1、BRITISH STANDARD BS ISO/IEC 15504-1:2004 Information technology Process assessment Part 1: Concepts and vocabulary ICS 35.080 BS ISO/IEC 15504-1:2004 This British Standard was published under the authority of the Standards Policy and Strategy Committee on 22 November 2004 BSI 22 November 2004 ISBN 0
2、 580 44813 4 National foreword This British Standard reproduces verbatim ISO/IEC 15504-1:2004 and implements it as the UK national standard. It supersedes BS ISO/IEC TR 15504-1:1998 and BS ISO/IEC TR 15504-9:1998 which are withdrawn. The UK participation in its preparation was entrusted to Technical
3、 Committee IST/15, Software engineering, which has the responsibility to: A list of organizations represented on this committee can be obtained on request to its secretary. Cross-references The British Standards which implement international publications referred to in this document may be found in
4、the BSI Catalogue under the section entitled “International Standards Correspondence Index”, or by using the “Search” facility of the BSI Electronic Catalogue or of British Standards Online. This publication does not purport to include all the necessary provisions of a contract. Users are responsibl
5、e for its correct application. Compliance with a British Standard does not of itself confer immunity from legal obligations. aid enquirers to understand the text; present to the responsible international/European committee any enquiries on the interpretation, or proposals for change, and keep the UK
6、 interests informed; monitor related international and European developments and promulgate them in the UK. Summary of pages This document comprises a front cover, an inside front cover, the ISO/IEC title page, pages ii to v, a blank page, pages 1 to 19 and a back cover. The BSI copyright notice dis
7、played in this document indicates when the document was last issued. Amendments issued since publication Amd. No. Date Comments Reference number ISO/IEC 15504-1:2004(E) OSI4002 CEI/INTERNATIONAL STANDARD ISO/IEC 15504-1 First edition 2004-11-01 Information technology Process assessment Part 1: Conce
8、pts and vocabulary Technologies de linformation valuation des procds Partie 1: Concepts et vocabulaire BSISO/IEC155041:2004IS/OIE40551 C-1:002(4)E DPlcsid Fremia ihTs PDF file may ctnoian emdebt dedyfepcaes. In ccaocnadrw eith Aebods licensilop gnic,y this file mairp eb ynted iv roweb detu slahl ton
9、 ide ebtlnu deess the typefaces whice era hml era deddebicsnede to i dnanstlaled t noeh computfrep reormign tide ehtin.g In wodlnidaot gnhis file, trapise atpecc tiereht nser ehnopsiiblity fo not infriigngn Aebods licensilop gnic.y ehT ISO tneClar Secrteiraat caceptl on siibality in this .aera Ai eb
10、ods a tredamafo kr Aebod SystemI sncotaropr.de teDails fo teh softwacudorp erts sut deo crtaee this PDF file cna f ebi dnuon tlareneG eh Info leratit evo the file; tP ehDc-Frtaeion marapterew setpo erimizde for irpnti.gn Evyre caer neeb sah taken to sneeru that the file is suitlbae fosu re yb ISO me
11、mdob rebeis. In tlnu ehikletneve y ttah lborp aem leratit gno it is f,dnuo plsaee inform ttneC ehlar Secrteiraat ta the serddaig sleb nevwo. ISO/IE4002 C All irthgs erse.devr lnUeto sswrehise specified, on trap fo this lbupictaion maeb y cudorperro de tuilizi den yna form ro na ybm ynae,s lecetrinoc
12、 ro mecinahcal, inclidung tohpcoiypodna gn micrfoilm, wittuoh repmissii non writign from ietI rehSa Ot tsserdda eh ebolw or ISOs memreb i ydobn the cnuotrfo y ttseuqer ehe.r ISO cirypothg fofice saCe tsopale 65 eneG 1121-HC 02 av leT. 4 + 10 947 22 1 11 xaF0 947 22 14 + 9 74 E-mail coirypthgiso.o gr
13、 We bwww.is.o gro Pulbisdehi n Switlrez dnaii ISO/IE 4002 C Allr ihgtsser edevrBSISO/IEC155041:2004IS/OIE40551 C-1:002(4)E I SO/IE 4002 C All irhgts seredevr iiiContents Page Foreword iv Introduction v 1 Scope 1 2 Normative references. 1 3 Terms and definitions. 1 4 Concept 7 4.1 General. 7 4.1.1 Pu
14、rpose and benefits 7 4.1.2 Field of application . 8 4.1.3 Components of ISO/IEC 15504. 9 4.1.4 Relationship to other International Standards. 12 4.2 The assessment framework. 13 4.2.1 The context of assessment process . 13 4.2.2 Assessment indicators. 14 4.3 Competency of assessors 14 4.4 Process im
15、provement context. 15 4.5 Process capability determination context 16 5 Conformance. 17 Annex A (informative) Classified terms and definitions. 18 A.1 Model architecture terms . 18 A.2 Process terms. 18 A.3 Measurement framework terms. 18 A.4 Assessment process terms . 19 A.5 Assessor terms. 19 A.6
16、Process improvement terms 19 A.7 Process capability determination terms. 19 Figures and Tables Figure 1 Process Assessment Relationship. 8 Figure 2 Components of ISO/IEC 15504 10 Figure 3 Overview of relationship of elements of ISO/IEC 15504. 12 Figure 4 The major elements of the assessment process
17、13 Figure 5 Process Assessment Model relationships 14 Figure 6 Process improvement 15 Figure 7 Process capability determination. 16 Table 1 Readership of ISO/IEC 15504 10 BSISO/IEC155041:2004IS/OIE40551 C-1:002(4)E iv I SO/IE 4002 C All irhgts seredevrForeword ISO (the International Organization for
18、 Standardization) and IEC (the International Electrotechnical Commission) form the specialized system for worldwide standardization. National bodies that are members of ISO or IEC participate in the development of International Standards through technical committees established by the respective org
19、anization to deal with particular fields of technical activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the work. In the field of information techno
20、logy, ISO and IEC have established a joint technical committee, ISO/IEC JTC 1. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The main task of the joint technical committee is to prepare International Standards. Draft International Standards
21、 adopted by the joint technical committee are circulated to national bodies for voting. Publication as an International Standard requires approval by at least 75 % of the national bodies casting a vote. Attention is drawn to the possibility that some of the elements of this document may be the subje
22、ct of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent rights. ISO/IEC 15504-1 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 7, Software and system engineering. This edition cancels and replaces ISO/IEC
23、 TR 15504-1:1998 and ISO/IEC TR 15504-9:1998, which have been technically revised. ISO/IEC 15504 consists of the following parts, under the general title Information technology Process assessment: Part 1: Concepts and vocabulary Part 2: Performing an assessment Part 3: Guidance on performing an asse
24、ssment Part 4: Guidance on use for process improvement and process capability determination The following part is in preparation: Part 5: An exemplar Process Assessment Model The complete series will replace ISO/IEC TR 15504-1 to ISO/IEC TR 15504-9. BSISO/IEC155041:2004IS/OIE40551 C-1:002(4)E I SO/I
25、E 4002 C All irhgts seredevr vIntroduction This part of ISO/IEC 15504 provides a general introduction to the concepts of process assessment and a glossary for assessment related terms. ISO/IEC 15504-2 sets out the minimum requirements for performing an assessment that ensure consistency and repeatab
26、ility of the ratings. The requirements help to ensure that the assessment output is self-consistent and provides evidence to substantiate the ratings and to verify compliance with the requirements. ISO/IEC 15504-3 provides guidance for interpreting the requirements for performing an assessment. ISO/
27、IEC 15504-4 identifies process assessment as an activity that can be performed either as part of a process improvement initiative or as part of a capability determination approach. The purpose of process improvement is to continually improve the organizations effectiveness and efficiency. The purpos
28、e of process capability determination is to identify the strengths, weaknesses and risks of selected processes with respect to a particular specified requirement through the processes used and their alignment with the business need. ISO/IEC 15504-5 contains an exemplar Process Assessment Model that
29、is based upon the Process Reference Model defined in ISO/IEC 12207 Amd 1 Annex F and Amd 2. An assessment is carried out utilizing conformant Process Assessment Model(s) related to one or more conformant or compliant Process Reference Models. BSISO/IEC155041:2004blank 4002:140551CEI/OSISBINTENRATION
30、AL TSANDADR IS/OIE40551 C-1:002(4)EI SO/IE 4002 C All irhgts seredevr 1Information technology Process assessment Part 1: Concepts and vocabulary 1 Scope This part of ISO/IEC 15504 provides overall information on the concepts of process assessment and its use in the two contexts of process improvemen
31、t and process capability determination. It describes how the parts of the suite fit together, and provides guidance for their selection and use. It explains the requirements contained within ISO/IEC 15504, and their applicability to performing assessments. Readers of this guide should familiarize th
32、emselves with the terminology and structure of the document suite, and then reference the appropriate parts of the suite for the context in which they propose to conduct an assessment. A more detailed description of the use of ISO/IEC 15504 is given in clause 4. 2 Normative references The following
33、referenced documents are indispensable for the application of this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO 9000:2000, Quality management systems Fundamentals and voca
34、bulary ISO/IEC 2382-1:1993, Information technology Vocabulary Part 1: Fundamental terms ISO/IEC 2382-20:1990, Information technology Vocabulary Part 20: System development ISO/IEC 12207:1995, Amd 1:2002, Amd 2:2004. Information technology Software life cycle processes ISO/IEC 15288:2002, Systems eng
35、ineering System life cycle processes 3 Terms and definitions For the purposes of this document, the terms and definitions given in ISO 9000, ISO/IEC 2382-1, ISO/IEC 2382-20, ISO/IEC 12207 and ISO/IEC 15288 and the following apply. 3.1 acquirer the stakeholder that acquires or procures a product or s
36、ervice from a supplier ISO/IEC 15288 NOTE Other terms commonly used for an acquirer are buyer, customer, purchaser. The acquirer may at the same time be the owner, user or operating organization. BSISO/IEC155041:2004IS/OIE40551 C-1:002(4)E 2 I SO/IE 4002 C All irhgts seredevr3.2 assessed capability
37、the output of one or more relevant process assessments conducted in accordance with the provisions of ISO/IEC 15504 3.3 assessment constraints restrictions placed on the use of the assessment outputs and on the assessment teams freedom of choice regarding the conduct of the assessment 3.4 assessment
38、 indicator sources of objective evidence used to support the assessors judgement in rating process attributes EXAMPLE Work products, practice, or resource 3.5 assessment input information required before a process assessment can commence 3.6 assessment instrument a tool or set of tools that is used
39、throughout an assessment to assist the assessor in evaluating the performance or capability of processes, in handling assessment data and in recording the assessment results 3.7 assessment output all of the tangible results from an assessment (see assessment record) 3.8 assessment participant an ind
40、ividual who has responsibilities within the scope of the assessment NOTE Examples include but are not limited to the assessment sponsor, assessors, and organizational unit members. 3.9 assessment process a determination of the extent to which the organizations standard processes contribute to the ac
41、hievement of its business goals and to help the organization focus on the need for continuous process improvement ISO/IEC 12207 Amd 1 3.10 assessment purpose a statement, provided as part of the assessment input, which defines the reasons for performing the assessment 3.11 assessment record an order
42、ly, documented collection of information which is pertinent to the assessment and adds to the understanding and verification of the process profiles generated by the assessment 3.12 assessment scope a definition of the boundaries of the assessment, provided as part of the assessment input, encompass
43、ing the organizational limits of the assessment, the processes to be included, and the context within which the processes operate (see process context) BSISO/IEC155041:2004IS/OIE40551 C-1:002(4)E I SO/IE 4002 C All irhgts seredevr 33.13 assessment sponsor the individual or entity, internal or extern
44、al to the organizational unit being assessed, who requires the assessment to be performed, and provides financial or other resources to carry it out 3.14 assessment team one or more individuals who jointly perform a process assessment 3.15 assessor an individual who participates in the rating of pro
45、cess attributes NOTE An assessor is either a competent assessor or a provisional assessor. 3.16 attribute indicator an assessment indicator that supports the judgement of the extent of achievement of a specific process attribute 3.17 base practice an activity that, when consistently performed, contr
46、ibutes to achieving a specific process purpose 3.18 capability dimension the set of elements in a Process Assessment Model explicitly related to the Measurement Framework for Process Capability NOTE The attributes are organized into capability levels, comprising an ordinal scale of process capabilit
47、y. 3.19 capability indicator an assessment indicator that supports the judgement of the process capability of a specific process NOTE An attribute indicator is a specific instance of a capability indicator. 3.20 competent assessor an assessor who has demonstrated the competencies to conduct an asses
48、sment and to monitor and verify the conformance of a process assessment 3.21 defined process a process that is managed (planned, monitored and adjusted), and tailored from the organizations set of standard processes according to the organizations tailoring guidelines NOTE A defined process has a mai
49、ntained process description; and contributes work products, measures, and other process improvement information to the organizations process assets. A projects defined process provides a basis for planning, performing, and improving the projects tasks and activities of the project. 3.22 generic practice an activity that, when consistently performed, contributes to the achievement of
