Calibre appointed by SABS to Audit Software Quality

The South African Bureau of Standards (SABS) has appointed Calibre in the capacity of Technical Expert in Software Quality, a move that will see the company form part of the SABS certification audit team, when so required.

"The appointment was made thanks, largely, to the fact that Calibre Intellect has as part of its team a certified quality auditor (CQA), certified by the American Society for Quality. This resource has over 18 years experience with ISO 9000. The auditor [AdP1]is also a member of the Software Division of the American Society for Quality," says Devon Dalbock, CEO at local CRM specialist, Calibre Solutions.

ISO 9001 is a generic model for quality assurance in design/development, production, installation and servicing. Interpretation of the requirements of the standard is left to individual organisations wishing to be registered formally as evidence of meeting these requirements.

"Calibre Intellect has an intimate knowledge of ARP 042. This, coupled to the intimate knowledge of ISO 9001 (Quality management systems have been designed and implemented by the relevant resources), ISO 9000-3 (Guidelines for the Application of ISO 9001 to the Development, Supply and Maintenance of Software), and the availability of certified auditors, ideally positions Calibre Intellect as the company of choice for software quality auditing," he explains.

The subject matter of quality audits extends across the entire spectrum of the quality function, but the bulk of auditing is performed under several well-established categories:

• Audits of policies and objectives.

• Audit of performance against company objectives.

• Audits of plans, systems and procedures.

• Audit of execution.

• Product audit.

An audit is in part a review of results versus goals. "The personal participation of upper management establishes direct contact with various personnel and direct exposure to various realities. These contacts and exposures provide upper management with additional vital inputs for decision-making - inputs not found in reports of performance versus goals. Hence we conduct internal quality management system audits," says Dalbock. The usual purposes of quality audits are to provide independent assurance that:

• Plans or attaining quality are such that, if followed, the intended quality will be attained.

• Products are fit for use and safe for the user.

• Laws and regulations have been followed.

• There is conformance to specifications.

• Procedures are adequate and are being followed.

• The data system provides accurate and adequate information on quality to all concerned.

• Deficiencies are identified and corrective action is taken.

• Opportunities for improvement are identified and the appropriate personnel are alerted.

There is little commonality in the approach to auditing software companies against the requirements of ISO 9001. This lack of uniformity creates a serious problem for companies that seek proof of conformance to ISO 9001 in software development, since there is such a large gap between the ISO 9001 clauses and their interpretation in the field of software. This is evident in the differences in the interpretation between those who create and maintain software quality management systems and those who interpret those requirements for compliance purposes (quality system auditors).

"ISO 9001 is the undisputed international benchmark for quality management. It is used by companies in more than 70 countries around the world. The number of ISO 9000 certificates issued worldwide is expected to exceed 250 000 by the end of the year 2000," he concludes.