Iso 9001:2000 Achieving Compliance and Continuous Improvement in Software Development Companies

Rating:
Summary: Much needed book for Development and Service orgs.
Review: This is a much needed book for ISVs and other organizations involved in software development because ISO 9001:2000 lays the foundation for larger scale quality initiatives, such as attaining CMM levels 2 and above. More importantly, it not only dispells any misconceptions about ISO 9001 by providing up-to-date information about the 2000 version versus the gaps in earlier versions.

What I like most about this book is the way the author systematically leads you through the basics, including the history, goals and benefits of ISO 9001 registration, and shows how this standard has been greatly improved in the 2000 version. Chapter 2, in particular, imparts the key differences of this version, and thoroughly discusses the relevance of the 90003 recommendations in the document set to software development.

Chapter 3 is where this book segues from background to practical application, starting with an implementation strategy. This chapter outlines an implementation approach and lays the groundwork for the subsequent chapters that cover each of the major clauses in the quality management system. As in the first two chapters the author clearly shows how ISO 9001 aligns to the unique and specific needs of a software development organization. He provides all of the information necessary to understand what is needed to conform to each clause, and presents the information in a manner that makes sense. One especially nice feature of this book is the liberal use of tables and charts, which summarize information and make sorting out the critical elements easy.

Among the strongest chapters are Chapters 7 (Product Realization Requirements) and 8 (Measurement, Analysis and Improvement Requirements). The reason I found these so useful is the material can also be applied to ITIL service level management requirements, or as a standalone framework for IT-to-business alignment. This expands the scope of this book beyond software development. In addition, any IT service provider-not just ISVs and other development organizations-can apply this book's approach to achieving ISO 9001 compliance.

Chapter 9 is especially valuable to organizations that are pursuing ISO 9001 registration because it takes a due diligence approach to identifying potential registrars, then steps you through the registration process. If you are not pursuing registration, but are using this book to implement portions of ISO 9001 as the foundation of a quality initiative, the material in this chapter on auditing is still useful. Another key feature of this book is the appendices and the artifacts provided on the accompanying CD ROM. The appendices include a quality manual outline, forms and templates, and audit questions.

Although this book is aimed at software development organizations interested in, or pursuing, ISO 9001 registration, it also provides invaluable material for any IT organization (internal or service provider). If you are working with or implementing ITIL this book will also prove to be an invaluable resource.