ISO Certification
-
Hello all, The present company I am working for is small (about 40 employees in which 10 are software developers). Here, we follow certian standards for designing, coding, testing, etc., We adhere to these standards in all aspects when a new software is developed or a previous product has to be changed/enhanced. We are planning to go for an ISO certification now. What are the steps involved in it? If someone could give me links or pointers in this direction it will be of great help. (Our location is India)
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்மா
-
Hello all, The present company I am working for is small (about 40 employees in which 10 are software developers). Here, we follow certian standards for designing, coding, testing, etc., We adhere to these standards in all aspects when a new software is developed or a previous product has to be changed/enhanced. We are planning to go for an ISO certification now. What are the steps involved in it? If someone could give me links or pointers in this direction it will be of great help. (Our location is India)
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்மா
I've put 3 IT departments through ISO9000, but what certification are you after ISO9000 or ISO9001, ITIL etc... Basically you need to have procedures, use them and provide evidence that you use them by keeping records. Don't get sucked into by consultants that demand very complex and demanding procedures, they can/should be very straight foward and simple to understand. Especially for software engineers as they're not the best at following procedures.
Grady Booch: I told Google to their face...what you need is some serious adult supervision. (2007 Turing lecture) http:\\www.frankkerrigan.com
-
I've put 3 IT departments through ISO9000, but what certification are you after ISO9000 or ISO9001, ITIL etc... Basically you need to have procedures, use them and provide evidence that you use them by keeping records. Don't get sucked into by consultants that demand very complex and demanding procedures, they can/should be very straight foward and simple to understand. Especially for software engineers as they're not the best at following procedures.
Grady Booch: I told Google to their face...what you need is some serious adult supervision. (2007 Turing lecture) http:\\www.frankkerrigan.com
Frank Kerrigan wrote:
but what certification are you after ISO9000 or ISO9001, ITIL etc...
First off, thanks for your reply. We are after ISO 9000. Isn't ISO 9001 a part of ISO 9000? If we get ISO 9000 doesn't that mean we get ISO 9001 too? Quality, process and managerial capability is what we want to prove. What would you suggest, if any? And thanks for letting me know its not required to go in search of consultants.
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்மா
-
Frank Kerrigan wrote:
but what certification are you after ISO9000 or ISO9001, ITIL etc...
First off, thanks for your reply. We are after ISO 9000. Isn't ISO 9001 a part of ISO 9000? If we get ISO 9000 doesn't that mean we get ISO 9001 too? Quality, process and managerial capability is what we want to prove. What would you suggest, if any? And thanks for letting me know its not required to go in search of consultants.
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்மா
It is a management system not a quality system this is a key point. You can have crap quality and still pass IS09000 as long at your sticking to your procedures. I suggest getting hold of a copy of IS09000 and reading it. Then see how you can development a management system that matches its requirements.
Grady Booch: I told Google to their face...what you need is some serious adult supervision. (2007 Turing lecture) http:\\www.frankkerrigan.com
-
It is a management system not a quality system this is a key point. You can have crap quality and still pass IS09000 as long at your sticking to your procedures. I suggest getting hold of a copy of IS09000 and reading it. Then see how you can development a management system that matches its requirements.
Grady Booch: I told Google to their face...what you need is some serious adult supervision. (2007 Turing lecture) http:\\www.frankkerrigan.com
Frank Kerrigan wrote:
I suggest getting hold of a copy of IS09000 and reading it.
Google yields plenty of results but most are advertisements from consultants. Do I need to pay to download this copy? If yes I am very much willing to pay but just wanted to make sure that it is not free. If it is free could you just give me a link?
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு
-
Frank Kerrigan wrote:
I suggest getting hold of a copy of IS09000 and reading it.
Google yields plenty of results but most are advertisements from consultants. Do I need to pay to download this copy? If yes I am very much willing to pay but just wanted to make sure that it is not free. If it is free could you just give me a link?
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு
-
:-D It got noticed :doh:
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு
-
:-D It got noticed :doh:
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு
-
Initially I thought some new Brahmma Guru has come.. later I found that its you only.. :)
Best Regards, Apurva Kaushal
I thought that nic was already taken. But for my pleasure, here I am! ;)
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு
-
Frank Kerrigan wrote:
I suggest getting hold of a copy of IS09000 and reading it.
Google yields plenty of results but most are advertisements from consultants. Do I need to pay to download this copy? If yes I am very much willing to pay but just wanted to make sure that it is not free. If it is free could you just give me a link?
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு
http://www.iso.org/iso/en/iso9000-14000/index.html[^]
Grady Booch: I told Google to their face...what you need is some serious adult supervision. (2007 Turing lecture) http:\\www.frankkerrigan.com
-
I thought that nic was already taken. But for my pleasure, here I am! ;)
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு
-
Frank Kerrigan wrote:
but what certification are you after ISO9000 or ISO9001, ITIL etc...
First off, thanks for your reply. We are after ISO 9000. Isn't ISO 9001 a part of ISO 9000? If we get ISO 9000 doesn't that mean we get ISO 9001 too? Quality, process and managerial capability is what we want to prove. What would you suggest, if any? And thanks for letting me know its not required to go in search of consultants.
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்மா
I have managed a product development group, both hardware design and manufacture and software. I would strongly second Franks advice. A 9000 certification requires you to have an effective process, know it (documented) and be able to demonstrate you know what you are making and can make it. All auditors I have dealt with (in Aus) have been of that viewpoint. Consultants are not going to help you much as the important aspect is you knowing your own processes. If the processes are simple, well understood in your organisation and you can confidently show they cause you to know what you make, ISO certification is not difficult. Avoid the jargon! People make an awful hash of ISO because they over complicate and end up with unmanageable processes they don't understand. One more point. You should know why you need to do this. In lots of industries ISO 9000 is not that necessary (assuming you are in control of you operation anyway). If you are selling to a large Telco or partner, they often have specific requirements. If it is EU there are lots of interesting directives to understand. Good luck!
-
I have managed a product development group, both hardware design and manufacture and software. I would strongly second Franks advice. A 9000 certification requires you to have an effective process, know it (documented) and be able to demonstrate you know what you are making and can make it. All auditors I have dealt with (in Aus) have been of that viewpoint. Consultants are not going to help you much as the important aspect is you knowing your own processes. If the processes are simple, well understood in your organisation and you can confidently show they cause you to know what you make, ISO certification is not difficult. Avoid the jargon! People make an awful hash of ISO because they over complicate and end up with unmanageable processes they don't understand. One more point. You should know why you need to do this. In lots of industries ISO 9000 is not that necessary (assuming you are in control of you operation anyway). If you are selling to a large Telco or partner, they often have specific requirements. If it is EU there are lots of interesting directives to understand. Good luck!
Thank you very much for your reply. The processess here are not really simple, but am sure are well understood. We are planning to go for ISO 9000 because it is a worldwide accepted standard and moreover would be an added credential for us. We are primarily into retail solution providing (software, hardware, embedded terminals and packages which includes everything for various segments of retail sale). But recently we have started focussing more into the software development aspect and we think an ISO 9000 would be an obvious advantage. But it seems like you have still a lot to tell. Please feel free share your thoughts over this, if you have more. Since you have experience on this, it would be of great help to us.
Nobody can give you wiser advice than yourself. - Cicero ப்ரம்ம குரு