ISO 90003:2004 Provides Software Guidance

ISO 90003:2004, Software Engineering — Guidelines for the Application of ISO 9001:2000 to Computer Software, has replaced ISO 9000-3:1997. An electronic copy can be downloaded from the ANSI e-Standards Store at<http://webstore.ansi.org/ansidocstore/default.asp> for $119.00.

ISO 90003:2004 provides guidance for organizations in the application of ISO 9001:2000 to the acquisition, supply, development, operation, and maintenance of computer software and related support services. ISO 90003:2004 does not add to, or change, the requirements of ISO 9001:2000.

The guidelines in ISO 90003:2004 are not intended to be used as assessment criteria in quality management system registration. The guidance of ISO 90003:2004 is appropriate for software that is:

  • part of a commercial contract with another organization,
  • a product available for a market sector,
  • used to support the processes of an organization,
  • embedded in a hardware product, or
  • related to software services.

Some organizations may be involved in all the above activities; others may specialize in one area. Whatever the situation, the organization’s quality management system should cover all aspects (software related and non-software related) of the business.

ISO 90003:2004 identifies the issues which should be addressed and is independent of the technology, life cycle models, development processes, sequence of activities, and organizational structure used by an organization.

Additional guidance and frequent references to the ISO software engineering standards are provided to assist in the application of ISO 9001:2000, e.g., ISO 12207 (Software Life Cycle Processes), ISO/TR 9126 (Quality Model, Internal Metrics, and External Metrics), ISO 14598 (Software Product Evaluation), ISO 15939 (Software Measurement Process), and ISO/TR 15504 (Software Process Assessment).