GEIA-HB-649-2005 Implementation Guide for Configuration Management《配置管理实施指南》.pdf

1、GEIA ENGINEERING BULLETIN Implementation Guide for Configuration Management GEIA-HB-649 October 2005 GOVERNMENT ELECTRONICS AND INFORMATION TECHNOLOGY ASSOCIATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CtlG!AYf.S f k$.LTWMP% .%ka I

2、SWX.431CCI: TWlWBiV%t klY see for CM functions. 3 Definitions See ANSIEIA-649 for definitions. 4 Symbols and Abbreviations See ANSIEIA-649 for symbols and abbreviations. 1 Copyright Government Electronics i.e., hardware and software, and their related product configuration information. However, CM a

3、nd CM metrics should also focus on the CM processes related to those products. Almost all of the discussion and examples in this handbook relate to the hardware and software products and their product configuration information. In this handbook, the term “project” will be used to define a series of

4、activities which result in the availability of a product, or the simultaneous availability of a number of products working as an integrated and Co-functioning whole. However, the deliverable product of many enterprises is a document or service for which the configuration management process is direct

5、ly applicable, so all of the following CM activities also need to be applied. To understand how to apply the best practices discussed in this handbook to the document and service products, the examples will need to be interpreted or adapted in the context of those “products .” The CM discipline for

6、the enterprise is defined by its CM planning, which may be documented through high-level business policy statements, CM plans, or other documents that apply requirements, policies and procedures to the principles in each of the CM functions. In this handbook, a generic reference to the CM function o

7、r principle may also be referring to the corresponding CM process used in implementing the CM function or principle. For example, the CM planning and management function is implemented using a CM planning and management process that include policies, procedures, and a CM plan; the configuration chan

8、ge management function is implemented using a change management process with supporting detailed procedures. 2 Copyright Government Electronics how are they related? 2. What information is prerequisite to effective planning? 3. What should be considered in the planning for each phase? 5.1.2 5. d .2

9、Annex 1 4. What is appropriate content for CM plans? 5. What are the resources needed to carry out CM during the product life cycle? What skills are needed to perform the CM tasks? . 5.1.4 . . . . . . . . . . . . 6. How will each of the CM functions and principles be implemented? 7. Are the personne

10、l trained for the tasks required? 8. What additional or new training is required? 5.1.5 9. What are the appropriate CM activities, and actions to be performed in each phase? What are the criteria for performing them? What are the objectives and benefits? . 5.1.6 5.9 “6 10. What are appropriate metri

11、cs for the project? 11. What are the methods that can be used to assure that suppliers apply an effective CM process? 5. d .7 12. Is it necessary to establish status level for product configuration information? 13. How are criteria established to assure that the overall intent of ANSI/EIA 649 is met

12、? 14. How can CM performance be evaluated? What is CMMIsM 15. Are methods in place to ensure that transmitted data is usable by performance implementation and assessment? the receiving party? 3. I .8B 16. Is there a plan for long term recovery of product configuration information and status? 17. How

13、 can a CM Planning and Management process be evaluated? Planning involves providing for adequate resources and putting procedures in place to accomplish CM process implementation and tasks. Management involves the monitoring of 3 Copyright Government Electronics i.e., metrics based Life cycle workfi

14、ows are defined CM process is integrated with other processes such as program management, engineering, fabrication, manufacturing, operations, product support Information sources; e.g., customer, performing activity, subordinate supplier, are shared. implemented 0 0 Common data directory/dictionary

15、is 0 Incremental increase or decrease is allowed in the rigor of the CM process appropriate to changes in the requirements. Metrics are used for determining the health of processes and for continuous improvement of processes and products CM is integrated into daily operations to a degree where CM ac

16、tivity is relatively invisible. 0 0 iementation Levels Sample Practices 0 0 0 CM tools are identified 0 CM plan is documented 0 0 Training needs identified CM policy is documented at organization level CM Planning information is made readily available Resources are identified and allocated 0 Process

17、es are deployed for establishing baselines, version control, issue/problem tracking, change coordination/approval/implementation , and requirements management Processes are reviewed to ensure reproducibility 0 0 Roles and communication responsibilities, such as required sign- Offs, are codified in s

18、ystems. Various CM processes, such as requirements management, establishing baselines, version control, defect tracking, and change management, are secure and integrated. Scope of CM process includes traceability, repeatability, verification, validation, and recovery. Processes and systems encourage

19、 reuse of components. CM functions are common among all organizations including partners and suppliers. Interfacing systems; i.e., tools, are fully compatible. 0 0 0 0 0 0 Metrics are established and used for continuous improvement. 0 Process rigor requirements are understood and applied as necessar

20、y to meet progrdenterprise priorities. 5 Copyright Government Electronics examples include structure of Control Board, request for change (RFC), request for variance (RFV), software library for planning the development and the releasing of the product code and documentation. the types of support tha

21、t CM will provide. Types of support may include, but are not limited to, configuration change management board; current status information that depicts the current content of, and changes to, products such as information listings; examples include software libraries, drawings, specifications, mainte

22、nance manuals. 6 Copyright Government Electronics the tables address three different levels of product complexity. They provide guidelines that will aid in the determination of the levels of CM process effort required to be included in a CM Plan based on these environmental issues. IahXe 2 addresses

23、 the environmental issues that focus on the name of the product, including how it will be used and supported. In turn, these product factors will dictate the amount of CM process effort required to adequately manage the product at each of the three levels of product complexity. Requirements related

24、to that level of CM process effort should then be incorporated into the applicable sections of the CM Plan. Normal environment Normal or extreme environment Define and control numerous external interfaces among already- developed components Factory service or factory- authorized service facilities L

25、ittle if any impact Little, if any, (throwaway) Table 2 - CM Product Attribute Ca Sports equipment Desktop/Laptop computer Hand-held calculator Home theater sound Fuel pump system O-ring Motorcycle Amount of Embedded Software None to large Little to large Deiiiery I Number of Delivered Units or Pmdu

26、ction Rate Developmental Aspects Higher quantities or production rate mean increased surveillance may be required as workers accomplish process from memory and fail to regularly check for process changes. Lower quantities or production rate mean increased costs through loss of “efficiency of scale”.

27、 Increased surveillance may be required. Workers do not get enough repetition to become familiar with process. Simple development Complex development Complex development consisting of primarily consisting of product integration generation of new component product designs and of integration of existi

28、ng and new comDonents miderations Very Complex Product Sample: Automobile Airliner Fightedattack aircraft Intercontinental air traffic control system Information Technology (IT) Network Normal or extreme environment many technical areas Factory service or factory-authorized service facilities -Train

29、 customer personnel to analyze and fix product units - Dedicated service force working for customer (on-site or on-call/rapid response) Large to very large For example, in Table 2, the “Where Used” aspect of the product environment would affect the planning for monitoring and accomplishing the imple

30、mentation of approved Requests for Change. The planning would be much different if the implementation had to be accomplished on a product that is to be located in an extreme environment, such as 22,000 miles out in space or inside a nuclear reactor, than on a product that can be accessed in a normal

31、 atmospheric environment. Similarly, the “Expected Product Support” aspect of the product environment would dictate a much less comprehensive configuration status accounting database to be maintained if the product were a “throwaway” than if it were to be subject to regular maintenance events such a

32、s the periodic replacement of life-limited components. 9 Copyright Government Electronics it would be relatively trivial for a simple change to one of the “simple products” defined in extensive for a major change or addition to a complex product as defined in that table. All of the environmental fac

33、tors in those tables need to be addressed in generating the CM planning information. The change will require new product definition information to describe the functional and physical attributes of the changed product; they could be as simple as a few wording changes to an existing specification and

34、 a revision to an existing drawing or as complex as generating several new specifications and a complete set of detail design information. The changes to the product definition information will normally be approved by the Change Board, as it approves the change, see -, to provide the and 3, but it w

35、ould be highly complex and 11 Copyright Government Electronics Le., library environment, accounts, access, privileges, backups. establish requirements for supplier delivery of specific data products; i.e., identifiers, change information packages, drawings, processes. establish product hierarchy est

36、ablish and define baselines issue and revise identifiers for product and product configuration information. See JaJe establish and maintain design activities that generate CM baseline information establish and maintain Change Board (CB) Operating procedures including schedule dates and facilities pa

37、rticipate, as a CB member or authorized decision maker for the CB, in generation and review of Requests for Change (RFC) and Requests for Variance (RFV) ensure that an approval signature is provided before baselining or releasing product definition information identi the change approval designee as

38、the change approval authority(s) for changes to each product obtain the appointment of change approval authority (s) for changes to each product record discussions and decisions at board meetings and publish official results of meetings 13 Copyright Government Electronics i.e., record required CM pr

39、oduct configuration information into the database maintain records that provide complete historical evidence of changes to the baseline verify and validate change implementation generate backup copies of database for remote storage on periodic basis execute to the Audit Plan, gather Audit Documentat

40、ion per the CM planning, perform Audit and record action items for disposition, verify completion of action items, and close-out the Audit perform periodic CM review and assessment, identify problems and potential “cures,” and implement improvements into policy and procedure documentation verify tha

41、t the CM process provides traceability of requirements to the product for the product life cycle define, establish and maintain the configuration change life cycle for each product Figure 2 - Example CM Activities/responsibilities Examples of the types of resources commonly needed for the CM process

42、 are: - personnel - includes numbers of full-time/part-time personnel or numbers of man-years for specific CM skills. - facilities - includes office space, meeting rooms, records storage areas, furniture, computers, and communications equipment. - information systems - includes sufficient file serve

43、rs to support the user base, on-line access, adequate back-up systems, and secure remote storage facilities. - CM tools - includes Product Data Management (PDM) applications, software development tools, product life cycle management applications, software for authoring drawings/specifications/text d

44、ocuments/changes. F3g.ru.3 is a case study of CM resource planning based on context and environment factors for a hypothetical program that identifies the CM roles for the hypothetical product. Annex 5 of this handbook provides a CM process self-assessment tool based on the Integrated Capability Mat

45、urity Model. As the allocation of personnel, responsibilities, and resources is being finalized, this tool can be helpful in affirming many of the allocations made. 14 Copyright Government Electronics e.g., configuration change management, supplemented by one or more lower level procedures for the i

46、mportant sub-functions of each CM function; e.g., Requests for Change, Requests for Variance, and change boards. As with planning, procedures may be applied to a range of products, or tailored for individual products. Procedures are intended to control implementation of CM functions and, therefore,

47、must be carefully evaluated to ensure that they are consistent with CM planning. Procedures should be documented in tiers or levels with expanding degrees of detail. The suggested format includes four (4) tiers with accompanying guidance material, standards and reference documentation. See Figme 4.

48、This 4-tier structure provides many advantages; the top tiers can remain somewhat stable because, once established, policy and 15 Copyright Government Electronics as processes and tools to support these policies and requirements mature, only the affected work instruction(s) or process document are s

49、ubject to change. Level II Process Level III Procedure Figure 4 - Sample Document Hierarchy CM and many other specialized management activities like Data Management, Systems Engineering, and Quality Control, are referred to as disciplines. A “discipline“ is defined as, among other things, “a set of rules and methods, and a specified pattern of behavior that results fi-om rigorous training and practice“. However, each enterprise will implement the CM discipline utilizing Policies, Plans, Processes, and Procedures, as explained in T it should be continuous as processes change, persona