1、 Collection of SANS standards in electronic format (PDF) 1. Copyright This standard is available to staff members of companies that have subscribed to the complete collection of SANS standards in accordance with a formal copyright agreement. This document may reside on a CENTRAL FILE SERVER or INTRA
2、NET SYSTEM only. Unless specific permission has been granted, this document MAY NOT be sent or given to staff members from other companies or organizations. Doing so would constitute a VIOLATION of SABS copyright rules. 2. Indemnity The South African Bureau of Standards accepts no liability for any
3、damage whatsoever than may result from the use of this material or the information contain therein, irrespective of the cause and quantum thereof. ISBN 978-0-626-23160-6 SANS 90005:2009Edition 1 ISO/IEC TR 90005:2008Edition 1 SOUTH AFRICAN NATIONAL STANDARD Systems engineering Guidelines for the app
4、lication of ISO 9001 to system life cycle processes This national standard is the identical implementation of ISO/IEC TR 90005:2008 and is adopted with the permission of the International Organization for Standardization and the International Electrotechnical Commission. Published by SABS Standards
5、Division 1 Dr Lategan Road Groenkloof Private Bag X191 Pretoria 0001Tel: +27 12 428 7911 Fax: +27 12 344 1568 www.sabs.co.za SABS SANS 90005:2009 Edition 1 ISO/IEC TR 90005:2008 Edition 1 Table of changes Change No. Date Scope National foreword This South African standard was approved by National Co
6、mmittee SABS SC 71C, Information technology Systems and software engineering, in accordance with procedures of the SABS Standards Division, in compliance with annex 3 of the WTO/TBT agreement. This SANS document was published in October 2009. Reference numberISO/IEC TR 90005:2008(E)ISO/IEC 2008TECHN
7、ICAL REPORT ISO/IECTR90005First edition2008-07-15Systems engineering Guidelines for the application of ISO 9001 to system life cycle processes Ingnierie des systmes Lignes directrices pour lapplication de lISO 9001 aux processus de cycle de vie des systmes SANS 90005:2009This s tandard may only be u
8、sed and printed by approved subscription and freemailing clients of the SABS .ISO/IEC TR 90005:2008(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are em
9、bedded are licensed to and installed on the computer performing the editing. In downloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secretariat accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporate
10、d. Details of the software products used to create this PDF file can be found in the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event that a pr
11、oblem relating to it is found, please inform the Central Secretariat at the address given below. COPYRIGHT PROTECTED DOCUMENT ISO/IEC 2008 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical,
12、 including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs member body in the country of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org P
13、ublished in Switzerland ii ISO/IEC 2008 All rights reservedSANS 90005:2009This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .ISO/IEC TR 90005:2008(E) ISO/IEC 2008 All rights reserved iiiContents Page Foreword iv Introduction.v 1 Scope1 1.1 Purpo
14、se 1 1.2 Field of Application .1 1.3 Limitations .1 2 Terms and definitions .2 3 System Life Cycle Guidelines 3 4 ISO 9001 Sections not yet invoked in Table 5 133 Bibliography135 SANS 90005:2009This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .
15、ISO/IEC TR 90005:2008(E) iv ISO/IEC 2008 All rights reservedForeword ISO (the International Organization for Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate
16、in the development of International Standards through technical committees established by the respective organization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and n
17、on-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information technology, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The mai
18、n task of the joint technical committee is to prepare International Standards. Draft International Standards adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casti
19、ng a vote. In exceptional circumstances, the joint technical committee may propose the publication of a Technical Report of one of the following types: type 1, when the required support cannot be obtained for the publication of an International Standard, despite repeated efforts; type 2, when the su
20、bject is still under technical development or where for any other reason there is the future but not immediate possibility of an agreement on an International Standard; type 3, when the joint technical committee has collected data of a different kind from that which is normally published as an Inter
21、national Standard (“state of the art”, for example). Technical Reports of types 1 and 2 are subject to review within three years of publication, to decide whether they can be transformed into International Standards. Technical Reports of type 3 do not necessarily have to be reviewed until the data t
22、hey provide are considered to be no longer valid or useful. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC TR 90005, which is a Tech
23、nical Report of type 3, was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 7, Software and systems engineering. SANS 90005:2009This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .ISO/IEC TR 90005:2008
24、(E) ISO/IEC 2008 All rights reserved vIntroduction This Technical Report has been prepared based on a number of concepts. 1. Enterprise versus Project ISO/IEC 15288 uses the term Enterprise to represent the organization within which projects are conducted using the system life cycle processes define
25、d. It mainly considers the processes that provide support and resources to projects rather than an exhaustive set of processes that cover all aspects of the organizations business. ISO 9001:2000 does not use the term project but focuses on what an organization needs to do to satisfy customer require
26、ments through product realization. It is possible to interpret a project in ISO 9001:2000 as either instantiated through the management processes or as an instance of product realization. This Technical Report therefore includes references to Clause 5 (Management in ISO 9001:2000) and Clause 7 (Prod
27、uct realization) in many cases as alternative ways to interpret ISO 9001:2000. 2. Rationale others may specialize in one area. Whatever the situation, the organizations quality management system should cover all aspects (system related and non-system related) of the business. 1.3 Limitations This Te
28、chnical Report provides guidance for software intensive systems. For guidance in software development, operation and maintenance see the companion document ISO/IEC 90003. ISO/IEC 2008 All rights reserved 1SANS 90005:2009This s tandard may only be used and printed by approved subscription and freemai
29、ling clients of the SABS .ISO/IEC TR 90005:2008(E) 2 Terms and definitions For the purposes of this document, the following terms and definitions apply. 2.1 system (1) combination of interacting elements organized to achieve one or more stated purposes NOTE 1 A system may be considered as a product
30、or as the services it provides. NOTE 2 In practice, the interpretation of its meaning is frequently clarified by the use of an associative noun, e.g. aircraft system. Alternatively the word system may be substituted simply by a context dependent synonym, e.g. aircraft, though this may then obscure a
31、 system principles perspective. ISO/IEC 15288:2002 NOTE 3 This is the definition used in the ISO/IEC 15288 column of Clause 3. 2.2 system (2) set of interrelated or interacting elements ISO 9000:2005 NOTE This is the definition used in the ISO 9001 column of Clause 3. ISO/IEC TR 90005:2008(E)2 ISO/I
32、EC 2008 All rights reservedSANS 90005:2009This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .3 System LifeCycle GuidelinesISO/IEC 15288 textRationale/Explanation ISO9001 para. ISO9001 text5 SystemLife Cycle Processes 5.1Introduction Thisclause d
33、escribestherequirementsforthe life cycle processes.It definestheirpurposesandoutcomes,and theactivitiesrequired to achieve them.An organizationconductsthelife cycle processesselectivelyto fulfil the purpose and outcomesoflifecycle stages. The life cycle processesaredescribedin fourprocessgroupsasfol
34、lows:Agreement processes;Enterprise processes;Projectprocesses;Technicalprocesses.No Comment N/A N/A 5.2AgreementProcesses 5.2.1Introduction Thissubclause specifiesthe requirementsforthe establishment ofagreementswithorganizationalentitiesexternal and internal to the organization. The Agreement Proc
35、essesconsist ofthe following:a)Acquisition Process used byorganizationsforacquiring productsorservices; b)SupplyProcessusedbyorganizationsforsupplying productsorservices.These processes define the activitiesnecessaryto establish anagreement between two organizations. IftheAcquisition Processisinvoke
36、d, it providesthemeansforconducting businesswith a supplierofproductsthataresupplied foruse asan operational system, of servicesin support ofanoperational system, orofelementsofasystembeing developedbya project. Ifthe SupplyProcessisinvoked, it providesthemeansforconducting aproject in whichtheresul
37、tisaproduct orservice thatisdelivered totheacquirer. No Comment N/A N/A ISO/IEC TR 90005:2008(E) ISO/IEC 2008 All rights reserved 3SANS 90005:2009This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .ISO/IEC 15288 textRationale/Explanation ISO9001
38、para. ISO9001 text5.2.2AcquisitionProcess 5.2.2.1Purposeofthe AcquisitionProcess The purpose ofthe AcquisitionProcessistoobtain a productorservice in accordancewiththe acquirersrequirements.N/A N/A 5.2.2.3AcquisitionProcess Activities The acquirershallimplement the following activitiesinaccordance w
39、ith applicableorganizationalpoliciesandprocedureswith respect to the Acquisition Process.No Comment N/A N/A a)Establish a planforhowthe acquisition willbeconducted. Conceptually,inISO9001,thisrequirement relatesto purcha-sing. However,the establishment ofthe plan foracquisition can berecognized asa
40、partofquality planning ofa product. Once an organizationhasdecided to acquiresomethingfromothers,concernsmay include the evaluationandselection ofsuppliers.7.1 7.4.1 The organization shall plan and develop theprocessesneeded forproduct realization. The organizationshallevaluate and selectsuppliersba
41、sedontheirabilitytosupplyproduct inaccordance with the organizationsrequirements.b)Preparea request forthe supplyofa product orservice.Thisrequirement refersto theselection ofsuppliers.Toimplement thisrequirementmeansthe identificationoftherequirementsofthe product tobe purchased. The requirement of
42、purchasingmayincludethe criteriaoftheapprovalofreceipt. 7.4.1 7.4.2 The organizationshallevaluate and selectsuppliersbasedontheirabilitytosupplyproduct inaccordance with the organizationsrequirements.Purchasing information shalldescribetheproduct to be purchased, including whereappropriate a)require
43、mentsforapproval ofproduct,procedures, processesandequipment, b)requirementsforqualification ofpersonnel,and c)qualitymanagement systemrequirements.ISO/IEC TR 90005:2008(E)4 ISO/IEC 2008 All rights reservedSANS 90005:2009This s tandard may only be used and printed by approved subscription and freema
44、iling clients of the SABS .ISO/IEC 15288 textRationale/Explanation ISO9001 para. ISO9001 textThe organizationshallensure the adequacyofspecified purchase requirementspriorto theircommunicationto the supplier.c)Communicate the request forthe supplyofaproduct orservice to identified suppliers.Thisrequ
45、irement ispartly equivalent to 7.4.1 ofISO9001 Thisrequirement ispartly equivalent to 7.4.2 ofISO9001 7.4.1 7.4.2 The organization shall ensure that purchasedproduct conformsto specified purchaserequirements.The type and extentofcontrolapplied to the supplierand the purchasedproduct shall be depende
46、nt upontheeffectofthe purchasedproduct onsubsequentproductrealization orthe final product. Purchasing information shalldescribetheproduct to be purchased, including whereappropriate a)requirementsforapproval ofproduct,procedures, processesandequipment, b)requirementsforqualification ofpersonnel,and
47、c)qualitymanagement systemrequirements.The organizationshallensure the adequacyofspecified purchase requirementspriorto theircommunicationto the supplier.d)Selecta supplier.Fromthe viewpointofISO9001, thisrequirement iscovered in 7.4.1 underselec-tionfollowed byevaluation.7.4.1 The organizationshall
48、evaluate and selectsuppliersbasedontheirabilitytosupplyproduct inaccordance with the organizationsrequirements.e)Negotiate an agreement with thesupplier. The intent ofthisrequirementmayincludethe negotiationbetween organizationandsupplierThe negotiation mayincludethe definition ofpurchasinginformati
49、on. 7.4.1 7.4.2 The typeand extentofcontrolappliedtothesupplierand the purchased product shall bedependent upon the effectofthe purchasedproduct on subsequent product realization orthe final product. Purchasing information shalldescribetheproduct to be purchased, including whereappropriate ISO/IEC TR 90005:2008(E) ISO/IEC 2008 All rights reserved 5SANS 90005:2009This s tandard may only be used and printed by approved subscription and freemailing clients of the SABS .ISO/IEC 15288 textRationale/Explanation
