ISO9000认证在软件工程管理的应用
ISO9000 certification in the software project management application
近年来，国际上影响最为深远的质量管理标准当属国际标准化组织于1987年公布的ISO9000系列标准了，这一国际标准发源于欧洲经济共同体，但很 快就波及美国、日本及世界各国。到目前为止，已有70多个国家在它们的企业中采用和实施这一系列标准。中国对此也十分重视，采取了积极态度。一方面确定对 其等同采用，发布了与其相应的质量管理国家标准系列GB/T19000；同时积极组织实施和开展质量认证工作。计算机软件行业自然也和其它领域一样被席卷 进去。分析ISO 9000系列标准如此迅速地在国际上广为流行，其原因主要在于：
In recent years, the most far-reaching impact on international quality management standard is the international organization for Standardization in 1987 released the ISO9000 series standard, this international standard originated in the European Economic Community, but soon spread to the United States, Japan and other countries in the world. So far, more than 70 countries in their enterprises in the adoption and implementation of this series standard. China also takes seriously very, took a positive attitude. A determination to its adoption by equivalent, released its corresponding quality management of national standards series GB / T19000; while actively organize and begin work of certificate of quality. The computer software industry is also natural and other areas were swept into the. Analysis of ISO 9000 series standards so quickly in the world wide for popularity, the main reason lies in the:
　　1）市场经济，特别是国际贸易的驱动。无论任何产业， 其产品的质量如何都是生产者、消费者、以及中间商十分关注的问题。市场的竞争很大程度上反映了在质量方面的竞争。ISO9000系列标准客观地对生产者 （也称供方）提出了全面的质量管理要求、质量管理办法，并且还规定了消费者（也称需方）的管理职责，使其得到双方的普遍认同，从而将符合ISO9000标 准的要求作为国家贸易活动中建立互相信任关系的基石。于是近年来在名国企业中形成了不通过这一标准认证就不具备参与国际市场竞争实力的潮流，并且在国际贸 易中，把生产者是否达到ISO9000质量标准作为购买产品的前提条件，取得ISO9000质量标准认证被人们当作进入国际市场的通行证。
1) market economy, especially international trade drive. Regardless of any industry, the quality of their products to consumers, producers, and the intermediate business pays close attention to the problem. The market competition to a large extent reflected in the quality of competition. ISO9000 series standard objectively to producer ( also known as supplier ) presents a comprehensive quality management, quality management, and also provides consumers ( also known as the ) management responsibilities, make its get both the universal recognition, which would be consistent with the ISO9000 standard applicable requirements as a national trade activities in the establishment of mutual trust relationship is the cornerstone. So in recent years in the enterprise formed not through this certification does not have to participate in international market competition strength of the trend, and in the international trade business, the producers have reached the quality standard of ISO9000 as purchasing products in the premise condition, obtained ISO9000 quality standard certification by people as a permit to enter the international market.
　　2）ISO9000系列标准适用领域广阔。它的出现最初针对制造行业，但现已面向更为广阔的领域，这包括：
2) a series of ISO9000 standards applicable fields. It appeared originally in manufacturing industry, but is now facing the broader fields, which include:
　　（1）硬件：指不连续的具有特定形状的产品，如机械、电子产品，不只是计算机硬件。
( 1): refers to the hardware not continuous with a special shape products, such as machinery, electronic products, not just computer hardware.
　　（2）软件：通过支持媒体表达的信息所构成的智力产品。计算机软件当然属于其中。
( 2): through software support media expression information composed of intellectual products. Computer software course belongs to the.
　　（3）流程性材料：将原料转化为某一特定状态的产品。如，流体、粒状、线状等，通过瓶装、袋装等或通过管道传输交付。
( 3) the process of materials: raw materials into a particular state of the product. Such as, fluid, granular, linear, bottled, bagged, or by transmitting through the pipe delivery.
　　（4）服务：为满足客户需求的更为广泛的活动。
( 4) services : in order to meet customer demand for more extensive activities.
　　ISO 9000系列标准的内容 ISO9000系列标准为： ISO9000质量管理和质量保证标准??选择和使用的导则；
Standard of ISO 9000 series ISO9000: ISO9000 content series of standards for quality management and quality assurance standards and guidelines for use of choice??;
　　ISO9001质量体系??设计/开发、生产、安装和服务中质量保证模式；
The ISO9001 quality system?? design / development, production, installation and service quality assurance model;
　　ISO9002质量体系??生产和安装中的质量保证模式；
The ISO9002 quality system?? production and installation of quality assurance model;
　　ISO9003质量体系??最终检验和测试中的质量保证模式；
The ISO9003 quality system?? final inspection and testing quality assurance model;
　　ISO9004质量管理和质量体系要素??导则。
The ISO9004 quality management and quality system elements for??.
　　ISO9000系列标准的主体部分可以分为两组：一组是用于“需方对供方要求质量保证”的标准??9001~9003；一组是用于“供方建立质量保证体系”的标准??9004 9001，9002和9003之间的区别，在于其对象的工序范围不同：
ISO9000 series standards body part can be divided into two groups: one group is used for" the demand side of the supplier quality assurance" standards?? 9001 ~ 9003; one group is used for" the establishment of quality assurance system" standard?? 900490019002 and 9003 difference between, in the procedure of different objects:
　　9001范围最广，包括从设计直到售后服务；
The 9001 most widely, including design until after sale service;
　　9002为9001的子集，而9003又是9002的子集。
9002 into 9001 subsets, and the 9003 is the 9002 subset.
　 　9000系列标准原本是为制造硬件产品而制定的标准，不能直接用于软件制作。后来曾试图将9001改写用于软件开发方面，但效果不佳。于是，以ISO 9000系列标准的追加形式，另行制定出9000-3标准。这样，9000-3就成了用于“使9001适用于软件开发、供应及维护”的“指南”。不过，在 9000-3的审议过程中，日本等国曾先后提出过不少意见。所以，在内容上与9001已有相当不同。ISO9000-3（即 GB/T19000.3-94)，全称《质量管理和质量保证标准第三部分：在软件开发、供应和维护中的使用指南》。
9000 series of standards is originally for manufacturing hardware products and the development of the standard, can not be directly used for software production. Later tried to pull the 9001 adapted for software development, but the effect is not good. Then, with ISO 9000 series standards shall be formulated separately to form, 9000-3 standard. In this way, the 9000-3 became used to" make the 9001 applies to software development, supply and maintenance of the" guide"". However, in the 9000-3 review process, the country such as Japan has put forward many opinions. So, in content from the 9001 already had quite different. ISO9000-3 (GB / T19000.3-94 ), full name" quality management and quality assurance standards part third: in software development, supply and maintenance guide to using".
　　制定与实施ISO9000系列标准
Formulation and implementation of the ISO9000 series of standards
　 　1）强调质量并非在产品检验中得到，而是形成于生产的全过程。ISO9000-3叙述了需方和供方应如何进行有组织的质量保证活动，才能得到较为满意的 软件；规定了从双方签订开发合同到设计、实现以至维护整个软件生存期中应当实施的质量保证活动，但并没有规定具体的质量管理和质量检验方法和步骤。 ISO9000-3的核心思想是“将质量制作入产品之中”。其实道理是很明显的，软件在完成编码以后，不论花多大的力气用于测试，提高质量都是有限度的， 更不必说需求规格说明存在的问题常常是测试无法发现的。事实上，软件产品的质量取决于软件生存期所不阶段的活动。
1) emphasize the quality is not in product testing, but formed in the whole process of production. ISO9000-3 describes the demand-side and supply-side how they should be organized the quality assurance activities, can be more satisfied with the software; set from the two sides signed the contract to design, realize the development and maintenance of the whole software life cycle should implement quality assurance activities, but not a specific quality management and quality inspection methods and steps. ISO9000-3 is the core idea of" quality production into the product". In fact, the reason is very obvious, the software after the completion of coding, however much work for testing, improving quality is limited, not to mention the requirements specification problems are often unable to find the test. In fact, the software product quality depends on the software life cycle does not phase activities.
　　2）为把握产品的质 量，ISO9000要求“必须使影响产品质量的全部因素在生产全过程中始终处于受控状态”。为使软件产品达到质量要求，ISO9000-3要求软件开发机 构建立质量保证体系。首先要求明确供需双方的职责，针对所有可能影响软件质量的各个因素都要采取有力措施，作出如何加强管理和控制的决定。对与质量有关的 人员规定其职责和职权，使之责任落实到人，产品质量真正得到控制。
2) to grasp the product quality requirements, ISO9000" must make all factors affecting product quality in the production process in a controlled state". In order to make the software products meet quality requirements, ISO9000-3 software development machine to establish quality assurance system. The first requirement of both sides of supply and demand functions, for all possible effects of software quality factors must take effective measures, make how to strengthen the management and control decision. On quality related personnel regulates their functions and powers, the responsibility to implement, product quality is really under control.
　　3）ISO9000标准要求证实：“企业具有持续提供符合要求产品的能力 ”。质量认证是取得这一证实的有效方法。产品质量若能达到标准提出的要求，由不依赖于供方和需方的第三方权威机构对生产厂家审查证实后出具合格证明。显 然，如果这一认证工作是公正的、可*的，其公证的结果应当是可以信赖的。正确实施产品质量认证制度自然会在促进产品质量提高，指导消费者选购产品，提高质 量合格产品企业的声誉，以及节省社会检验大量费用等方面发挥积极作用。 生产企业为了达到质量标准，取得质量认证，必须多方面开展质量管理活动。其中，企业负责人的重视以及企业全体人员的积极参与是取得成功的关键。
3) the standard of the ISO9000 confirmed:" the enterprise has continued to provide to meet the requirements of the ability of products". Certificate of quality is made this proved effective method. Products if the quality can meet the standard requirements, which does not depend on the supply-side and demand-side of the authority of the third party to the manufacturer review confirmed after the issuance of certificates. Significantly however, if this certification is fair, reliable, the notarization result should be trusted. Correct implementation of product quality certification system will naturally in promoting the improvement of product quality, guiding consumers to buy products, improve the quality of qualified products business reputation, as well as saving society examine large cost plays a positive role. The production of the enterprise in order to achieve the quality standards, certification, must carry out quality management activities. Among them, the person in charge of the enterprise and the importance of enterprise staff 's active participation is the key to success.
　 　4）ISO9000标准还强调“质量管理必须坚持进行质量改进”。贯彻ISO9000标准是企业加强质量管理、提高产品质量的过程，这个过程包含许多工 作绝非轻而易举、一蹴而就所能奏效的。即使已经取得了质量认证也不能认为一劳永逸而放松质量管理。实际上认证通常以半年为有效期。取得认证之后尚需接受每 年1~2次的定期检查，其目的在于促使企业坚持进行质量改进。
4) ISO9000 standard also stressed that "quality management must adhere to the quality improvement". Implement ISO9000 standard is the enterprises to strengthen quality management, improve the quality of products of the process, this process contains many workers do not be an easy job to accomplish at one stroke, can work. Even if has achieved quality certification cannot be expected to put things right once and for all and loosen quality management. In fact certification is usually to half for the period of validity. After obtaining attestation is required each year 1 ~ 2 times the regular inspection, its purpose is to urge enterprises adhere to quality improvement.