The Network of Centers for Very Small Entities (VSEs) Suzhou, China May 26th, 2016 ISO/IEC JTC 1/SC 7- Working Group 24

Transcription

1 The Network of Centers for Very Small Entities (VSEs) Suzhou, China May 26th, 2016 ISO/IEC JTC 1/SC 7- Working Group 24

2 Agenda Australia Belgium Canada Japan Mexico Thailand

3 Australia Australian Country Profile 23 million people Multicultural population Strong current government focus on innovation, small business, regional and rural development, indigenous population opportunities Biggest trading partner - CHINA

4 Australia Australian Business Profile Small business (<20 employees) are 97% of economy Many large businesses are not Australian owned Australians Resourceful, individualistic Inventive Not a strong standards culture ICT Business Profile Heterogeneous ICT services Software development, often with outsourced components (Phillipines, India..)

5 29110 support Australia Strong support from Standards Australia (NB) Many member organisations e.g. AICD, ACS, IEEE, consumers association, small business association, state and federal governments BUT no funding at present uptake Currently none Pilot company identified Software company on Gold Coast Governance and compliance software products Thoughtware press release

6 Australia plans Pilot company implementation Publicity Funding / government grant investigation

7 Belgium Lectures at the University of Antwerp Coaching students (Master, PhD) Industry Awareness Presentations (Agoria) Industry Implementations (2) Challenges: Industry Awareness/Interest Certification Thank you!

8 Company founded en 2013 by a software engineering graduate of ÉTS VSE is located in Canada and Tunisia Business domains An IT Start-Up Software development services, Web solutions, mobile applications Consulting services to implement ERP solutions ISO/IEC is used as a foundation to implement CMMI DEV level 2 practices Requested by some military contracts In May 2016 the start-up has 20 employees A Adapted from (Houcine 2016)

9 Large Engineering Division Transportation and Electricity Distribution Division A Canadian division of a large American engineering company, Company was established 10 years ago, Over 500 employees spread over 10 offices in Canada, The company was already using a robust project management process for their large-scale projects, A project was launched to document small and medium scale project management processes. A Adapted from (Laporte et al. 2016)

10 Classified their projects in 3 categories and developed 3 project management processes, checklists and templates Duration of project Size of team Large Engineering Division Small Project Medium project Large project Less than 2 months Equal or less than 4 people Between 2 and 8 months Between 4 and 8 people More than 8 months More than 8 people Number of engineering More than one One specialty Many specialties specialties involved specialty Between 5,000$ Between 50,000$ and Engineering fees Over 350,000$ and 70,000$ 350,000$ Percentage of projects 70% 25% 5% Small projects used ISO/IEC Entry Profile Medium projects used ISO/IEC Basic Profile Large projects used the Guide to the project management body of knowledge (PMBOK Guide) of PMI Advanced Intermediate Basic Entry A Adapted from (Laporte et al. 2016)

11 Cost analysis using the ISO method to evaluate the Economic Benefits of Standards Value chain Large Engineering Division Costs and Benefits Cost to implement and maintain Year 1 Year 2 Year 3 Total $ $ $ $ Net Benefits $ $ $ $ A Adapted from (Laporte et al. 2016)

12 Large Financial Institution The Cash Management IT department, of a large Canadian financial institution, is responsible for the development and maintenance of software tools used by traders. The software team is composed of 6 people. Each year, the division was faced with an increase in the numbers of requests to add, correct or modify features related to supported applications. Beforethe implementation of the ISO agile process, customers had the following complaints: Very difficult to know the status of specific requests Very often, there was an incident when a change is put in production. There was a large number of defects detected by the quality assurance department The development process was painful The documentation produced was not very useful. A (Translated from Plante 2015)

13 Large Financial Institution Coverage of initial Project Management tasks of the Basic Profile (Translated from Plante 2015)

14 Large Financial Institution Coverage of initial Software Implementation tasks to the Basic Profile 0% 50% 100% SI.1 Software Implementation Initiation SI.2 Software Requirements Analysis SI.3 Software Architectural and SI.4 Software Construction SI.5 Software Integration and Tests SI.6 Product Delivery 67% 67% 63% 71% 73% 67% (Translated from Plante 2015)

15 Large Financial Institution Reduction in the Monthly number of incidents and their impact Impact of defects is evaluated on a 1 to 5 scale (Translated from Plante 2015)

16 An Enterprise in the Automotive Field A company of more than 140 people (14 software developers), designs and sells electric powertrain systems in the automotive field. The company plans to increase its production systems in the coming years. Their products are embedded software that controls the operation of engines in real time and software that controls the interactions between the components of a vehicle.

17 An Enterprise in the Automotive Field A study was conducted to establish the difference between the processes in place and those proposed by ISO/IEC An action plan has been developed to organise the software process improvement activities An analysis of differences between ISO/IEC and ISO 26262, a standard for the automotive industry, was conducted An economic impact assessment was conducted using the methodology developed by ISO An ISO/IEC pilot project has been successfully completed in May ISO/IEC will be used in future projects.

18 A Large Governmental Organization The IT division of a large Canadian electricity provider has 1,950 employees that support more than 2,100 software applications. The organization had already implemented 12 process areas of the CMMI-DEV: Project Planning Project Monitoring and Control Supplier Agreement Management Requirements Management Requirements Development Technical Solution Product Integration Verification Validation Measurement and Analysis Process and Product Quality Assurance Configuration Management Traditional lifecycles were used for the development of this division. Page 18

19 A Large Governmental Organization A small department within the IT division, the Mobility and Georeferenced Solutions department Composed of 6 developers and 3 analysts, an architect and a manager Typical projects of the department are requests from internal customers to improve a few applications. A project was launched to tailor ISO to their needs and adapted to a Scrum approach. A pilot project, involving the creation of a web application for property management, has been conducted. This application greatly facilitated geographic data consultation. The process improvement project combined the advantages of ISO with elements of the CMMI model already in place. Page 19

20 Public transportation customers (e.g. subway) often require a CMMI maturity level for system and sub-system suppliers e.g. CMMI Level 2 In 2012, CSiT was composed of 4 people (10 people presently) Implementing the CMMI Level 2 Process Areas was too demanding at that time. Strategy Young Transportation Enterprise Implement the draft version of Systems Engineering ISO Basic profile as a foundation Used other frameworks to complete process descriptions e.g. INCOSE Handbook Perform a gap analysis between CMMI level 2 and the SE Basic Profile Implement practices needed for a successful CMMI level 2 assessment. A

21 Classification of CSiT processes Type of Project Light Process Standard Process Full Process Proof of Concept, Prototype Concept validation or Product Deployment at Customer Site Typical Project Product intended to be installed at Customer Site Project when CMMI level 2 is required by a Customer Product Testing or Product Deployment at Customer Site Small Project Medium Project Large Project Framework to be used ISO/IEC TR Entry Profile + CMMI - Supplier Agreement Management ISO/IEC TR Basic Profile + CMMI - Supplier Agreement Management CMMI (Level 2) Claude Y Laporte

22 2016 INCOSE International Symposium 2016 INCOSE International Symposium 16-page paper Edinburgh, July 16-21, 2016

23 Training modules Self-Training Modules Of about 15 minutes Developed so far: Introduction to ISO Overview of Entry Profile and Deployment packages Overview of Basic Profiles and Deployment packages Introduction to the Requirements Analysis DP Video clips of interviews of people that are involved in ISO implementation (e.g. President of Metam) Interviews will be conducted at the Berlin meeting in English, French, German, Spanish, etc. Mini tests Set of self-training modules will be freely available on Internet in French, English and Spanish

24 REPORT ON A STUDY PROJECT IN JAPAN Satoshi Fushimi (JISA, Japan) Satoshi.fushimi@sofdela.info

25 VSE+ SS PROJECT Concept Process definition=vse (Basic Profile) + Safety/Security Handbook-like articles for SS process practices Process definition VSE Basic Profile ISO/IEC ( is going to be re-named as 330xx) modified slightly (safety - safety and security ) This extension is based on the concept of

26 NEEDS Many VSEs are engaged in developments of safety/security-critical systems General backgrounds Embedded systems are more and more important. And some accidents are reported. Security is a big social concern. People require software vender s responsibilities.

27 WHO AND HOW n/tabid/451/default.aspx Who have participated? JISA (Japan Information Technology Services Industry Association) JASA (Japan Embedded Systems Technology Association) Other participants from AIST, Automobile industry, Sony, Business-cube (process assessment service company ) How is it published? An article on the JISA journal (spring 2016 issue) JISA Web (under preparation) JASA Web site (under preparation)

28 ISO/IEC :2011 (BASIC PROFILE) General Report of Certified Companies Number of Certified Companies by Location and Year TOTAL DE SERVICIOS CHIHUAHUA DISTRITO FEDERAL MICHOACÁN YUCATÁN COLOMBIA TABASCO TAMAULIPAS CERTIFICACIÓN Chihuahua: 1, - Distrito Federal: 9, - Michoacán: 1, - Yucatán: 1, - Colombia: 2, - Tabasco: 1, - Tamaulipas: 2 Total Certified Companies: 17

29 ISO/IEC :2011 (BASIC PROFILE) Spected Services on 2016 TOTAL OF NEW CERTIFICATION SPECTED NUMERO DE SERVICIOS MEXICO CHILE COLOMBIA PERU SERVICES SPECTED ISO/IEC :2011 -MÉXICO: 8 SERVICIOS - CHILE: 2 SERVICIOS - COLOMBIA: 5 SERVICIOS - PERÚ: 1 SERVICIO Total of Services Spected: 16

30 ISO Movement in Thailand Declare many ISO standards as National Standard for Software, ICT, Digital Industry More than 350 companies implementation 10 Universities in Education sector support for Resource/Training ISO29110: More than 25 Experts in ISO Consulting and 3 International Certify Bodies Scheme Factor for Government Auction (in prepare stage) Supported by Ministry of ICT Supported by Ministry of Industry Support VSE Awareness User/Government Resources/ Education Certificate Scheme Asia/Pacific Hub

31 Thailand