ISO/IEC/ INTERNATIONAL STANDARD IEEE 90003 First edition 2018-11 Software engineering Guidelines for the application of Is0 9001:2015 to computer software Ingenierie du logiciel -Lignes directrices pour I'application de I'iso 9001:2015auxlogiciels informatiques IEC Reference number IS0/IEC/IEEE90003:2018(E) @IS0/IEC 2018 @IEEE2018 IS0/IEC/IEEE 90003:2018(E) COPYRIGHTPROTECTEDDOCUMENT IS0/IEC2018 IEEE2018 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting respectiveaddressbeloworIso'smemberbodyinthecountryoftherequester. ISO copyright office InstituteofElectricaland Electronics Engineers,Inc CP 401.Ch.de Blandonnet 8 3 Park Avenue, New York CH-1214 Vernier, Geneva NY10016-5997,USA Phone:+41227490111 Fax: +41 22 749 09 47 Email: [email protected] Email: [email protected] Website:www.iso.org Website:www.ieee.org Published in Switzerland IS0/IEC 2018-All rights reserved ii @IEEE 2018- All rights reserved IS0/IEC/IEEE90003:2018(E) Contents Page Foreword .V Introduction .vi 1 Scope ..1 2 Normative references 3 Terms and definitions. 4 Context of the organization .3 4.1 Understanding the organization and its context 3 4.2 Understanding the needs and expectations of interested parties .4 4.3 Determining the scope of the quality management system. 5 4.4 Qualitymanagementsystemanditsprocesses. 6 4.4.1 Quality management system processes. 6 4.4.2 InformationManagement 7 5 Leadership 8 5.1 Leadership and commitment 8 5.1.1 General. 8 5.1.2 Customer focus 9 5.2 Policy 5.2.1 Establishing thequalitypolicy. .9 5.2.2 Communicating the quality policy 10 5.3 Organizational roles, responsibilities and authorities 10 Planning .11 6 6.1 Actions to address risks and opportunities 11 6.1.1 Riskidentification. 11 6.1.2 Risk treatment 12 6.2 Quality objectives and planning to achieve them 12 6.2.1 Establishing quality objectives. 12 6.2.2 Implementation of quality objectives 13 6.3 Planning of changes. 14 7 Support. .14 7.1 Resources. 14 7.1.1 General 14 7.1.2 People 15 7.1.3 Infrastructure 15 7.1.4 Environmentfor the operation ofprocesses 16 7.1.5 Monitoring and measuring resources 17 7.1.6 Organizational knowledge. 18 7.2 Competence. 19 7.3 Awareness 20 7.4 Communication 20 7.5 Documented information 21 7.5.1 General. 21 7.5.2 Creating and updating. 22 7.5.3 Control ofdocumented information 22 8 Operation 23 8.1 Operational planning and control 23 8.1.1 General. 24 8.1.2 Evidence of conformitytorequirements. .25 8.2 Requirements forproducts and services 25 8.2.1 Customer communication.. .25 8.2.2 Determining therequirementsforproducts and services 27 8.2.3 Review of the requirements for products and services 29 @IS0/IEC2018-All rights reserved IEEE 2018 -All rights reserved iii