COMPLIANCE REPORT REGARDING THE QUALITY MANAGEMENT SYSTEM OF THE MERCURIAL MINDS – A SOFTWARE DEVELOPMENT COMPANY Group Members: Mohsin Mahboob – 2084151 Abdul Hadi Mulkana – 2084132 Muntaha Abid Pracha – 2084166 MERCURIAL MINDS Profile MISSION STATEMENT OF M.M. “We want you to fundamentally change how you deliver Value to your customers. See the future. Use technology.” AIM Our clients use technology better, so they can nurture stronger relationships with their partners and customers. They rely on us to help them deliver value efficiently and effectively, through innovative ideas and expert advice. Profile Profile M.M. has registered offices in the US, UK, UAE and Pakistan and are active in 17 countries, spanning the Americas, the Caribbean, Europe, Africa, the Middle East, South Asia and the Pacific Islands. There are 150 plus employees. Key Customers & Partners Product and Services Project Management Methodology Agile Sprint Iterations Test Discover Sprint 1 Test Develop Design Discover Sprint 1 Test Develop Design Sprint 1 Develop Design Discover Nature of the Organization Project based Organization Matrix – Balanced Software Managers or Lead acts as Manager who takes decisions. Agile and rapid software development (ARSD) Data Collection Technique In-depth Interview method Tools: Questionnaire/Checklist No. of Interviews: Two Area of Interest: Good Practices of QMS Consent Limitation Quality Management System Quality Management Plan also referred as Test Plan Software Quality Assurance (SQA) Software Quality Control & Testing Quality Requirements Product & Process Quality Standards Software Quality Management Framework Quality Management Plan (Test Plan) Software Quality Assurance (SQA) Software Quality Control or Testing Ensure Quality is Planned Develop a SQA Plan Unit Testing Define how quality will be managed Identify roles & responsibilities of QA team API Testing Define Quality Assurance Activities & Audit List of processes & activities for Review & Audit Integration Test Define Quality & Testing Activities and tools Create an Audit Plan and Schedule for QA tasks System Test Analyze the Product Method to review the Organizational processes/activities Installation & uninstallation testing Define Test Strategy, Objectives & Criteria Review the processes Project plans & test plan Agile Testing Resource Planning Review specification/requirements of the Software Schedule and estimation Review test design & suspension criteria Plan Test Environment Review the release of the software Test Deliverables Audits (Actual requirements vs Established requirements) Software Quality Management Framework Function Suitability Performance Efficiency Compatibility Usability • Functional Completeness • Functional Correctness • Functional Appropriateness • Time Behavior • Resource Utilization, • Capacity • Co-existence • Interoperability • Appropriateness Recognition • Learnability • Operability • User Error Protection • User Interface Aesthetics • Accessibility Reliability • Maturity • Fault Tolerance • Recoverability Security • Confidentiality • Integrity • Authenticity, • Accountability Maintainability • Modularity • Reusability • Modifiability • Testability Portability • Adaptability, • Installation Product & Process Quality Standards ISO-9001:2015 Quality Management System (QMS) Capability Maturity Model Integration provide guidance for developing or improving processes that (CMMI) model meet the business goals of an organization. ISO15504 ISO/IEC 25010:2011 Process assessment, also termed Software Process Improvement and Capability Determination (SPICE) software product quality model.- The characteristics defined by both models are relevant to all software products and computer systems Quality Standards vs Quality Practices Checklist Standards vs Practices Fully met Partially met Not met I. Risk Management Plan Risks identified, recorded and risk strategies are developed X II. Estimation Project tasks are break out into work product for estimation X The estimation must be approved by the Management X III. Supporting Project Documents Risk Register Stakeholder Register Quality Testing Strategies Project Charter X X X X IV. Quality Management Standards Quality Management plan is documented. Quality Metrics are developed and documented. Resources for QA and testing are defined. The cost of quality is defined Costs of control are assigned to either the prevention or the appraisal costs subclass X X X X X Failures of control costs are further classified into internal failure costs and external failure costs: Test Strategy, Test Objectives and Test Criteria are well written and defined. Flow charts are used as processes maps. X X X V. Quality Assurance Problem solving tools are used to manage the quality. X An audit is a structured, independent process that examine the processes to comply with the quality standards (specification and requirements of the software) QA is performed by internal audit team. QA is performed by external audit team. External Audit or 3rd party audit includes the Desktop or Documentation Review X External Audit or 3rd party audit includes the compliance/implementation audit X X X X External Audit or 3rd party audit includes the Surveillance Audit SQA reviews and audits are documented. Process SQA reviews occur. SQA reviews of the work product are performed. SQA activities are reported to the management team. Supplier Selection and evaluation criteria is defined and documented. X X X X X X VI. Quality reports The test report are documented The result are acknowledged and approved by management team. Qualiry requirements are defined and documented. VII. Testing and Release The testing logs are documented throughout the process of the test execution. Status reports are documented throughout the process of the test execution. Functional and non-functional requirments are sub-devided X X X X X X VII. Other Standards identifying and documenting project roles, responsibilities, and reporting relationships are planned and documented. Defined standards are the combination of ISO 9001, ISO15504 ISO 900:2015 Certification is done. SIX SIGMA is achieved Communication plan is documented. The software is ready to be launched as per Customer requirement User acceptance testing is completed. X X X X X X Recommendations Cost Controls Appraisal Costs & Preventions Costs & Internal Failure Costs should be defined & categorized Risk Quantitative Techniques should be used for higher Management impact risks Quality Tools Statistical process control (SPC) should be defined as the use of statistical techniques to control a process or production method Third Party A separate external audit should be performed on the Assessment entire quality management system It is to recommend that M.M should pursue the ISO ISO Certification (9001:2015) for the quality management Certification system. Thanks you Thank you Thank you Thank you Thank you