Prof. R. Mall: Dept. of CSE, IIT, Kharagpur
Prof. R. Mall: Dept. of CSE, IIT, Kharagpur
Prof. R. Mall: Dept. of CSE, IIT, Kharagpur
Management
Prof. R. Mall
Dept. of CSE, IIT, Kharagpur
1
ISO 9000
ISO (international Standards
Organization):
• a consortium of 63 countries
established to formulate and foster
standardization.
ISO published its 9000 series of
standards in 1987.
2
What is ISO 9000
Certification?
ISO 9000 certification:
• Serves as a reference for
contract between independent
parties.
The ISO 9000 standard:
• Specifies guidelines for
maintaining a quality system.
3
What is ISO 9000
Certification?
ISO 9000 specifies:
• Guidelines for repeatable and high
quality product development.
• Also addresses organizational
aspects
Responsibilities, reporting, procedures,
processes, and resources for
implementing quality management.
4
ISO 9000
A set of guidelines for the
production process.
• Not directly concerned about
the product it self.
• A series of three standards:
ISO 9001, ISO 9002, and ISO
9003.
5
ISO 9000
Based on the premise:
• If a proper process is
followed for production:
Good quality products are
bound to follow.
6
ISO 9001
Applies to:
• Organizations engaged in design,
development, production, and
servicing of goods.
• Applicable to most software
development organizations.
7
ISO 9002
ISO 9002 applies to:
• Organizations who do not design products:
but are only involved in production.
Examples of this category of industries:
• Steel or car manufacturing industries
• Buy the product and plant designs from external
sources:
only manufacture products.
• Not applicable to software development
organizations.
8
ISO 9003
ISO 9003 applies to:
• Organizations involved only in
installation and testing of the
products.
9
ISO 9000 for Software
Industry
ISO 9000 is a generic standard:
• Applicable to many industries,
Starting from a steel manufacturing industry
to a service rendering company.
Many clauses of ISO 9000 documents:
• Use generic terminologies
• Very difficult to interpret them in the
context of software organizations.
10
ISO 9000 Part-3
ISO released a separate
document called ISO 9000 part-3
in 1991:
• To help interpret the ISO standard
for software industry.
At present:
• Official guidance is inadequate.
11
ISO 9000: 2000
ISO 9001:2000:
• Combines the three standards 9001, 9002,
and 9003 into one.
Design and development procedures are
required:
• Only if a company does in fact engage in the
creation of new products.
The 2000 version sought to make a
radical change in thinking:
• By actually highlighting the concept of
process management.
12
ISO 9000: 2000
Another goal is to improve
effectiveness via process
performance metrics:
• Numerical measurement of the
effectiveness of tasks and activities.
• Continual process improvement and
tracking customer satisfaction were
made explicit.
13
Why Get ISO 9000
Certification?
Several benefits:
• Confidence of customers in an
organization increases.
If organization qualified for ISO
9001 certification.
This is especially true in the
international market.
14
Why Get ISO 9000
Certification?
Many international software
development contracts insist:
• Development organization to
have ISO 9000 certification.
15
Why Get ISO 9000
Certification?
Requires:
• A well-documented software
production process to be in place.
• Contributes to repeatable and higher
quality software.
Makes development process:
• Focussed, efficient, and cost-
effective
16
Why Get ISO 9000
Certification?
Points out the weakness of an
organizations:
• Recommends remedial action.
Sets the basic framework:
• For development of an optimal
process and TQM.
17
How to Get ISO 9000
Certification?
An organization intending to
obtain ISO 9000 certification:
• Applies to a ISO 9000 registrar
for registration.
ISO 9000 registration process
consists of several stages.
18
How to Get ISO 9000
Certification?
Application stage:
• Applies to a registrar for
registration.
Pre-assessment:
• The registrar makes a rough
assessment of the organization.
19
How to Get ISO 9000
Certification?
Document review and adequacy
audit:
• Process and quality-related
documents.
• The registrar reviews the
documents.
• Makes suggestions for
improvements.
20
How to Get ISO 9000
Certification?
Compliance audit: The
registrar checks:
Whether the suggestions made
by it during review have been
complied.
21
How to Get ISO 9000
Certification?
Registration:
• The registrar awards ISO 9000
certificate after successful
completions of all previous phases.
Continued surveillance:
• The registrar continues monitoring
the organization periodically.
22
ISO 9000 Certification
An ISO certified organization :
• Can use the certificate for corporate
advertizements.
• Cannot use the certificate to advertize
its products.
ISO 9000 certifies organization's process
Not any product of the organization.
• An organization using ISO certificate
for product advertizements:
Risks withdrawal of the certificate.
23