1. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Definition
A set of documents
dealing with quality
systems that can be used
for external quality
assurance purposes.
The Capability Maturity
Model describes the
principles and practices
underlying software
process maturity and
intended to help
software organizations
improve the maturity of
their software process.

2. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Development By The International
Standards Organization
By The Software
Engineering Institute
Written for Wide range of industry Software industry
Documents Abstract Detailed

3. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Pages long Only 5 pages Over 500 pages
Concept
To follow a set of
standards to make
success repeatable
To emphasize on
achieving and improving
its process continuously
Documents
On the
customer/supplier
relationship to reduce a
customer’s risk in
choosing a supplier.
The supplier to improve
the internal software
process.

4. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Management
Responsibility
Quality policy is
defined, documented,
understood,
implemented, and
maintained; that
responsibilities and
authorities for all
personnel specifying,
achieving, and
monitoring quality be
defined.
Quality policy is
primarily addressed in
Software Quality
Assurance.

5. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Quality System
Requires documented
quality system, included
procedures and
instructions, be
established.
Procedures are addresses
and assured in Software
Quality Assurance.
Software product
Engineering tasks
should be defined,
integrated, and
consistently performed.

6. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Contract Review
Contracts are reviewed
to determine whether the
requirements are
adequately defined,
agree with the bid, and
can be implemented.
Documented and
reviewed and the
missing requirements are
clarified.

7. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Design Control
Requires that procedures
to control and verify the
design be established.
This includes planning
design activities,
identifying inputs and
outputs, verifying the
design, and controlling
design changes.
The life cycle activities
on requirements
analysis, design, code,
and test are described in
Software Product
Engineering.

8. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Document
Control
Requires that the
distribution and
modification of
documents be
controlled.
The configuration
management practices
characterizing document
control are described in
Software Configuration
Management.

9. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Purchasing
Requires that purchased
products conform to
their specified
requirements. This
includes the assessment
of potential
subcontractors and
verification of purchased
products.
This is addressed in
Software Subcontract
Management.

10. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Purchaser-
Supplied
Product
Requires that any
purchaser-supplied
material be verified and
maintained.
Describing the use of
purchased software. It
does so in the context of
identifying off-the-shelf
or
reusable software as part
of planning.

11. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Product
Identification
and Trace
ability
Requires that the
product be identified and
traceable during all
stages of production,
delivery, and
installation.
Software Product
Engineering states the
specific need for
consistency and trace
ability between software
work products.

12. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Process Control
Requires that production
processes be defined and
planned. This includes
carrying out production
under controlled
conditions, according to
documented instructions.
The procedures defining
the software production
process are distributed
throughout the key
process areas in the
various Activities
Performed practices.
Servicing
Requires that servicing
activities be performed
as specified.
Intended to be applied in
both the software
development and
maintenance
environments,

13. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Training
Requires that training
needs be identified and
that training be
provided, since selected
tasks may require
qualified personnel.
Records of training are
maintained.
Identified in the training
and orientation practices
in the Ability to Perform
common feature.

14. ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Quality Records
Requires that quality
records be collected,
maintained, and
dispositioned.
Specifically pertinent to
this clause are the testing
and peer review
practices in Software
Product
Engineering.

15. Companies have ISO 9001 certification
AIR LIQUIDE
ALLIED SIGNAL AEROSPACE
AMERICAN PACIFIC
CORPORATION
AMERICAN TANK &
FABRICATING CO.
APPLIED MATERIALS, INC.
ARCO CHEMICAL COMPANY
ASHLAND CHEMICAL CO.
ASME INTERNATIONAL
ASQ
AT&T
BABCOCK & WILCOX
BACARDI-MARTINI CANADA,
INC
BAKER HUGHES MINING TOOLS,
INC.
BARCLAYS BANK, PLC.
BASF CORPORATION
BAXTER DIAGNOSTICS, INC.
BAYER CORPORATION
BECKMAN INSTRUMENTS
BELL SOUTH
TELECOMMUNICATIONS, INC.
BELL TECHNOLOGIES
BOEING
BOEING AEROSPACE
OPERATIONS
BOSE CORPORATION

16. Companies have ISO 9001 certification
BRISTOL- MYERS SQUIBB
BRITISH STANDARDS
INSTITUTION, INC.
BURLINGTON PERFORMANCE
WEAR
CAMPBELL SOUP COMPANY
CANADA GENERAL
STANDARDS BOARD
CARRIER CORPORATION
CATERPILLAR, INC.
CHRYSLER CORPORATION
CIBA VISION
CREATIVE LABS
CUTLER & HAMMER
DAIMLER CHRYSLER
DIEBOLD, INC.
DOW CHEMICAL
DRAVO
DUNLOP TIRE CORPORATION
DURACELL
E.I. DUPONT
EASTMAN KODAK
EATON CORPORATION
ENTELA, INC., QSRD
ERICSSON, INC.
ESSILOR OF AMERICA, INC.
ESTEE LAUDER COMPANIES
EXXON CHEMICAL COMPANY

17. Companies have ISO 9001 certification
EXXON COMPANY, INC.
FISERV
FORD
FUJITSU COMPUTER PRODUCTS
GE AIRCRAFT ENGINES
GILLETTE
GOODYEAR TIRE
GOODYEAR TIRE & RUBBER
COMPANY
HARBISON-WALKER
REFRACTORIES
HASBRO USA GAME MFG.
HEWLETT PACKARD
HYUNDAI ELECTRONICS
AMERICA
IBM
INGERSOLL-RAND INTL. SALES
INC
KOHLER
KRUPP WERNER & PFLEIDERER
CORPORATION
LOCKHEED MARTIN AIR
TRAFFIC MANAGEMENT
LOCKHEED MARTIN CANADA
LOCKHEED MARTIN ENERGY
SYSTEMS

18. The criteria for getting ISO 9000/9001
certification
• Review the current operation and business structure of your
facility.
• Provide an introductory session in ISO 9000/9001
requirements and instruct in the preparation of job descriptions
and work instruction style documentation.
• Audit the completed job descriptions and work instructions
and prepare the structure for the policies and procedures
manual.
• Write the first draft of the policy and procedures manual to
meet ISO 9000/9001 standards incorporating the existing
documented work instructions.

19. The criteria for getting ISO 9000/9001
certification
• Submit first draft of manuals for review and approval.
Prepare final draft of documentation and audit
manuals for compliance to ISO 9000/9001
requirements.
• Train staff on the policies, procedures and work
instruction manuals and receive feedback as to the
accuracy of the documentation.
• Conduct a simulated third party audit of the
implemented Quality System utilizing qualified
auditors.
• Make final adjustments to the Quality System to
prepare for certified third party audit.