customer focus, process control, documented information, performance evaluation and continual improvement. In software engineering, ISO 9000 principles help organizations establish systematic and controlled processes for software development, testing, maintenance and quality assurance. ISO 9001 specifies the requirements against which an organization’s quality management system can be certified.