1、 Collection of SANS standards in electronic format (PDF) 1. Copyright This standard is available to staff members of companies that have subscribed to the complete collection of SANS standards in accordance with a formal copyright agreement. This document may reside on a CENTRAL FILE SERVER or INTRA
2、NET SYSTEM only. Unless specific permission has been granted, this document MAY NOT be sent or given to staff members from other companies or organizations. Doing so would constitute a VIOLATION of SABS copyright rules. 2. Indemnity The South African Bureau of Standards accepts no liability for any
3、damage whatsoever than may result from the use of this material or the information contain therein, irrespective of the cause and quantum thereof. ISBN 978-0-626-21378-7 SANS 25001:2008Edition 1ISO/IEC 25001:2007Edition 1SOUTH AFRICAN NATIONAL STANDARD Software engineering Software product Quality R
4、equirements and Evaluation (SQuaRE) Planning and management This national standard is the identical implementation of ISO/IEC 25001:2007 and is adopted with the permission of the International Organization for Standardization and the International Electrotechnical Commission. Published by Standards
5、South Africa 1 dr lategan road groenkloof private bag x191 pretoria 0001 tel: 012 428 7911 fax: 012 344 1568 international code + 27 12 www.stansa.co.za Standards South Africa SANS 25001:2008 Edition 1 ISO/IEC 25001:2007 Edition 1 Table of changes Change No. Date Scope National foreword This South A
6、frican standard was approved by National Committee StanSA SC 71C, Information technology ICT systems and software engineering, in accordance with procedures of Standards South Africa, in compliance with annex 3 of the WTO/TBT agreement. This SANS document was published in May 2008. Reference numberI
7、SO/IEC 25001:2007(E)ISO/IEC 2007INTERNATIONAL STANDARD ISO/IEC25001First edition2007-02-01Software engineering Software productQuality Requirements and Evaluation (SQuaRE) Planning and management Ingnierie du logiciel Exigences de qualit et valuation du produit logiciel (SQuaRE) Planification et ges
8、tion SANS 25001:2008This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .ISO/IEC 25001:2007(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, this file may be printed or viewed but shall no
9、t be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In downloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secretariat accepts no liability in this area. Adob
10、e is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO m
11、ember bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the address given below. ISO/IEC 2007 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electroni
12、c or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org W
13、eb www.iso.org Published in Switzerland ii ISO/IEC 2007 All rights reservedSANS 25001:2008This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .ISO/IEC 25001:2007(E) ISO/IEC 2007 All rights reserved iiiContentsFOREWORD iv INTRODUCTION.v 1 SCOPE 1 2
14、 CONFORMANCE 1 3 NORMATIVE REFERENCES 24 TERMS AND DEFINITIONS .34.1 EVALUATION ACTIVITY 3 4.2 EVALUATION GROUP .3 4.3 EVALUATION TECHNOLOGY (TECHNOLOGY USED FOR EVALUATION) .3 4.4 TECHNIQUES 3 5 EVALUATION MANAGEMENT CONCEPTS 3 6 REQUIREMENTS AND RECOMMENDATIONS FOR SOFTWARE QUALITY REQUIREMENTS SP
15、ECIFICATION QUALITY EVALUATION 46.1 GENERAL .4 6.2 ORGANISATION LEVEL ACTIVITIES 5 6.3 PROJECT MANAGEMENT LEVEL ACTIVITIES .8 6.4 ANALYSIS AND USE OF EVALUATION RESULTS .9 Annex A (Informative) Quality Evaluation Project Plan Template .11 Bibliography15 SANS 25001:2008This s tandard may only be used
16、 and printed by approved subscription and freemailing clients of the SABS .ISO/IEC 25001:2007(E) iv ISO/IEC 2007 All rights reservedForeword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide stan
17、dardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields o
18、f mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in ac
19、cordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International
20、Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibility that some of the elements of ISO/IEC 25001 may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 25
21、001 makes a part of SQuaRE series of standards and was prepared by Joint Technical Committee ISO/IEC JTC 1, Information Technology, Subcommittee SC 7, Software and system engineering. SQuaRE series of standards consists of the following divisions under the general title Software product Quality Requ
22、irements and Evaluation: Quality Management Division (2500n), Quality Model Division (2501n), Quality Measurement Division (2502n), Quality Requirements Division (2503n), and Quality Evaluation Division (2504n). SANS 25001:2008This s tandard may only be used and printed by approved subscription and
23、freemailing clients of the SABS .ISO/IEC 25001:2007(E) ISO/IEC 2007 All rights reserved vIntroduction ISO/IEC 25001 provides details about the planning and management requirements associated with software product quality requirements and evaluation. While this standard is mainly concerned with produ
24、ct quality requirements and evaluation, wherever it is relevant the corresponding process requirements and evaluation activities are also discussed. This standard aims to clarify the requirements which should be identified by the organization in order to ensure the success of specifying quality requ
25、irements and executing the evaluation. This International Standard is intended to be used in conjunction with the other parts of the SQuaRE series (ISO/IEC 250nn) of standards, and with ISO/IEC 14598 and ISO/IEC 9126-1 until superseded by the ISO/IEC 25000 series of standards. This International Sta
26、ndard complies with the technical processes identified in ISO/IEC 15288 related to quality requirements definition and analysis. Figure 1 Organization of SQuaRE series of standards Figure 1 (quoted after ISO/IEC 25000) illustrates the organisation of the SQuaRE series representing families of standa
27、rds, further called Divisions. The Divisions within SQuaRE model are: ISO/IEC 2500n Quality Management Division. The standards that form this division define all common models, terms and definitions referred further by all other standards from SQuaRE series. Referring paths (guidance through SQuaRE
28、documents) and high level practical suggestions in applying proper standards to specific application cases offer help to all types of users. The division Quality Requirements Division 2503n Quality Evaluation Division 2504n Quality Model Division 2501n Quality Measurement Division 2502n Quality Mana
29、gement Division 2500n SANS 25001:2008This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .ISO/IEC 25001:2007(E) vi ISO/IEC 2007 All rights reservedalso provides requirements and guidance for an evaluation group which is responsible for the managem
30、ent of software product quality requirements specification and quality evaluation. ISO/IEC 2501n Quality Model Division. The standard that forms this division presents a detailed quality model including characteristics for internal, external and quality in use. Furthermore, the internal and external
31、 software quality characteristics are decomposed into subcharacteristics. Practical guidance on the use of the quality model is also provided. ISO/IEC 2502n Quality Measurement Division. The standards that form this division include a software product quality measurement reference model, mathematica
32、l definitions of quality measures, and practical guidance for their application. Presented measures apply to internal software quality, external software quality and quality in use. Quality measure elements forming foundations for the latter measures are defined and presented, ISO/IEC 2503n Quality
33、Requirements Division. The standard that forms this division helps specifying quality requirements. These quality requirements can be used in the process of quality requirements elicitation for a software product to be developed or as input for an evaluation process. The requirements definition proc
34、ess is mapped to technical processes defined in ISO/IEC 15288, ISO/IEC 2504n Quality Evaluation Division. The standards that form this division provide requirements, recommendations and guidelines for software product evaluation, whether performed by evaluators, acquirers or developers. The support
35、for documenting a measure as an Evaluation Module is also presented. SANS 25001:2008This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .INTERNATIONAL STANDARD ISO/IEC 25001:2007(E) ISO/IEC 2007 All rights reserved 1Software engineering Software p
36、roduct Quality Requirements and Evaluation (SQuaRE) Planning and management 1 Scope This International Standard provides requirements and recommendations for an organization responsible for implementing and managing the software product quality requirements specification and software quality evaluat
37、ion activities through the provision of technology, tools, experiences and management skills. The role of the evaluation group includes motivating people and training them for the requirements specification activities and the evaluation activities, preparing appropriate documents, identification or
38、development of required methods, and responding to queries on relevant technologies. Technology management is related to the planning and management of a software quality requirements specification and evaluation process, measures and tools. This includes the management of development, acquisition,
39、standardization, control, transfer and feedback of requirements specification and evaluation technology experiences within the organisation. The intended users of ISO/IEC 25001 are those responsible for: managing technologies used for requirements specification and evaluation execution, specifying s
40、oftware product quality requirements, supporting software product quality evaluation, managing software development organisations, as well as those in a quality assurance function. It is also applicable to managers involved in other software related activities. 2 Conformance In order to conform to I
41、SO/IEC 25001, an organization shall apply requirements from Clause 6 giving the reasons for any exclusion, or describe its own recommendations and provide a mapping to the original requirements. SANS 25001:2008This s tandard may only be used and printed by approved subscription and freemailing clien
42、ts of the SABS .3 Normative references The following referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 25
43、000, Software engineering Software product Quality Requirements and Evaluation (SQuaRE) Guide to SQuaRE ISO/IEC 25020, Software and System Engineering Software product Quality Requirements and Evaluation (SQuaRE) Quality measurement Measurement reference model and guide ISO/IEC 25030, Software engin
44、eering Software product Quality Requirements and Evaluation (SQuaRE) Quality requirements ISO/IEC 25051, Software engineering Software product Quality Requirements and Evaluation (SQuaRE) Requirements for quality of Commercial Off-The-Shelf (COTS) software product and instructions for testing ISO/IE
45、C 15288, Systems engineering System life cycle processes ISO/IEC 25001:2007(E) SANS 25001:2008This standard may only be used and printed by approved subscription and freemailing clients of the SABS .4 Terms and definitions For the purpose of this document, the terms and definitions given in ISO/IEC
46、25000 and thefollowing apply. 4.1 evaluation activity assessment of a software product against identified and applicable quality characteristics performed using applicable techniques or methods 4.2 evaluation group organization responsible for specifying the software quality requirements as well as
47、managing and implementing the software quality evaluation activities through the provision of technology, tools, experiences, and management skills 4.3 evaluation technology (technology used for evaluation) techniques, processes, tools, measures and relevant technical information used for evaluation
48、 NOTE These include internal, external or quality in use measures or specific evaluation processes designed for developers, acquirers or independent evaluators. 4.4 techniques methods and skills required to carry out a specific activity 5 Evaluation management concepts The ISO/IEC 25001 is applicabl
49、e to the evaluation group, which provides the organisation-wide support to all projects in software development, software acquisition and third party evaluation organisations (see Table 1). DEVELOPED SOFTWARE ACQUIRED SOFTWARE Development Activities Evaluation Activities Acquisition Activities Evaluation Activities The “deliverables“ are dependent upon the chosen life cycle (see ISO/IEC 15288) e.g. System Requirements Specification, Systems Design Specification Evaluation of sp
