Iso vs cmm l14

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Definition

A set of documents dealing with quality

systems that can be used for external quality

assurance purposes.

The Capability Maturity Model describes the

principles and practices underlying software process maturity and

intended to help software organizations improve the maturity of their software process.


ISO 9000/9001 CMM

Development By The International Standards Organization

By The Software Engineering Institute

Written for Wide range of industry Software industry

Documents Abstract Detailed


ISO 9000/9001 CMM

Pages long Only 5 pages Over 500 pages

Concept To follow a set of standards to make success repeatable

To emphasize on achieving and improving its process continuously

Documents

On the customer/supplier

relationship to reduce a customer’s risk in

choosing a supplier.

The supplier to improve the internal software

process.


ISO 9000/9001 CMM

ManagementResponsibility

Quality policy is defined, documented,

understood, implemented, and maintained; that

responsibilities and authorities for all

personnel specifying, achieving, and

monitoring quality be defined.

Quality policy is primarily addressed in

Software Quality Assurance.


ISO 9000/9001 CMM

Quality System

Requires documented quality system, included

procedures and instructions, be

established.

Procedures are addresses and assured in Software

Quality Assurance. Software product Engineering tasks should be defined,

integrated, and consistently performed.


ISO 9000/9001 CMM

Contract Review

Contracts are reviewed to determine whether the

requirements are adequately defined,

agree with the bid, and can be implemented.

Documented and reviewed and the

missing requirements are clarified.


ISO 9000/9001 CMM

Design Control

Requires that procedures to control and verify the design be established. This includes planning

design activities, identifying inputs and outputs, verifying the

design, and controlling design changes.

The life cycle activities on requirements

analysis, design, code, and test are described in

Software Product Engineering.


ISO 9000/9001 CMM

Document Control

Requires that the distribution and modification of documents be controlled.

The configuration management practices

characterizing document control are described in Software Configuration

Management.


ISO 9000/9001 CMM

Purchasing

Requires that purchased products conform to

their specified requirements. This

includes the assessment of potential

subcontractors and verification of purchased

products.

This is addressed in Software Subcontract

Management.


ISO 9000/9001 CMM

Purchaser-Supplied Product

Requires that any purchaser-supplied

material be verified and maintained.

Describing the use of purchased software. It does so in the context of identifying off-the-shelf orreusable software as part of planning.


ISO 9000/9001 CMM

Product Identification

and Trace ability

Requires that the product be identified and

traceable during all stages of production,

delivery, and installation.

Software Product Engineering states the

specific need for consistency and trace

ability between software work products.


ISO 9000/9001 CMM

Process Control

Requires that production processes be defined and planned. This includes carrying out production

under controlled conditions, according to documented instructions.

The procedures defining the software production process are distributed

throughout the key process areas in the various Activities

Performed practices.

Servicing Requires that servicing activities be performed

as specified.

Intended to be applied in both the software development and

maintenance environments,


ISO 9000/9001 CMM

Training

Requires that training needs be identified and

that training be provided, since selected

tasks may require qualified personnel.

Records of training are maintained.

Identified in the training and orientation practices in the Ability to Perform

common feature.


ISO 9000/9001 CMM

Quality RecordsRequires that quality records be collected,

maintained, and dispositioned.

Specifically pertinent to this clause are the testing and peer review practices in Software ProductEngineering.

Companies have ISO 9001 certification

AIR LIQUIDEALLIED SIGNAL AEROSPACEAMERICAN PACIFIC CORPORATIONAMERICAN TANK & FABRICATING CO.APPLIED MATERIALS, INC.ARCO CHEMICAL COMPANYASHLAND CHEMICAL CO.ASME INTERNATIONALASQAT&TBABCOCK & WILCOXBACARDI-MARTINI CANADA, INC

BAKER HUGHES MINING TOOLS, INC.BARCLAYS BANK, PLC.BASF CORPORATIONBAXTER DIAGNOSTICS, INC.BAYER CORPORATIONBECKMAN INSTRUMENTSBELL SOUTH TELECOMMUNICATIONS, INC.BELL TECHNOLOGIESBOEINGBOEING AEROSPACE OPERATIONSBOSE CORPORATION


BRISTOL- MYERS SQUIBBBRITISH STANDARDS INSTITUTION, INC.BURLINGTON PERFORMANCE WEARCAMPBELL SOUP COMPANYCANADA GENERAL STANDARDS BOARDCARRIER CORPORATION CATERPILLAR, INC.CHRYSLER CORPORATIONCIBA VISIONCREATIVE LABSCUTLER & HAMMER

DAIMLER CHRYSLERDIEBOLD, INC.DOW CHEMICAL DRAVODUNLOP TIRE CORPORATIONDURACELLE.I. DUPONTEASTMAN KODAKEATON CORPORATIONENTELA, INC., QSRDERICSSON, INC.ESSILOR OF AMERICA, INC.ESTEE LAUDER COMPANIESEXXON CHEMICAL COMPANY


EXXON COMPANY, INC.FISERVFORDFUJITSU COMPUTER PRODUCTSGE AIRCRAFT ENGINESGILLETTE GOODYEAR TIREGOODYEAR TIRE & RUBBER COMPANYHARBISON-WALKER REFRACTORIESHASBRO USA GAME MFG.HEWLETT PACKARD

HYUNDAI ELECTRONICS AMERICAIBMINGERSOLL-RAND INTL. SALES INCKOHLERKRUPP WERNER & PFLEIDERER CORPORATIONLOCKHEED MARTIN AIR TRAFFIC MANAGEMENTLOCKHEED MARTIN CANADALOCKHEED MARTIN ENERGY SYSTEMS

The criteria for getting ISO 9000/9001 certification

• Review the current operation and business structure of your facility.

• Provide an introductory session in ISO 9000/9001 requirements and instruct in the preparation of job descriptions and work instruction style documentation.

• Audit the completed job descriptions and work instructions and prepare the structure for the policies and procedures manual.

• Write the first draft of the policy and procedures manual to meet ISO 9000/9001 standards incorporating the existing documented work instructions.

The criteria for getting ISO 9000/9001 certification

• Submit first draft of manuals for review and approval. Prepare final draft of documentation and audit manuals for compliance to ISO 9000/9001 requirements.

• Train staff on the policies, procedures and work instruction manuals and receive feedback as to the accuracy of the documentation.

• Conduct a simulated third party audit of the implemented Quality System utilizing qualified auditors.

• Make final adjustments to the Quality System to prepare for certified third party audit.