Technical: Iso/Iec TR 29110-1
Technical: Iso/Iec TR 29110-1
Technical: Iso/Iec TR 29110-1
REPORT 29110-1
Second edition
2016-06-15
Reference number
ISO/IEC TR 29110-1:2016(E)
© ISO/IEC 2016
ISO/IEC TR 29110-1:2016(E)
Contents Page
Foreword...........................................................................................................................................................................................................................................v
Introduction............................................................................................................................................................................................................................... vii
1 Scope.................................................................................................................................................................................................................................. 1
1.1 Fields of application............................................................................................................................................................................ 1
1.2 Target audience....................................................................................................................................................................................... 1
2 Normative references....................................................................................................................................................................................... 1
3 Terms and definitions...................................................................................................................................................................................... 1
4 Symbols and abbreviated terms.........................................................................................................................................................11
4.1 Naming, diagramming and definition conventions............................................................................................... 11
4.2 Abbreviated terms............................................................................................................................................................................. 11
5 VSE characteristics and VSE potential benefits..................................................................................................................12
5.1 General......................................................................................................................................................................................................... 12
5.2 VSE characteristics............................................................................................................................................................................ 12
5.3 VSE potential benefits..................................................................................................................................................................... 12
6 Lifecycle process concepts.......................................................................................................................................................................12
6.1 General......................................................................................................................................................................................................... 12
6.2 Systems concepts................................................................................................................................................................................ 12
6.3 Lifecycle models and stages....................................................................................................................................................... 13
6.4 Lifecycle product types.................................................................................................................................................................. 14
7 Process improvement and assessment concepts..............................................................................................................15
7.1 Process improvement concepts.............................................................................................................................................. 15
7.2 Capability assessment concepts............................................................................................................................................. 15
7.3 Conformity assessment................................................................................................................................................................. 15
8 Standardization concepts..........................................................................................................................................................................16
8.1 General......................................................................................................................................................................................................... 16
8.2 Standard...................................................................................................................................................................................................... 16
8.3 Guides........................................................................................................................................................................................................... 16
8.4 Profile............................................................................................................................................................................................................ 16
8.5 Profile group........................................................................................................................................................................................... 16
8.6 Generic profile group....................................................................................................................................................................... 17
8.7 Use of profiles........................................................................................................................................................................................ 17
8.8 Conformance to profiles................................................................................................................................................................ 17
9 Taxonomy of VSE profiles..........................................................................................................................................................................17
9.1 General......................................................................................................................................................................................................... 17
9.2 Profile taxonomy................................................................................................................................................................................. 18
9.3 Software Engineering Generic profile group.............................................................................................................. 18
9.3.1 General................................................................................................................................................................................... 18
9.3.2 Entry profile....................................................................................................................................................................... 18
9.3.3 Basic profile........................................................................................................................................................................ 18
9.3.4 Intermediate profile.................................................................................................................................................... 18
9.3.5 Advanced profile............................................................................................................................................................ 19
9.4 Systems Engineering Generic profile group................................................................................................................ 19
9.4.1 General................................................................................................................................................................................... 19
9.4.2 Entry profile....................................................................................................................................................................... 19
9.4.3 Basic profile........................................................................................................................................................................ 19
9.4.4 Intermediate profile.................................................................................................................................................... 19
9.4.5 Advanced profile............................................................................................................................................................ 19
9.5 Organizational Management profile group.................................................................................................................. 19
9.6 Service Delivery Profile Group................................................................................................................................................ 19
10 Overview of ISO/IEC 29110 documents.....................................................................................................................................20
10.1 General......................................................................................................................................................................................................... 20
10.2 Profile specific documents.......................................................................................................................................................... 20
10.2.1 VSE profiles......................................................................................................................................................................... 20
10.2.2 Generic profile group................................................................................................................................................. 20
10.2.3 Profile specifications.................................................................................................................................................. 20
10.2.4 Management and engineering guides.......................................................................................................... 20
10.3 Introductory documents............................................................................................................................................................... 20
10.3.1 Overview............................................................................................................................................................................... 20
10.3.2 Framework.......................................................................................................................................................................... 21
10.3.3 Domain-specific profile............................................................................................................................................ 21
10.4 Certification and assessment guides.................................................................................................................................. 21
10.4.1 Guides...................................................................................................................................................................................... 21
10.4.2 Certification guide........................................................................................................................................................ 21
10.4.3 Assessment guide.......................................................................................................................................................... 21
10.4.4 Framework of autonomy-based improvement.................................................................................... 21
10.5 Specialized guides.............................................................................................................................................................................. 21
Annex A (informative) Reference works.........................................................................................................................................................22
Bibliography.............................................................................................................................................................................................................................. 23
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work. In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical
Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/IEC JTC 1, Information technology, Subcommittee
SC 7, Software and systems engineering.
This second edition cancels and replaces the first edition (ISO/IEC 29110-1:2011), which has been
technically revised.
ISO/IEC 29110 has the following parts under the general title Systems and software engineering —
Lifecycle profiles for Very Small Entities (VSEs):
— Part 1: Overview [Technical Report]
— Part 2-1: Framework and taxonomy
— Part 2-2: Guide for the development of domain-specific profiles [Technical Report]
— Part 3-1: Assessment guide [Technical Report]
— Part 3-3: Certification requirements for process capability
— Part 3-4: Autonomy-based improvement method [Technical Report]
— Part 4-1: Profile specifications: Generic profile group
— Part 5-1-1: Management and engineering guide: Generic profile group: Entry profile [Technical Report]
— Part 5-1-2: Management and engineering guide: Generic profile groiup: Basic profile [Technical Report]
— Part 5-2-1: Organisational management guidelines [Technical Report]
— Part 5-6-1: Systems engineering — Management and engineering guide: Generic profile group: Entry
profile [Technical Report]
— Part 5-6-2: Systems engineering — Management and engineering guide: Generic profile group: Basic
profile [Technical Report]
Introduction
Very Small Entities (VSEs) around the world are creating valuable products and services. For the
purpose of ISO/IEC 29110, a Very Small Entity (VSE) is an enterprise, an organization, a department
or a project having up to 25 people. Since many VSEs develop and/or maintain system and software
components used in systems, either as independent products or incorporated in larger systems, a
recognition of VSEs as suppliers of high-quality products is required.
According to the Organization for Economic Co-operation and Development (OECD) SME and
Entrepreneurship Outlook report (2005), “Small and Medium Enterprises (SMEs) constitute the
dominant form of business organization in all countries worldwide, accounting for over 95 % and
up to 99 % of the business population depending on country”. The challenge facing governments
and economies is to provide a business environment that supports the competitiveness of this large
heterogeneous business population and that promotes a vibrant entrepreneurial culture.
From studies and surveys conducted, it is clear that the majority of International Standards do not
address the needs of VSEs. Implementation of and conformance with these standards is difficult, if not
impossible. Consequently, VSEs have no, or very limited, ways to be recognized as entities that produce
quality systems/system elements including software in their domain. Therefore, VSEs are excluded
from some economic activities.
It has been found that VSEs find it difficult to relate International Standards to their business needs
and to justify the effort required to apply standards to their business practices. Most VSEs can neither
afford the resources, in terms of number of employees, expertise, budget and time, nor do they see a
net benefit in establishing over-complex systems or software life cycle processes. To address some of
these difficulties, a set of guides has been developed based on a set of VSE characteristics. The guides
are based on subsets of appropriate standards processes, activities, tasks, and outcomes, referred to as
Profiles. The purpose of a profile is to define a subset of International Standards relevant to the VSEs’
context; for example, processes, activities, tasks, and outcomes of ISO/IEC/IEEE 12207 for software;
processes, activities, tasks, and outcomes of ISO/IEC/IEEE 15288 for systems; and information products
(documentation) of ISO/IEC/IEEE 15289 for software and systems.
VSEs can achieve recognition through implementing a profile and by being audited against
ISO/IEC 29110 specifications.
The ISO/IEC 29110 series of International Standards and Technical Reports can be applied at any
phase of system or software development within a life cycle. This series of International Standards
and Technical Rerports is intended to be used by VSEs that do not have experience or expertise in
adapting/tailoring ISO/IEC/IEEE 12207 or ISO/IEC/IEEE 15288 standards to the needs of a specific
project. VSEs that have expertise in adapting/tailoring ISO/IEC/IEEE 12207 or ISO/IEC/IEEE 15288 are
encouraged to use those standards instead of ISO/IEC 29110.
ISO/IEC 29110 is intended to be used with any lifecycle such as waterfall, iterative, incremental,
evolutionary or agile. Systems, in the context of ISO/IEC 29110, are typically composed of hardware and
software components.
The ISO/IEC 29110 series, targeted by audience, has been developed to improve system or software
and/or service quality and process performance. See Table 1.
If a new profile is needed, ISO/IEC 29110-4 and ISO/IEC/TR 29110-5 can be developed with minimal
impact to existing documents.
ISO/IEC 29110-2-1 introduces the concepts for systems and software engineering profiles for VSEs.
It establishes the logic behind the definition and application of profiles. For standardized profiles, it
specifies the elements common to all profiles (structure, requirements, conformance, and assessment).
For domain-specific profiles (profiles that are not standardized and developed outside of the ISO
process), it provides general guidance adapted from the definition of standardized profiles.
ISO/IEC 29110-3 defines certification schemes, assessment guidelines and compliance requirements
for process capability assessment, conformity assessments, and self-assessments for process
improvements. ISO/IEC 29110-3 also contains information that can be useful to developers of
certification and assessment methods and developers of certification and assessment tools.
ISO/IEC 29110-3 is addressed to people who have direct involvement with the assessment process, e.g.
the auditor, certification and accreditation bodies and the sponsor of the audit, who need guidance on
ensuring that the requirements for performing an audit have been met.
ISO/IEC 29110-4-m provides the specification for all profiles in one profile group that are based on
subsets of appropriate standards elements.
ISO/IEC/TR 29110-5-m-n provides management, engineering and service delivery guides for the
profiles in a profile group.
The future ISO/IEC/TR 29110-6-x provides management and engineering guides not tied to a specific
profile.
This part of ISO/IEC 29110 defines the terms common to the ISO/IEC 29110 series. It introduces
processes, lifecycle and standardization concepts, the taxonomy (catalogue) of ISO/IEC 29110 profiles
and the ISO/IEC 29110 series. It also introduces the characteristics and needs of a VSE and clarifies the
rationale for specific profiles, documents, standards and guides.
Figure 1 describes the ISO/IEC 29110 International Standards (IS) and Technical Reports (TR) and
positions the parts within the framework of reference. Overview, assessment guide, management and
engineering guide are available from ISO as freely available Technical Reports (TR). The Framework
document, profile specifications and certification schemes are published as International Standards (IS).
1 Scope
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC 29110-2-1, Software engineering — Lifecycle profiles for Very Small Entities (VSEs) — Part 2-1:
Framework and taxonomy
3.1
activity
set of cohesive tasks (3.69) of a process (3.36)
[SOURCE: ISO/IEC/IEEE 12207]
3.2
acquirer
stakeholder that acquires or procures a product or service (3.53) from a supplier
Note 1 to entry: Other terms commonly used for an acquirer are buyer, customer (3.22), owner, purchaser or
internal/organizational sponsor.
[SOURCE: ISO/IEC/IEEE 12207]
3.3
advanced profile
profile (3.45) targeted at VSEs which want to sustain and grow as an independent competitive system
and/or software (3.56) development business
3.4
agreement
mutual acknowledgement of terms and conditions under which a working relationship is conducted
EXAMPLE Contract, memorandum of agreement.
[SOURCE: ISO/IEC/IEEE 12207]
3.5
assessment indicator
sources of objective evidence used to support the assessors’ (3.6) judgment in rating process (3.36)
attributes
EXAMPLE Work products (3.77), practice, or resource (3.51).
[SOURCE: ISO/IEC 33001]
3.6
assessor
individual who participates in the rating of process (3.36) attributes
[SOURCE: ISO/IEC 33001]
3.7
audit
systematic, independent, documented process (3.36) for obtaining records (3.48), statements of fact or
other relevant information and assessing them objectively, to determine the extent to which specified
requirements are fulfilled
Note 1 to entry: While “audit” applies to management systems, “assessment” applies to conformity assessment
(3.20) bodies, as well as more generally.
[SOURCE: ISO/IEC 17000]
3.8
auditee
organization (3.34) being audited
[SOURCE: ISO 19011:2011, 3.7]
3.9
auditor
person who conducts an audit (3.7)
[SOURCE: ISO 19011:2011, 3.8]
3.10
audit team
one or more auditors (3.9) conducting an audit (3.7), supported if needed by technical experts
Note 1 to entry: One auditor of the audit team is appointed as the audit team leader.
Note 2 to entry: Certification is applicable to all objects of conformity assessment (3.20), except for conformity
assessment bodies themselves, to which accreditation is applicable.
[SOURCE: ISO/IEC 17000]
3.16
certification body
third-party conformity assessment (3.20) body operating certification schemes (3.17)
[SOURCE: ISO/IEC 17065]
3.17
certification scheme
certification system related to specified products, to which the same specified requirements, specific
rules and procedures apply
Note 1 to entry: For definition of “certification system”, refer to ISO/IEC 17000:2004, 2.7.
Note 2 to entry: The criteria for the rules, procedures and management for implementing product, process (3.36)
and service (3.53).
[SOURCE: ISO/IEC 17065]
3.19
client
<for certification> organization (3.34) that is responsible to a certification body (3.16) for ensuring
certification (3.15) requirements, including product requirements, are fulfilled
[SOURCE: ISO/IEC 17065]
3.20
conformity assessment
demonstration that specified requirements relating to a product, process (3.36), system (3.62), person
or body are fulfilled
[SOURCE: ISO/IEC 17000]
3.21
critical system
system (3.62) having the potential for serious impact on the users (3.72) or environment, due to factors
including safety, performance, and security
3.22
customer
person or organization (3.34) that could or does receive a product or a service (3.53) that is intended for
or required by this person or organization
EXAMPLE Consumer, client, end-user, retailer, receiver or product or service from an internal process (3.36),
beneficiary and purchaser.
[SOURCE: ISO 9000]
3.23
deployment package
set of artefacts developed to facilitate the implementation of a set of practices, of the selected
framework, in a very small entity (3.75)
3.24
disposed system
system (3.62) that has been transformed (i.e. state change) by applying the disposal process
Note 1 to entry: A systems approach considers the total system and the total lifecycle (3.32) of the system. This
includes all aspects of the system and the system throughout its life until the day users dispose of the system and
the external enterprises complete the handling of the disposed system products.
[SOURCE: ISO/IEC/IEEE 15288]
3.25
entity
registered organization (3.34), group within a registered organization, or a project (3.47) within an
organization
3.26
entry profile
profile (3.45) targeted at start-up VSEs (i.e. VSEs who started their operation less than three years)
and/or at VSEs working on small project (3.47) (e.g. project size of less than six person-months)
3.27
generic profile group
profile group (3.46) applicable to VSEs (very small entities) that do not develop critical systems (3.21) or
software (3.56) products and have typical situational factors
3.28
guide
document published by ISO or IEC giving rules, orientation, advice or recommendations relating to
international standardization
3.29
intermediate profile
profile (3.45) targeted at VSEs involved in the development of more than one project (3.47) in parallel
with more than one work team
3.30
international standard
standard (3.59) that is adopted by an international standardizing/standards organization and made
available to the public
3.31
lead assessor
assessor (3.6) who has demonstrated the competencies to conduct an assessment and to monitor and
verify the conformance of a process assessment (3.37)
[SOURCE: ISO 33001]
3.32
lifecycle
evolution of a system (3.62), product, service (3.53), project (3.47) or other human-made entity (3.25),
from conception through retirement
[SOURCE: ISO/IEC/IEEE 15288]
3.33
operator
individual or organization (3.34) that performs the operations of a system (3.62)
Note 1 to entry: The role of operator and the role of user (3.72) can be vested, simultaneously or sequentially, in
the same individual or organization.
Note 2 to entry: An individual operator combined with knowledge, skills and procedures can be considered as an
element of the system.
Note 3 to entry: An operator may perform operations on a system that is operated, or of a system that is operated,
depending on whether or not operating instructions are placed within the system boundary.
[SOURCE: ISO/IEC/IEEE 12207]
3.34
organization
person or a group of people that has its own functions responsibilities, authorities and relationships to
achieve its objectives
[SOURCE: ISO 9000]
3.35
organizational management profile
profile (3.45) targeted at VSEs to provide them with additional organizational management guidance
3.36
process
set of interrelated or interacting activities that use inputs to deliver an intended result
[SOURCE: ISO 9000]
3.37
process assessment
disciplined evaluation of an organizational unit’s processes against a process assessment model (3.38)
[SOURCE: ISO/IEC 33001]
3.38
process assessment model
model suitable for the purpose of assessing a specified process quality characteristic, based on one or
more process reference models (3.44)
[SOURCE: ISO/IEC 33001]
3.39
process capability
characterization of the ability of a process to meet current or projected business goals
[SOURCE: ISO/IEC 33020]
3.40
process capability level
characterization of a process on an ordinal measurement scale of process capability (3.39)
[SOURCE: ISO/IEC 33000]
3.41
process improvement
actions taken to improve the quality of the organization’s processes aligned with the business needs
[SOURCE: ISO/IEC 33001]
3.42
process outcome
observable result of the successful achievement of the process purpose
[SOURCE: ISO/IEC/IEEE 12207]
3.43
process profile
set of process attribute ratings for an assessed process
[SOURCE: ISO/IEC 33001]
3.44
process reference model
model comprising definitions of processes in a lifecycle (3.32) described in terms of process purpose
and outcomes, together with an architecture describing the relationships between the processes
[SOURCE: ISO/IEC 33001]
3.45
profile
set of one or more base standards (3.13) and/or profiles, and where applicable, the identification of
chosen classes, conforming subsets, option and parameters of those base standard, or standardized
profiles necessary to accomplish a particular function
[SOURCE: ISO/IEC/TR 10000‑1]
3.46
profile group
collection of profiles (3.45) which are related either by composition of processes [e.g. activities (3.1) and
tasks (3.69)], or by capability level, or both
3.47
project
endeavour with defined start and finish dates undertaken to create a product or service (3.53) in
accordance with specified resources (3.51) and requirements
Note 1 to entry: A project is sometimes viewed as a unique process comprising coordinated and controlled
activities and composed of activities from the Technical Management processes and Technical processes defined
in this part of ISO/IEC 29110.
[SOURCE: ISO/IEC/IEEE 12207]
3.48
record
set of related data items treated as a unit
[SOURCE: ISO/IEC/IEEE 15289]
3.49
report
information item that describe the results of activities such as investigations, observations, assessments,
or tests
[SOURCE: ISO/IEC/IEEE 15289]
3.50
repository
1. collection of all system elements or software (3.56) related artefacts belonging to a system. 2. The
location/format in which such a collection is stored
[SOURCE: ISO/IEC/IEEE 24765]
3.51
resource
asset that is utilized or consumed during the execution of a process
Note 1 to entry: Includes diverse entities such as funding, personnel, facilities, capital equipment, tools, and
utilities such as power, water, fuel and communication infrastructures.
[SOURCE: ISO/IEC/IEEE 12207]
3.52
review
process or meeting during which a work product (3.77), or set of work products, is presented to project
personnel, managers, users (3.72), customers (3.22), or other interested parties for comment or approval
[SOURCE: ISO/IEC/IEEE 24765]
3.53
service
performance of activities, work, or duties
Note 1 to entry: A service is self contained, coherent, discrete, and can be composed of other services.
[SOURCE: ISO/IEC/IEEE 15288]
3.54
service delivery profile
profile targeted at VSEs that need to perform and manage service delivery processes, either for systems
(3.62) or software (3.56) products that they have developed or that were developed by others
3.55
small and medium enterprise
SME
enterprise which employ fewer than 250 persons
[SOURCE: OECD 2005, modified]
3.56
software
computer programs, procedures, and possibly associated documentation and data pertaining to the
operation of a computer system
[SOURCE: IEEE 828]
3.57
software component
general term used to refer to a software system or an element, such as module, unit, data, or document
[SOURCE: IEEE 1061]
3.58
software engineering
application of a systematic, disciplined, quantifiable approach to the development, operation, and
maintenance of software (3.56); that is, the application of engineering to software
[SOURCE: ISO/IEC/IEEE 12207]
3.59
standard
document, established by consensus and approved by a recognized body, that provides, for common and
repeated use, rules, guidelines or characteristics for activities or their results, aimed at the achievement
of the optimum degree of order in a given context
Note 1 to entry: Standards should be based on the consolidated results of science, technology and experience,
and aimed at the promotion of optimum community benefits.
3.60
standardized profile
internationally agreed-to, harmonized standard (3.59) which describes one or more profiles (3.45)
[SOURCE: ISO/IEC/TR 10000‑1]
3.61
surveillance
systematic iteration of conformity assessment (3.20) activities as a basis for maintaining the validity of
the statement of conformity
[SOURCE: ISO/IEC 17000]
3.62
system
combination of interacting elements organized to achieve one or more stated purposes
Note 1 to entry: A system is sometimes considered as a product or as the services it provides.
Note 2 to entry: In practice, the interpretation of its meaning is frequently clarified by the use of an associative
noun, e.g. aircraft system or database management system. Alternatively, the word “system” is substituted simply
by a context dependent synonym, e.g. aircraft or database, though this potentially obscures a system principles
perspective.
Note 3 to entry: A system can include the associated equipment, facilities, material, software, firmware, technical
documentation, services and personnel required for operations and support to the degree necessary for use in its
intended environment, e.g. enabling system, system-of-interest, system of systems.
[SOURCE: ISO/IEC/IEEE 15288]
3.63
systems engineering
interdisciplinary approach governing the total technical and managerial effort required to transform a
set of customer (3.22) needs, expectations, and constraints into a solution and to support that solution
throughout its life
[SOURCE: ISO/IEC/IEEE 15288]
3.64
systems engineering management plan
SEMP
top level technical planning document for a project (3.47), which addresses technical management
processes established by three principal sources [the project’s contract or agreement (3.4), applicable
organizational processes, and the systems engineering (3.63) project team], as necessary to successfully
accomplish the systems engineering-related tasks (3.69) of the project
[SOURCE: ISO/IEC 24748‑4]
3.65
statement of work
SOW
means to describe and specify the tasks (3.69) to be performed under the contract
[SOURCE: ISO/IEC/IEEE 12207]
3.66
system structure
decomposition of a system of interest into a set of interacting systems and system elements
Note 1 to entry: The system structure is described in a System Breakdown Structure (SBS).
[SOURCE: ISO/IEC/IEEE 15288:2008]
3.67
taxonomy
classification scheme for referencing profiles (3.45) or sets of profiles unambiguously
[SOURCE: ISO/IEC/TR 10000‑1]
3.68
technical report
document published by ISO or IEC containing collected data of a different kind from that normally
published as an International Standard (3.30) or Technical Specification
Note 1 to entry: Such data may include, for example, data obtained from a survey carried out among the national
bodies, data on work in other international organizations or data on the “state of the art” in relation to standards
(3.59) of national bodies on a particular subject.
3.69
task
requirement, recommendation, or permissible action, intended to contribute to the achievement of one
or more outcomes of a process
[SOURCE: ISO/IEC/IEEE 12207]
3.70
trade-off
decision-making actions that select from various requirements and alternative solutions on the basis of
net benefit to the stakeholders
[SOURCE: ISO/IEC/IEEE 12207]
3.71
traceability
describes association among two or more logical entities, such as requirements, system elements,
verifications (3.74), or tasks (3.69)
EXAMPLE Software features and test cases are typically traced to software requirements.
[SOURCE: ISO/IEC/IEEE 12207]
3.72
user
individual or group that interacts with a system (3.62) or benefits from a system during its utilization
Note 1 to entry: The role of user and the role of operator (3.33) are sometimes vested, simultaneously or
sequentially, in the same individual or organization (3.34).
[SOURCE: ISO/IEC 25010]
3.73
validation
confirmation, through the provision of objective evidence, that the requirements for a specific intended
use or application have been fulfilled
Note 1 to entry: A system (3.62) is able to accomplish its intended use, goals and objectives (i.e. meet stakeholder
requirements) in the intended operational environment. The right system was built.
Note 2 to entry: In a lifecycle (3.32) context, validation involves the set of activities for gaining confidence that
a system is able to accomplish its intended use, goals and objectives in an environment like the operational
environment.
[SOURCE: ISO 9000, modified — Note 1 to entry and Note 2 to entry have been added]
3.74
verification
confirmation, through the provision of objective evidence, that specified requirements have been
fulfilled.
Note 1 to entry: Verification is a set of activities that compares a system (3.62) or system element against the
required characteristics. This includes, but is not limited to, specified requirements, design, descriptions, and the
system itself. The system was built right.
DP Deployment Package
PG Profile Group
SE Systems Engineering
SW Software Engineering
5.1 General
A VSE is considered to be an entity that engages in systems or software engineering activities at any
point, including development, integration, or maintenance. Annex A provides more basic information.
6.1 General
This Clause provides lifecycle process concepts that are considered in the ISO/IEC 29110 series and are
supportive of the potential coordinated use of ISO/IEC/IEEE 12207, ISO/IEC/IEEE 15288, and ISO/IEC/
IEEE 15289. It will assist users in their management of information items as products of the system or
software lifecycle.
NOTE 2 Selecting the name of a type of model does not satisfy the requirement to define a model
comprised of stages, with defined purpose and outcomes accomplished via the processes of this Inter-
national Standard.
NOTE 3 ISO/IEC/TR 24748-1, ISO/IEC/TR 24748-2, and ISO/IEC/TR 24748-3 provide additional
detail regarding lifecycle models and stages. The models described in this Clause apply not only to
software systems but also to other systems as described in ISO/IEC/IEEE 15288.
[ISO/IEC/IEEE 12207]
5.4.1 System lifecycle model
Every system has a lifecycle. A lifecycle can be described using an abstract functional model that
represents the conceptualization of a need for the system, its realization, utilization, evolution and
disposal.
A system progresses through its lifecycle as the result of actions, performed and managed by people
in organizations, using processes for execution of these actions. The detail in the lifecycle model is
expressed in terms of these processes, their outcomes, relationships and sequence. This Internation-
al Standard does not prescribe any particular lifecycle model. Instead, it defines a set of processes,
termed lifecycle processes that can be used in the definition of the system’s lifecycle. Also, this Inter-
national Standard does not prescribe any particular sequence of processes within the lifecycle model.
The sequence of the processes is determined by project objectives and by selection of the system
lifecycle model.
5.4.2 System lifecycle stages
Lifecycles vary according to the nature, purpose, use and prevailing circumstances of the system.
Each stage has a distinct purpose and contribution to the whole lifecycle and is considered when
planning and executing the system lifecycle.
The stages represent the major lifecycle periods associated with a system and they relate to the state
of the system description or the system itself. The stages describe the major progress and achieve-
ment milestones of the system through its lifecycle. They give rise to the primary decision gates of
the lifecycle. These decision gates are used by organizations to understand and manage the inherent
uncertainties and risks associated with costs, schedule and functionality when creating or utilizing a
system. The stages thus provide organizations with a framework within which organization manage-
ment has high-level visibility and control of project and technical processes.
Per ISO/IEC/TR 24748-1 (IEEE STD 24748-1-2011), the typical system lifecycle stages include concept,
development, production, utilization, support, and retirement.
Organizations employ stages differently to satisfy contrasting business and risk mitigation strategies.
Using stages concurrently and in different orders can lead to lifecycle forms with distinctly different
characteristics.
Further elaboration of these concepts can be found in the ISO/IEC/IEEE/TR 24748 guides, on the
application of lifecycle management.
[ISO/IEC/IEEE 15288]
Certification is carried out by certification bodies that operate certification schemas. There are ISO/IEC
standards and guides that provide guidance and set the rules for conformity assessments, certification
bodies, and certification schemas.
In order to increase confidence in certification, it can be useful to consider accreditation of
certification bodies.
8 Standardization concepts
8.1 General
Recognizing the limitations of VSEs resources, the need for minimum processes and practices are
supported in the scope of the ISO/IEC 29110 series. This will allow the VSE to be flexible and achieve its
organizational goals without compromising systems and software engineering processes.
NOTE Rationale for defining each profile is described in ISO/IEC 29110-2-1.
8.2 Standard
Systems and software engineering standards are focusing on both processes and products aspects.
They contain formal requirements developed and used to prescribe consistent approaches to develop
systems and software engineering standards have the following objectives:
— to provide a common framework and vocabulary for project practitioners;
— to provide a framework for two party agreements;
— to improve and evaluate competence;
— to facilitate process or product evaluation.
Standards contain normative and, in some cases, informative parts. The normative part of standards
is used as requirements for conformance evaluation. The informative part of standards contains
information that either complements or facilitates the understanding of or the use of the normative part.
The need for process improvement should be a business issue for VSEs (e.g. for-profit organizations
and for non for-profit organizations), motivated by efficiency and effectiveness. In large organizations,
large quantities of data are tracked in sophisticated ways, including application of Lean and six sigma
tools. In VSEs, process improvement can be handled, more informally.
8.3 Guides
Guides provide practical information to facilitate the implementation and assessment of the defined
profiles. In accordance with ISO/IEC JTC 1, guides are published as Technical Reports.
8.4 Profile
A profile is a set of one or more base standards and/or standardized profiles and, where applicable, the
identification of chosen classes, conforming subsets, options and parameters of those base standards,
or standardized profiles necessary to accomplish a particular function.
9.1 General
The profile identifier should not to be confused with the part number in the ISO/IEC 29110 series, which
use the profile identifier as a suffix to the part number for part 4-m and 5-m-n.
9.3.1 General
The “Generic” profile group has been identified as applicable to software engineering within the vast
majority of VSEs that do not develop critical software and have typical situational factors. The “Generic”
profile group does not imply any specific application domain. However, it is envisaged that in the future,
new domain-specific sub-profiles may be developed in the future.
Software can include computer programs, procedures, and possibly associated documentation and data
pertaining to the operation of a computer system.
The Entry profile is targeted at start-up VSEs (i.e. VSEs who started their operation less than three
years) and/or at VSEs working on small project (e.g. project size of less than six person-months). The
Entry profile is intended to be used with any processes, techniques and methods that enhance the VSE’s
customer satisfaction and productivity.
The Basic profile is targeted at VSEs developing a single application by a single work team. The project
may be to fulfil an external or internal contract. The internal contract need not be explicit between the
project team and their client.
The Intermediate profile is targeted at VSEs involved in the development of more than one project in
parallel with more than one work team.
The Advanced profile is targeted at VSEs which want to sustain and grow as an independent competitive
system and/or software development business.
9.4.1 General
The “Generic” profile group has been identified as applicable to systems engineering within the
vast majority of VSEs that do not develop critical system elements or products within the systems
engineering processes and have typical situational factors. The “Generic” profile group does not imply
any specific application domain. However, it is envisaged that in the future, new domain-specific sub-
profiles may be developed.
A system can include the associated equipment, facilities, material, software, firmware, technical
documentation, services and personnel required for operations and support to the degree necessary
for use in its intended environment, e.g. enabling system, system-of-interest, system of systems.
The Entry profile is targeted at start-up VSEs (i.e. VSEs who started their operation less than three
years) and/or at VSEs working on small project (e.g. project size of less than six person-months). The
Entry profile is intended to be used with any processes, techniques and methods that enhance the VSE’s
customer satisfaction and productivity.
The Basic profile describes system development of a single application by a single work team with no
special risk or situational factors. The project may be to fulfil an external or internal contract. The
internal contract need not be explicit between the project team and their client.
The Intermediate profile is targeted at VSEs involved in the development of more than one project in
parallel with more than one work team.
The Advanced profile is targeted at VSEs which want to sustain and grow as an independent competitive
system and/or software development business.
10.1 General
The ISO/IEC 29110 series is comprised of multiple documents with different purposes and audiences.
Documents are grouped in three categories: overview, profiles and guides. The overview document,
which is this part of ISO/IEC 29110, is the introductory document for the set of other documents. The
profile documents are the technical specifications for the packaging of the various profile elements.
The guide documents are the user-oriented documents. Figure 1 identifies the major categories and the
existing and planned documents.
VSE profiles are defined to formally package references to other documents and/or parts of other
documents in order to adapt them to a VSEs needs and characteristics. Preparing VSE profiles is an
ISO/IEC JTC1 defined process. It involves producing two types of documents, the profile specifications
and the profile guide.
The generic profile group is applicable to VSEs that do not develop critical systems or software products.
The generic profile group does not imply any specific application domain.
There is a profile specifications for each profile. The profile specification’s purpose is to provide the
formal composition of a profile, provide normative links to the normative subset of standards, e.g.
ISO/IEC/IEEE 12207, ISO/IEC/IEEE 15288 or ISO/IEC/IEEE 15289, used in the profile and to provide
informative links (references) to “input” documents. There is one profile specification document for each
profile group, which is identified as ISO/IEC 29110-4-1 for software engineering, and ISO/IEC 29110-4-
6 for systems engineering.
The management and engineering guides provide guidance for implementation and use of a profile. They
are targeted at VSEs management and technical staff and VSE-related organizations such as technology
transfer centres, government industry ministries, national standards, consortiums and associations,
academic use for training, authors of derived products (software and courseware), acquirers and
suppliers.
Guidelines on how to implement and use profiles (e.g. recommended activities, measures, techniques,
templates, models, methods, etc.) are provided. Generally, there is one management and engineering
guide document for each profile within each profile group, identified as ISO/IEC 29110-5-m-n or
ISO/IEC 29110-6-m-n, where m is the number assigned to the profile group and n the number assigned
to the profile of a profile group. This number matches the number assigned to the profile specification.
10.3.1 Overview
The overview introduces all the major concepts required to understand and use the ISO/IEC 29110
series. It introduces the characteristics and requirements of a VSE and clarifies the rationale for
VSE-specific profiles, documents, standards and guides. It also introduces process, lifecycle and
standardization concepts, the taxonomy (catalogue) and the ISO/IEC 29110 series. It is targeted both
at a general audience interested in these document, and, more specifically, at users of these documents.
The overview document is identified as ISO/IEC 29110-1.
10.3.2 Framework
The framework document establishes the logic behind the definition and application of process
profiles. It specifies the elements common to all process profiles (structure, conformance, assessment)
of ISO/IEC 29110 profiles. The framework document is applicable to all profiles and is identified as
ISO/IEC 29110-2-1.
10.4.1 Guides
Guides are developed for the process implementation and assessment based on the domain’s issues,
business practices and risks. Guides are targeted at VSEs and should be accessible to VSEs, both in
terms of style and cost.
The certification guide describes the process certification guidelines and conformance requirements
needed to meet the purpose of defined VSE Profiles. It contains information that can be useful to
developers of certification methods and certification tools. The targeted audience is primarily those
who perform process certifications for VSEs and who have a direct relation with the certification
process based on the VSE Profiles, e.g. the auditor and the sponsor of the audit, who need guidance
on ensuring that the requirements for performing an audit have been met. The assessment guide is
applicable to all profiles and is identified as ISO/IEC 29110-3.
The assessment guide describes the process to follow in performing an assessment to determine the
process capabilities. This is used when an organization wants an assessment performed in order to
obtain a process capability profile of the implemented processes and/or an organizational process
maturity level. It is also applicable if a customer asks for a third-party assessment evaluation. This
could also be used to obtain a capability level profile of the implemented process by the software
implementation and maintenance provider and is also suitable for a self-assessment. The assessment
guide is applicable to all profiles and is identified as ISO/IEC/TR 29110-3-1.
The concept and framework of autonomy-based improvement method, targeted at VSEs that wants to
improve their activities by themselves, is defined in ISO/IEC/TR 29110-3-4.
Annex A
(informative)
Reference works
A.1 Rationale
Industry and organizations recognize the value of very small entities in contributing valuable products
and services to economy. As quality increasingly becomes a subject of concern and process approaches
are maturing and gaining the confidence of companies, the use of ISO/IEC standards is spreading in
organizations of all sizes. However, these standards were not written for development organizations
with up to 25 people and are consequently difficult to apply in such small settings.
ISO/IEC 29110 aims to address those difficulties by developing profiles and by providing guidance
for conformance with ISO/IEC systems and software engineering standards. The ISO/IEC 29110
series facilitates the use of ISO/IEC/IEEE 12207 processes, ISO/IEC/IEEE 15288 processes, ISO/IEC/
IEEE 15289 information items, and ISO 9001, and provide conformity to subsets of selected base
standards by providing VSE Profiles. Guidance is provided for each process profile together with a
roadmap for conformance with ISO/IEC/IEEE 12207, ISO/IEC/IEEE 15288, and ISO 9001.
Bibliography
ICS 35.080
Price based on 23 pages