ISO/IEC TS 33061:2021

ISO/IEC TS 33061:2021 is a technical specification that provides a Process Assessment Model (PAM) for software life cycle processes.
Essentially, it is a tool used by organizations to measure how mature and effective their software development and maintenance processes are. If you are already looking into auditing and legal compliance, this standard is a key piece of the puzzle for verifying that a software provider's internal "gears" are turning correctly.
Core Purpose
The primary goal of ISO/IEC TS 33061 is to help organizations:
  • Assess: Evaluate the current state of their software processes (like requirements gathering, testing, and deployment).
  • Improve: Identify gaps and create a roadmap to move toward higher levels of quality and efficiency.
  • Audit: Provide objective evidence of process capability to stakeholders or regulatory bodies.
The Two Dimensions
The model operates on two axes to give a full picture of a process:
  • The Process Dimension: Defines what is being done (e.g., the specific software life cycle processes like testing or design, often based on the ISO/IEC/IEEE 12207 standard).
  •  The Quality Dimension: Defines how well it is being done (e.g., measuring the maturity from "Initial" to "Optimizing"). Why It Replaced ISO/IEC 15504-5. You might see references to ISO/IEC 15504-5 (often called SPICE) in older documentation. ISO/IEC TS 33061:2021 officially replaced it to align better with modern software engineering standards. The main changes included:
  •  Updated terminology to match newer life cycle standards.
  •  Revised descriptions for "process outputs" (the tangible results of a process).
  •  A more flexible framework that works with the broader ISO/IEC 33000 family of standards.
Key Process Areas Covered
When an organization is assessed using this model, the "auditors" typically look at:
  • Management: Requirements and project planning.
  • Technical: Design, development, testing, and validation.
  • Support: Configuration management and quality assurance.
  • Operations: Deployment, maintenance, and continuous improvement.
Note: Because this is a "Technical Specification" (TS) rather than a full "International Standard" (IS), it is often used as a precursor or a more agile guidance document for organizations that need to demonstrate compliance in highly regulated fields like aerospace or medical devices.

Comments

Popular posts from this blog

Stop-or-go sampling

Compliance risk

டெலிக்ராம் FRAUD