Info - Isoiec29110 2 1 (Ed1.0) en
Info - Isoiec29110 2 1 (Ed1.0) en
Info - Isoiec29110 2 1 (Ed1.0) en
STANDARD 29110-2-1
First edition
2015-11-01
Reference number
ISO/IEC 29110-2-1:2015(E)
© ISO/IEC 2015
ISO/IEC 29110-2-1:2015(E) This is a preview - click here to buy the full publication
Contents Page
Foreword...........................................................................................................................................................................................................................................v
Introduction................................................................................................................................................................................................................................. vi
1 Scope.................................................................................................................................................................................................................................. 1
1.1 Fields of application............................................................................................................................................................................ 1
1.2 Target audience....................................................................................................................................................................................... 1
2 Conformance to standardized profiles........................................................................................................................................... 1
2.1 Overview....................................................................................................................................................................................................... 1
2.2 General principles................................................................................................................................................................................. 1
2.2.1 Tailoring and exclusions............................................................................................................................................. 1
2.2.2 Extensions.............................................................................................................................................................................. 2
2.2.3 Conformance to base standards.......................................................................................................................... 2
2.3 Conformance requirements for standardized profiles.......................................................................................... 3
2.3.1 Conformance situations.............................................................................................................................................. 3
2.3.2 Conformance to a standardized profile......................................................................................................... 3
2.3.3 Limited conformance to the base standards included in the standardized profile.3
3 Normative references....................................................................................................................................................................................... 4
4 Terms and definitions...................................................................................................................................................................................... 4
5 Conventions and abbreviated terms..............................................................................................................................................13
5.1 Naming, diagramming, and definition conventions.............................................................................................. 13
5.2 Abbreviated terms............................................................................................................................................................................. 13
6 Software and Systems engineering profiles for VSEs...................................................................................................13
6.1 Basic concepts....................................................................................................................................................................................... 13
6.2 Purpose of standardized profiles.......................................................................................................................................... 14
6.3 Preparation of profiles................................................................................................................................................................... 14
6.3.1 Selection and preparation of base standards........................................................................................ 14
6.3.2 Selection of profile elements............................................................................................................................... 15
6.3.3 Refinement of the profile........................................................................................................................................ 15
7 Preparing profiles of Software and Systems Engineering standards..........................................................15
7.1 Rationale for profiles....................................................................................................................................................................... 15
7.2 Profiling lifecycle product standards................................................................................................................................. 15
7.3 Profiling lifecycle process standards................................................................................................................................. 16
7.4 Relating process and product standards in profiles............................................................................................. 16
7.5 Graduated profiles in a profile group................................................................................................................................ 20
7.6 Packaged profiles in a profile group................................................................................................................................... 22
8 The VSE profile taxonomy principles............................................................................................................................................22
8.1 VSE classification dimensions.................................................................................................................................................. 22
8.2 Decoupling VSE classification from profile preparation................................................................................... 22
8.3 Graduating a profile group......................................................................................................................................................... 22
8.4 Packaging a profile group............................................................................................................................................................ 23
9 Taxonomy of VSE profiles..........................................................................................................................................................................23
9.1 Introduction............................................................................................................................................................................................ 23
9.2 Profile Taxonomy................................................................................................................................................................................ 23
9.3 The Software Engineering Generic profile group................................................................................................... 24
9.3.1 Introduction....................................................................................................................................................................... 24
9.3.2 The Entry profile............................................................................................................................................................ 24
9.3.3 The Basic profile............................................................................................................................................................. 24
9.3.4 The Intermediate profile......................................................................................................................................... 24
9.3.5 The Advanced profile................................................................................................................................................. 24
9.4 The Systems Engineering Generic profile group..................................................................................................... 25
9.4.1 Introduction....................................................................................................................................................................... 25
9.4.2 The Entry profile............................................................................................................................................................ 25
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work. In the field of information technology, ISO and IEC have established a joint technical committee,
ISO/IEC JTC 1.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for
the different types of document should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject
of patent rights. ISO and IEC shall not be held responsible for identifying any or all such patent
rights. Details of any patent rights identified during the development of the document will be in the
Introduction and/or on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical
Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/IEC JTC 1, Information technology, Subcommittee
SC 7, Software and systems engineering.
This second edition cancels and replaces the first edition (ISO/IEC 29110-2:2011), which has been
technically revised.
The full list of parts of ISO/IEC 29110 is available here.
Introduction
Very Small Entities (VSEs) around the world are creating valuable products and services. For the
purpose of this part of ISO/IEC 29110, a Very Small Entity (VSE) is an enterprise, an organization, a
department, or a project having up to 25 people. Since many VSEs develop and/or maintain system
and software components used in systems, either as independent products or incorporated in larger
systems, a recognition of VSEs as suppliers of high quality products is required.
According to the Organization for Economic Co-operation and Development (OECD) SME and
Entrepreneurship Outlook report (2005), “Small and Medium Enterprises (SMEs) constitute the
dominant form of business organization in all countries world-wide, accounting for over 95 % and
up to 99 % of the business population depending on country”. The challenge facing governments
and economies is to provide a business environment that supports the competitiveness of this large
heterogeneous business population and that promotes a vibrant entrepreneurial culture.
From studies and surveys conducted, it is clear that the majority of International Standards do not
address the needs of VSEs. Implementation of and conformance with these standards is difficult, if not
impossible. Consequently, VSEs have no, or very limited, ways to be recognized as entities that produce
quality systems/system elements including software in their domain. Therefore, VSEs are excluded
from some economic activities.
It has been found that VSEs find it difficult to relate International Standards to their business needs
and to justify the effort required to apply standards to their business practices. Most VSEs can neither
afford the resources, in terms of number of employees, expertise, budget, and time, nor do they see a
net benefit in establishing over-complex systems or software lifecycle processes. To address some of
these difficulties, a set of guides has been developed based on a set of VSE characteristics. The guides
are based on subsets of appropriate standards processes, activities, tasks, and outcomes, referred to as
Profiles. The purpose of a profile is to define a subset of International Standards relevant to the VSEs’
context; for example, processes, activities, tasks, and outcomes of ISO/IEC/IEEE 12207 for software;
and processes, activities, tasks, and outcomes of ISO/IEC/IEEE 15288 for systems; and information
products (documentation) of ISO/IEC/IEEE 15289 for software and systems.
VSEs can achieve recognition through implementing a profile and by being audited against
ISO/IEC 29110 specifications.
The ISO/IEC 29110 series of International Standards and Technical Reports can be applied at any
phase of system or software development within a lifecycle. This series of International Standards
and Technical Reports is intended to be used by VSEs that do not have experience or expertise in
adapting/tailoring ISO/IEC/IEEE 12207 or ISO/IEC/IEEE 15288 standards to the needs of a specific
project. VSEs that have expertise in adapting/tailoring ISO/IEC/IEEE 12207 or ISO/IEC/IEEE 15288 are
encouraged to use those standards instead of ISO/IEC 29110.
ISO/IEC 29110 is intended to be used with any lifecycle such as: waterfall, iterative, incremental,
evolutionary, or agile.
The ISO/IEC 29110 series, targeted by audience, has been developed to improve system or software
and/or service quality, and process performance (see Table 1).
If a new profile is needed, ISO/IEC 29110-4 and ISO/IEC TR 29110-5 can be developed with minimal
impact to existing documents.
ISO/IEC TR 29110-1 defines the terms common to the ISO/IEC 29110 series. It introduces processes,
lifecycle, and standardization concepts, the taxonomy (catalogue) of ISO/IEC 29110 profiles, and
the ISO/IEC 29110 series. It also introduces the characteristics and needs of a VSE, and clarifies the
rationale for specific profiles, documents, standards, and guides.
ISO/IEC TR 29110-3 defines certification schemes, assessment guidelines, and compliance requirements
for process capability assessment (ISO/IEC 33xxx), conformity assessments (ISO/IEC 17xxx), and
self-assessments for process improvements. ISO/IEC TR 29110-3 also contains information that
can be useful to developers of certification and assessment methods and developers of certification
and assessment tools. ISO/IEC 29110-3 is addressed to people who have direct involvement with the
assessment process, e.g. the auditor, certification, and accreditation bodies and the sponsor of the audit,
who need guidance on ensuring that the requirements for performing an audit have been met.
ISO/IEC 29110-4-m provides the specification for all profiles in one profile group that are based on
subsets of appropriate standards elements.
ISO/IEC TR 29110-5-m-n provides a management and engineering guide for each profile in one
profile group.
ISO/IEC TR 29110-6-x provides management and engineering guides not tied to a specific profile.
This part of ISO/IEC 29110 introduces the concepts for systems and software engineering profiles
for VSEs. It establishes the logic behind the definition and application of profiles. For standardized
profiles, it specifies the elements common to all profiles (structure, requirements, conformance, and
assessment). For domain-specific profiles (profiles that are not standardized and developed outside of
the ISO process), it provides general guidance adapted from the definition of standardized profiles.
Figure 1 describes the International Standards (IS) and Technical Reports (TR) of ISO/IEC 29110 and
positions the parts within the framework of reference. Overview, assessment guide, management, and
engineering guide are available from ISO as freely available Technical Reports (TR). The Framework
document, profile specifications and certification schemes are published as International Standards (IS).
1 Scope
2.1 Overview
Conformance is specified within each profile specification document, published as ISO/IEC 29110-4-61) for
systems engineering and ISO/IEC 29110-4-1 for software engineering. The general rules for conformance
to ISO/IEC 29110 profiles are in accordance with ISO/IEC TR 10000-1 and outlined in 2.2 and 2.3.
ISO/IEC 29110 standardized profiles are pre-tailored packages of related software and systems
engineering standards, therefore
— tailoring of ISO/IEC 29110 profiles is not needed nor allowed (except in one case outlined in 2.3.2),
— partial compliance is not allowed (except in one case outlined in 2.2.3), and
1) To be published.
2.2.2 Extensions
The purpose of a standardized profile is to specify the use of sets of specifications to provide clearly
defined functionality. Hence, conformance to ISO/IEC 29110 standardized profile specifications
always implies conformance to the referenced base standards’ specifications, if it is referenced in
totality in the profile.
However, if only part of the base standard is referenced in the profile, the above statement is true
inasmuch as the base standard conformance clause allows for tailored and partial compliance.
The conformance requirements of an ISO/IEC 29110 standardized profile shall relate to the conformance
requirements in the base standards in the following ways.
a) Unconditional mandatory requirements in the base standards shall remain mandatory in the
ISO/IEC 29110 profile.
b) Unconditional options in base standards may remain optional or may be changed within the
profile to become:
1) mandatory;
2) conditional, giving rise to different statuses dependent upon some appropriate condition;
3) out of scope, if the option is not relevant to the scope of the profile; for example, functional
elements which are unused in the context of the profile;
4) prohibited, if the use of the option is to be regarded as non-conformant behaviour within the
context of the profile. This choice should only be used when really necessary, “out of scope” can
often be more appropriate.
c) If the conditions in the conditional requirements in the base standards can be fully evaluated in the
context of the profile, then these requirements become unconditional mandatory requirements or
unconditional options, or they become out of scope or prohibited. Otherwise, the conditions remain
conditional, with the appropriate, possibly partially, evaluated conditions.
Conformance can be interpreted differently for various situations. The relevant situation shall be
identified in the claim of conformance.
ISO/IEC 29110 profiles can be implemented by organizations or projects implementing and using the
processes and products prescribed by the profile.
NOTE The case where another ISO document, such as a Guide or Technical Report, complies with the profile
specification is not considered implementation conformance and subject to conformance clauses. For instance,
ISO/IEC TR 29110-5 guides comply with ISO/IEC 29110-4 profile specifications, and this is evidenced by a
normative reference to ISO/IEC 29110-4 in ISO/IEC TR 29110-5, not by a conformance clause.
A product that claims conformance to an ISO/IEC 29110 standardized profile shall implement all
the mandatory profile elements as identified in the profile specification ISO/IEC 29110-4-m, and
the associated properties and requirements as described in the base standards when applicable.
Conformance is achieved by demonstrating that the conforming product does not exclude, modify, or
contradict any of the mandatory profile elements.
An organization that claims conformance to an ISO/IEC 29110 profile shall identify which profile it is
claiming conformance to, and implement and use all the mandatory profile requirements as identified
in the profile specific clauses of the profile specification ISO/IEC 29110-4-m, and the associated
properties and requirements as described in the base standards when applicable. Conformance is
achieved by demonstrating that:
— mandatory requirements for the lifecycle processes have been satisfied using the required input
and output products as evidence;
— mandatory requirements for the lifecycle products (information items) and content (information
item content) have been satisfied using the content of conformant work products as evidence.
Unless otherwise noted in the standardized profile conformance clause, conformance to the profile
implies conformance to the base standards.
NOTE Information items are described as if it were published as a separate document. However,
information items and their content will be considered as conforming if they are unpublished but available in
a repository for reference, divided into separate documents or volumes, or combined with other information
items into one document.
If a profile contains conditional mandatory requirements, then these requirements shall be grouped
in a separately identifiable subclause, and the conformance clause in the profile specification
ISO/IEC 29110-4-m shall identify what condition need to be met, and the specific subclause where there
requirements are.
2.3.3 Limited conformance to the base standards included in the standardized profile
If an organization or a product cannot claim conformance to the profile, it can still claim conformance
to the elements of the base standard included in the profile under the following conditions.
a) The base standard is not totally included in the profile (if it is totally included, then the
implementation should claim conformance to the base standards).
b) The base standard’s conformance clause allows for partial conformance and/or tailored conformance.
In that case, the conformance clause shall refer only to the mandatory profile elements as identified
in the profile specification ISO/IEC 29110-4-m that refer to the base standards in question, and are
identified as mandatory (normative) in the base standards.
3 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO/IEC TR 10000-1:1998, Information technology — Framework and taxonomy of International
Standardized Profiles — Part 1: General principles and documentation framework