855 Software Quality Assurance Plan Template
855 Software Quality Assurance Plan Template
855 Software Quality Assurance Plan Template
0]
<Project Name>
There are three general types of text format: Text in Black, Text in Blue with < >,
Text in Blue with [ ] and Text underlined in blue.
Text in Black
• Text in this style, black, is used for text that is equally applicable to all Software Quality
Assurance Plans and will be included in the Software Quality Assurance Plan without
modification. All document section headings are in the same category.
• Text in this style, <blue>, is used to indicate that the text needs to be updated with
project specific information such as the project name, persons name, persons title, date,
revision #, Document Control Number, exc…
• Text in this style, [blue], is used to indicate that there is additional instruction for tailoring
text in any specific section. Delete this style, [blue], text before the document is
finalized.
• Text in this style, blue, is used to indicate active links. These links are usually to project
or software assurance websites. The text color may very depending on each persons
personal computer settings/configuration.
All components of the table of contents will be addressed, but the level of detail is left up to the
software quality personnel. The length and level of detail of the Software Quality Assurance
Plan should be commensurate with the scope and complexity of the project.
Section headings may be added where necessary, but existing headings should not be
modified or deleted. If a particular section is not applicable to the specific Software Quality
Assurance Plan under production, that fact should be noted under the section heading, together
with a brief explanation.
The following disclaimer appears on all pages: “Printed copies of this document are for
REFERENCE PURPOSES ONLY! The only controlled copy of this document is located on-line
at <http://xxxxxxxx>. This disclaimer should be modified to contain the appropriate URL, but
should not be removed.
Finally, in the Software Assurance Plan Template, this entire section (“General Tailoring
Guidelines”) will be deleted.
Foreword
This document is a <Project Name> Project controlled document and adheres to IEEE 730-
2002, the IEEE Standard for Software Quality Assurance Plans. Changes to this document
require prior approval of the <Project Name> Project Configuration Control Board (CCB).
Proposed changes shall be submitted to the <Project Name> Systems Assurance Manager
(SAM), along with supportive material justifying the proposed change.
Signature Page
Prepared by:
_______
<Preparer Name> <Date>
<Preparer Title>
Reviewed by:
_______ _________
<Reviewer Name> <Date> <Reviewer Name> <Date>
<Reviewer Title> <Reviewer Title>
Approved by:
_______
<Approver Name> <Date>
<Approver Title>
Table of Contents
1.0 Purpose.................................................................................................................................1
1.1 Scope.................................................................................................................................1
3.0 Management..........................................................................................................................3
3.2 Tasks..................................................................................................................................4
3.3.1 SAM................................................................................................................................5
4.0 Documentation.......................................................................................................................8
4.1 Purpose..............................................................................................................................8
5.1 Purpose..............................................................................................................................9
6.1 Purpose............................................................................................................................11
7.0 Test 12
13.0 Training..............................................................................................................................14
15.0 Glossary............................................................................................................................15
List Of Tables
Table
1.0Purpose
The purpose of this Software Quality Assurance (SQA) Plan is to establish the goals,
processes, and responsibilities required to implement effective quality assurance functions for
the <Project Name> project.
The <Project Name> Software Quality Assurance Plan provides the framework necessary to
ensure a consistent approach to software quality assurance throughout the project life cycle. It
defines the approach that will be used by the SAM and Software Quality (SQ) personnel to
monitor and assess software development processes and products to provide objective insight
into the maturity and quality of the software. The systematic monitoring of <Project Name>
products, processes, and services will be evaluated to ensure they meet requirements and
comply with <Project Name> policies, standards, and procedures, as well as applicable Institute
of Electrical and Electronic Engineers (IEEE) standards.
1.1 Scope
This plan covers SQA activities throughout the <identify phases, e.g., formulation and
implementation> phases of the <Project Name> mission. [Indicate whether or not SQA
activities will continue through operations and maintenance of the system.]
[Enter a brief description of the project, the suppliers of the software, the software items covered
by the plan, and their intended use.]
2.0Reference Documents
The following documents were used or referenced in the development of this plan:
[Update the reference document list to include a list of project documents used or referenced in
the development of this plan. This includes policies, standards, procedures, guidelines, and
other similar documents. Note: the last 6 documents listed are examples of project plans that
you might include. Cite them only if they apply and/or add others specific to your project.]
3.0Management
This section describes the management organizational structure, its roles and responsibilities,
and the software quality tasks to be performed.
[Enter a copy of the project’s management organizational chart or the project’s website where
this information can be found. This chart should reflect the project’s interface with Code 303.]
The SAM provides Project Management with visibility into the processes being used by the
software development teams and the quality of the products being built. The SAM is matrixed to
the <Project> project and maintains a level of independence from the project and the software
developers. Risk escalation begins at the project level, and extends to the AMO and the Office
of Systems Safety and Mission Assurance (OSSMA).
In support of software quality assurance activities, the SAM has assigned and secured Software
Quality personnel from the Mission Assurance Services Contract (MASC) to coordinate and
conduct the SQ activities for the project and identify and document noncompliance issues.
[Enter any additional management organization and/or suppliers providing support to this
project. Some examples of other management organizations include the Observatory provider,
instrument provider, and/or ground data system providers.]
3.2 Tasks
This section summarizes the tasks (product and process assessments) to be performed during
the development, operations, and maintenance of software. These tasks are selected based on
the developer’s Project Schedule, Software Management Plan (SMP) (and/or Software
Maintenance Plan) and planned deliverables, contractual deliverables, and identified reviews.
• Project Planning
• Project Monitoring and Control
• Measurement and Analysis
• System/Subsystem Reviews
• Peer Reviews
• Requirements Management
• Software Configuration Management and Configuration Audits (FCA/PCA)
• Test Management (Verification & Validation)
• Software Problem Reporting and Corrective Action
• Risk Management
• Supplier Agreement Management
[Add or delete assessments from Sections 3.2.1 and 3.2.2 to establish a comprehensive list of
processes and products you intend to monitor and/or assess.]
3.3.1 SAM
Responsibilities include, but are not limited to:
• Provide system software safety expertise to the SQ personnel and/or project personnel,
as required
• Assist in the assessment of the various software development efforts in terms of meeting
applicable software safety standards and requirements
• Assist in the resolution of any software safety related issues, concerns, and/or risks
identified throughout the project life cycle
• Assist in the review of various life cycle related artifacts as they pertain to system
software safety
For additional support information, reference the project’s System Safety Plan.
[Note: make sure this information is covered in the System Safety Plan.]
The staffing resource levels provided in the table below represent what has currently been
agreed upon between Project Management and the SAM. [NOTE: Table 3-2 can be omitted
from the SQAP so long as a reference to the information is provided and the resource
information is maintained.]
[Enter the Resource Level by Full Time Equivalent (FTE) and Fiscal Year for the duration of the
project life cycle. Example resource data is provided. Update the table to highlight all software
assurance resources supporting the project.]
See Section 9 for a list of additional resources for performing process and product quality
assurance activities.
4.0Documentation
4.1 Purpose
This section identifies the minimum documentation governing the requirements, development,
verification, validation, and maintenance of software that falls within the scope of this software
quality plan. Each document below shall be assessed (reviewed) by SQ personnel.
[Include only those documents that exist for your program/project and that you have resources
to actually review. Include in section 4.2 known documents from the Software Management
Plan (SMP), Statement of Work (SOW), and Contract Deliverable Requirements List (CDRL).]
5.1 Purpose
This section highlights the standards, practices, quality requirements, and metrics to be applied
to ensure a successful software quality program.
For details on the development standards for documentation, design, code, and test, reference
<the developer’s site>.
• Number of Open vs. Closed Software Problem Reports, with aging and trending over a
specified time frame
• Number of Open vs. Closed IV&V issues (via the Facility’s Project Issue Tracking
System (PITS))
• Number of Open vs. Closed software Requests for Action (RFAs) or Action Items from
project-level reviews (e.g., mission PDR or CDR)
6.0Software Reviews
6.1 Purpose
This section identifies the number and type of system/subsystem reviews and engineering peer
reviews that will be supported by the SQ Personnel. The Software Management Plan (SMP),
the project milestone chart, the project’s Engineering Peer Review Plan, and the SQ Personnel
resource levels determine the reviews that are supported. [Reference only those project plans
or schedules that form the basis of the review schedule.]
[List only those reviews you plan to attend and assess. Add/delete reviews and modify review
titles, as appropriate.]
7.0Test
SQ personnel will assure that the test management processes and products are being
implemented per the Software Management Plan and /or Test Plan(s). This includes all types of
testing of software system components as described in the test plan, specifically during
integration testing (verification) and acceptance testing (validation).
SQ personnel will monitor testing efforts to assure that test schedules are adhered to and
maintained to reflect an accurate progression of the testing activities. SQ will assure that tests
are conducted using approved test procedures and appropriate test tools, and that test
anomalies are identified, documented, addressed, and tracked to closure. In addition, SQ will
assure that assumptions, constraints, and test results are accurately recorded to substantiate
the requirements verification/validation status.
SQ personnel will review post-test execution related artifacts including test reports, test results,
problem reports, updated requirements verification matrices, etc… [Add any additional SQ test
activities (e.g., test witnessing)]
[Specify how you communicate your assessment results and corrective action status to the SAM
and the project. This is critical for PPQA.]
Software Quality deliverables, work products, and data items shall be maintained in accordance
with the OSSMA Software Quality Assurance Data Management Plan. This plan provides
information on the data item, data category, owner, location, collection frequency, and data
retention period.
Process and product assessments <identify key assessments> will be conducted and any
findings will be reported and tracked to resolution.
Oversight: Surveillance mode that is in line with the supplier's processes. The acquirer
retains and exercises the right to concur or nonconcur with the supplier's
decisions. Nonconcurrence must be resolved before the supplier can proceed.
Oversight is a continuum that can range from low intensity, such as acquirer
concurrence in reviews (e.g., PDR, CDR), to high intensity oversight, in which the
customer has day-to-day involvement in the supplier's decision-making process
(e.g., software inspections).
[For previously developed software, this section shall state the methods to be used to ensure
the suitability of the product for use with the software items covered by the SQAP.
For software that is to be developed, the supplier shall be required to prepare and implement an
SQAP in accordance with this standard. Discuss the receipt and review of that plan and how
SQ will use the deliverable.
Also state the methods to be employed to assure that the suppliers comply with the
requirements of this standard. If software is to be developed under contract, then the
procedures for contract review and update shall be described.]
13.0 Training
SQ personnel shall have fundamental knowledge in the following areas/disciplines through prior
experience, training, or certification in methodologies, processes, and standards:
• Software Quality Assurance:
• Audits and Reviews
• Risk Management
• Configuration Management
• Software Safety
• Contracts/Contractor Surveillance
• CMMI
• ISO 9001
• Project-specific Training
• ISD Software Engineering Discussions
It is the responsibility of the SQ personnel to acquire the necessary skills or knowledge in each
of the above disciplines. An SQ Training log has been prepared that specifies the type of
training and/or on-the-job experience that has been completed, along with the source of the
training, and the date of completion.
[Provide any additional detail regarding review of risks and the SQ relationship with the risk
review team. Provide link to project’s risk management system, if applicable.]
15.0 Glossary
Reference Software Assurance web site, <Web site name> glossary and software quality
acronyms.
Abbreviation/
Acronym
DEFINITION
AR Acceptance Review
GOV Government
Abbreviation/
Acronym
DEFINITION
PM Project Manager
REV Revision
SQ Software Quality
STD Standard
Abbreviation/
Acronym
DEFINITION
SW Software
VER Version
Vs. Verses
WI Work Instruction
WV West Virginia