This recommended practice is designed to help organizations and individuals incorporate quality, including security, considerations during the definition, evaluation, selection, and acceptance of supplier software for operational use. It will also help determine how supplier software should be evaluated, tested, and accepted for delivery to end users. This recommended practice is intended to satisfy the following objectives: * Promote consistency within organizations in acquiring software from software suppliers. * Provide useful practices on including quality (including security) considerations during acquisition planning. * Provide useful practices on evaluating and qualifying supplier capabilities to meet user requirements. * Provide useful practices on evaluating and qualifying supplier software. * Assist individuals or organizations judging the quality of supplier software for referral to end users.This recommended practice describes a set of useful quality considerations that can be selected and applied during one or more steps in a software acquisition process. The recommended practices can be applied to software that runs on any computer system regardless of the size, complexity, or criticality of the software. The software supply chain may include integration of commercial-off-the-shelf (COTS), custom, or open source software. Each organization or individual using this recommended practice will need to identify the specific quality and activities that need to be included within their acquisition process. Security will be included as a quality attribute considered during the acquisition process.
Sponsor: C/S2ESC - Software & Systems Engineering Standards Committee
Get Involved In The Development Of This Standard
Contact the IEEE-SA Liaison Simply click here to voice your interest. Malia Zaman Learn More About Standards ParticipationAnyone can participate, there are a variety of programs and services to
facilitate the involvement of industry and the public. More Become a Member and Ballot on this StandardMembership empowers you to participate & lead in the development of
standards. Tell Me More