ISO/IEC 25010 Software Quality Model

• ISO, the International Organization for Standardization, and IEC, the International Electrotechnical Commission, collaboratively develop international standards that ensure quality, safety, and efficacy in various fields including software.

ISO/IEC 25010 (Software Quality Model)

• ISO/IEC 25010 belongs to the ISO/IEC 25000 standards family, also known as SQuaRE (System and Software Quality Requirements and Evaluation).
• It provides a framework to evaluate software quality in two dimensions: the product quality model and the quality in use model.

Product Quality Model

• Evaluates the internal and external characteristics of software.
• This includes the following eight main characteristics:
  • Functional Adequacy: Fulfillment of required functionalities.
  • Performance Efficiency: Optimal use of resources.
  • Compatibility: Ability to interact with other systems.
  • Usability: Ease of use for users.
  • Reliability: Stability and availability of the system.
  • Security: Protection against threats and vulnerabilities.
  • Maintainability: Ease of modifying or updating the software.
  • Portability: Ability to be used in different environments.

Quality in Use Model

• Measures the quality perceived by end-users.
• It includes these five aspects:
  • Effectiveness
  • Efficiency
  • Satisfaction
  • Security in Use
  • Context Coverage

Applications

• It is widely used by software developers and evaluators to identify weaknesses, improve design, and ensure the product meets customer requirements.

IEEE 730 (Software Quality Assurance Plans)

• IEEE (Institute of Electrical and Electronics Engineers) is a significant global organization dedicated to standardization in areas like software, electricity, and telecommunications.
• IEEE 730 provides a detailed framework for developing Software Quality Assurance Plans (SQAP).
• These plans ensure development processes meet defined requirements and norms.
  • Objectives: Defining the goals of quality assurance.
  • Scope: Describing the software aspects covered by the SQAP.
  • Roles and Responsibilities: Identifying those responsible for implementing and supervising quality.
  • Audits and Reviews: Specifying how process compliance will be evaluated.
  • Tests and Verifications: Detailing the methodologies used to verify requirements.
  • Metrics: Providing quantitative indicators to evaluate the performance of the process and the product.
• IEEE 730 encourages: early error detection in development, documentation and systematic review processes, and the delivery of high-quality software that meets client expectations.

CMMI (Capability Maturity Model Integration)

• CMMI was originally developed by the Software Engineering Institute (SEI) at Carnegie Mellon University; it is now managed by the CMMI Institute, an ISACA affiliate.
• CMMI is a reference framework used to evaluate and improve the capability and maturity of organizational processes.
• Unlike a standard, it offers flexible guidelines adaptable to each organization's needs. Maturity Levels:
  • Initial: Ad-hoc and disorganized processes where success depends on individuals.
  • Managed: Projects managed according to established policies.
  • Defined: Documented and standardized processes.
  • Quantitatively Managed: Controlled and measured processes with metrics.
  • Optimized: Continuous improvements based on quantitative analysis.
• Key Process Areas:
  • Project Management: Planning, supervision, and control.
  • Software Engineering: Development and verification.
  • Quality Management: Identification and correction of defects.
  • Change Management: Adaptation to changing requirements.
• CMMI is used across various industries to improve operational efficiency, reduce errors and development costs and enhance customer satisfaction through quality products and services.

Comparison of Standards

• ISO/IEC 25010 focuses on the characteristics of the final product.
• IEEE 730 focuses on ensuring quality processes during development.
• CMMI focuses on providing an integral framework to optimize organizational processes.
• Implementing these models can transform how organizations manage and deliver high-quality software.