Overview of IEEE/EIA 12207: Standard for Information Technology

IEEE/EIA 12207 was adopted for use by the Department of Defense on May 27, 1998, replacing
MIL-STD-498. It is packaged in three parts:
• IEEE/EIA 12207.0, Standard for Information Technology-software life cycle
processes. This contains ISO/IEC 12207 in its original form and six additional
annexes.
• IEEE/EIA 12207.1, Standard for Information Technology-software life cycle
processes-Life cycle data. Provides additional guidance on recording life cycle data.
• IEEE/EIA 12207.2, Standard for Information Technology-software life cycle
processes-Implementation considerations. Provides additions, alternatives, and
clarifications to the ISO-IEC 12207's life cycle processes as derived for U.S. practices.

IEE/EIA 12207.0
Clause 1-Scope.
Purpose: This International Standard establishes a common framework for software life
cycle processes, with well-defined terminology, that can be referenced by the software
industry. It contains processes, activities, and tasks that are to be applied during the
acquisition of a system that contains software, a stand-alone software product, and software
service and during the supple, development, operation, and maintenance of software
products. Software includes the software portion of firmware.
Clause 2-Normative references
Clause 3-Definitions
Clause 4- Application of this International Standard
4.1.1 Life cycle processes - This Standard groups the activities that may be performed
during the life cycle of a software into five primary processes, eight supporting processes,
and four organizational processes. Each process is divided intro a set a activities; each
activity is divided into a set of tasks.

The Five Primary Processes (see Clause 5 for details)

Acquisition Defines the activities of the acquirer, the organization that acquires a
system, software product, or software service.
Supply Defines the activities of the supplier, the organization that provides the
system, software product or software service to the acquirer.
Development Defines the activities of the developer, the organization that defines and
develops the software product.
Operation Defines the activities of the operator, the organization that provides the
service of operating a computer system in its live environment for its users.
Maintenance Defines the activities of the maintainer, the organization that provides the
service of maintaining the software product; that is, managing modifications
to the software product to keep it current and in operational fitness. This
process includes the migration and retirement of the software product.

12207v11.doc 1 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
(12207.0 clause 4, continued)
The eight Supporting Life Cycle Processes (see Clause 6 for details)
Documentation Defines the activities for recording the information produced by a life cycle process.
Configuration Defines the configuration management activities.
management
Quality Defines the activities for objectively assuring that the software products and
Assurance processes are in conformance with their specified requirements and adhere to their
established plans. Joint reviews, Audits, Verification and Validation may be used as
techniques of Quality Assurance.
Verification Defines the activities( for the acquirer, the supplier, or an independent party) for
verifying the software products and services in varying depth depending on the
software project.
Validation Defines the activities (for the acquirer, the supplier, or an independent party) for
validating the software products of the software project.
Joint Review Defines the activities for evaluating the status and products of an activity. This
process may be employed by any two parties, where one party (reviewing party)
reviews another party (reviewed party) in a joint forum.
Audit Defines the activities for determining compliance with the requirements, plans, and
contract. This process may be employed by any two parties, when one party
(auditing party) audits the software products or activities of another party (audited
party).
Problem Defines a process for analyzing and removing the problems (including
resolution nonconformances), whatever their nature or source, that are discovered during the
execution of development, operation, maintenance, or other processes.

The four Organizational Life Cycle Processes (see Clause 7 for details)
Management Defines the basic activities of the management, including project management,
related to the execution of a life cycle process.
Infrastructure Defines the basic activities for establishing the underlying structure of a life cycle
process.
Improvement Defines the basic activities that an organization (that is, acquirer, supplier, developer,
operator, maintainer, or the manager of another process) performs for establishing,
measuring, controlling, and improving its life cycle process.
Training Defines the activities for providing adequately trained personnel.

Relationship of 12207's Life Cycle Processes:

ACQUISITION MAINTENANCE

contract MANAGEMENT • OPERATION

SUPPLY DEVELOPMENT

CM DOCUMENTATION PROB. RES. VERIFICATION

QA
JOINT REVIEW AUDIT VALIDATION

SUPPORTING PROCESSES

INFRASTRUCTURE TRAINING IMPROVEMENT

ORGANIZATIONAL PROCESSES

12207v11.doc 2 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
12207.0 Clause 5 - Primary life cycle processes

5.1: The Acquisition Process

Activity Tasks (paraphrased) 12207.1 Information Item guidelines
5.1.1 Initiation .1 Describe concept or need for product Desc, Record 6.3 Concept OD
.2 Analyze system requirements Specification 6.24 SRS
.3 Approve analyzed requirements
.4 Define software requirements Description 6.22 SRD
.5 Use Devel. Process for .2 and .4
.6 Consider acquisition options Record
.7 Evaluate off-the-shelf products
.8 Document and execute acquisition plan Plan 6.1 Acquisition Plan
.9 Document acceptance criteria Record
5.1.2 Request for .1 Document acquisition requirements (RFP) Record
Proposal .2 Tailor Standards
Preparation .3 Define contract milestones and audits
.4 Give requirements to performer
5.1.3 Contract .1 Establish selection procedure Record
prep and update .2 Select supplier based on evaluation
.3 Get inputs on tailoring this Standard
.4 Prepare and negotiate contract
.5 Negotiate changes to contract
5.1.4 Supplier .1 Monitor suppliers activities iaw 6.6 and 6.7
monitoring .2 Cooperate with timely resolutions
5.1.5 Acceptance .1 Define acceptance tests and procedures Procedure 6.28 T/VPr
and completion .2 Conduct acceptance review and testing
.3 Perform CM after acceptance

5.2 The Supply Process

Activity Tasks (paraphrased) 12207.1 Information Item guidelines
5.2.1 Initiation .1 Review RFP, policies, regulations Record --
.2 Decide to bid or accept contract -- --
5.2.2Preparation .1 Prepare proposal in response to RFP -- --
of response -- --
5.2.3 Contract .1 Negotiate and enter into contract -- --
.2 Mod contract per change mechanism -- --
5.2.4 Planning .1 Define management and quality assurance -- --
.2 Select a software life cycle model Description --
.3 Plan management, assurance, resources Plan 6.11 Proj Mgmt Plan
.4 Evaluate make-or-buy decision Plan 6.11 Proj Mgmt Plan
.5 Document project management plans Plan 6.11 Proj Mgmt Plan
5.2.5 Execution .1 Execute project management plans -- --
and control .2 Develop, Operate, or Maintain iaw process -- --
.3 Monitor progress, identify problems -- --
.4 Control subcontractors iaw Acq. Process Procedure --
.5 Interface with IV&V and test agent -- --
.6 Interface with others per contract and plans -- --
5.2.6 Review .1 Coordinate contract reviews -- --
and evaluation .2 Support meetings, reviews, tests, audits -- --
.3 Conduct V&V per 6.4 and 6.5 -- --
.4 Report evaluations, audits, tests to -- --
acquirer -- --
.5 Provide access to facilities -- --
.6 Perform quality assurance iaw 6.3 -- --
5.2.7 Delivery .1 Deliver the product per contract -- --
and completion .2 Support acquirer with product per contract -- --

12207v11.doc 3 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
(12207.0 Clause 5, continued)

5.3 The Development Process

Activity Tasks (paraphrased) 12207.1 Information Item guidelines
5.3.1 Process .1 Define software life cycle model -- --
Implementation .2 Document and control outputs -- --
.3 Select and use standards, tools, languages -- --
.4 Document development plans Plan, Desc 6.5 DPP, 6.17 SDSD
.5 Deliver all needed products -- --
5.3.2 System .1 Specify system requirements Specification 6.26 SRS
requirements .2 Evaluate requirements against criteria Spec, Record 6.26 SRS, 6.6 SRER
analysis
5.3.3 System .1 Establish top-level architecture Description 6.25 SARAD
architectural .2 Evaluate architecture against criteria Desc, Record 6.25 SARAD, 6.6 SAER
design
5.3.4 Software .1 Document software requirements Desc 6.22 SRD, 6.30 UDD
requirements .2 Evaluate requirements against criteria Desc, Record 6.22 SRD, 6.6 SRER
analysis .3 Conduct joint reviews iaw 6.6 -- --
5.3.5 Software .1 Transform requirements into architecture Description 6.12 SAD
architectural .2 Document top-level design for interfaces Description 6.19 SIDD
design .3 Document top-level design for database Description 6.4 DBDD
.4 Document preliminary user documentation Description 6.30 UDD
.5 Document preliminary test requirements Plan 6.27 T/VP
.6 Evaluate architecture against criteria Desc, Record 6.12 SAD, 6.6 SAER
.7 Conduct joint reviews iaw 6.6 -- --
5.3.6 Software .1 Document design for each component Description 6.16 SDD
detailed design .2 Document design for interfaces Description 6.19 SIDD
.3 Document design for database Description 6.4 DBDD
.4 Update user documentation Description 6.30 UDD
.5 Document unit test requirements Plan 6.27T/VP
.6 Update integration test requirements Plan 6.27T/VP
.7 Evaluate detailed design against criteria Rec, Desc 6.6 DDER, 6.16 SDD
.8 Conduct joint reviews iaw 6.6 -- --
5.3.7 Software .1 Document each unit, database and tests Desc, Rec, Proc 6.4 DBDD, 6.24 SCR, 6.28 T/VPr
coding and .2 Conduct and document unit testing Report 6.29 T/VRR
testing .3 Update user documentation Description 6.30 UDD
.4 Update integration test requirements Plan 6.27T/VP
.5 Evaluate code and test results Rec, Plan 6.7 EOCR,6.6 SCTRE, 6.24SCR, 6.27T/VP
5.3.8 Software .1 Document integration plans Plan, Proc 6.18 SIP, 6.28 T/VPr
integration .2 Conduct and document integration tests Report 6.29 T/VRR
.3 Update user documentation Description 6.30 UDD
.4 Document qualification tests Proc 6.28 T/VPr
.5 Evaluate plans and tests against criteria Proc, Desc 6.28 T/VPr, 6.30 UDD
.6 conduct joint reviews iaw 6.6 Record, Plan 6.6 SIER, 6.18 SIP
5.3.9 Software .1 Conduct and document qualification testing Report 6.29 T/VRR
qualification .2 Update user documentation Description 6.30 UDD
testing .3 Evaluate tests against criteria Record 6.6 SIER
.4 Support audits iaw 6.7 -- --
.5 Prepare product for next phase Record 6.24 SCR
5.3.10 System .1 Integrate software with hardware & others Report 6.29 T/VRR
integration .2 Document integration tests Procedure 6.28 T/VPr
.3 Evaluate integrated system against criteria Record 6.6 SQTER
5.3.11 System .1 Conduct and document qualification tests Report 6.29 T/VRR
qualification .2 Evaluate system against criteria Record 6.6 SER
testing .3 Support audits iaw 6.7 -- --
.4 Prepare product for installation Record 6.24 SCR
5.3.12 Software .1 Plan installation in target environment -- --
installation .2 Install software iaw plan -- --
5.3.13 Software .1 Support acquirer's acceptance tests Report 6.29 T/VRR
acceptance .2 Deliver product per contract Record 6.24 SCR
support .3 Provide training per contract -- --

12207v11.doc 4 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
(12207.0 clause 5, continued)
5.4 The Operation Process
Activity Tasks (paraphrased) 12207.1 Information Item guidelines
5.4.1 Process .1 Document operational activities Plan 6.9 Op. Process Plan
implementation .2 Document problem tracking procedures Procedure --
.3 Document product testing procedures Procedure --
5.4.2 Operational .1 Conduct operational testing -- --
testing .2 Test software code and databases -- --
5.4.3 System .1 Operate per user documentation -- --
operation -- --
5.4.4 User .1 Assist users as requested Record --
support .2 Track user requests (Maint. Process) Description 6.2 Change Request
.3 Provide problem work-around solutions -- --

5.5 The Maintenance Process

Activity Tasks (paraphrased) 12207.1 Information Item guidelines
5.5.1 Process .1 Document maintenance activities Plan, Proc 6.8 Maint. Process Plan
Implementation .2 Document problem tracking procedures Procedure --
.3 Manage modifications to the system Procedure --
5.5.2 Problem .1 Analyze problem reports -- --
and modification .2 Replicate or verify problems -- --
analysis .3 Develop modifications -- --
.4 Document problems, analysis, fixes Request 6.2 Modification Request
.5 Get modifications approved per contract -- --
5.5.3 Modification .1 Document where changes are needed Record --
implementation .2 Implement mods (use Devel. Process) --
5.5.4 Mainten- .1 Review integrity of modified system -- --
ance review/ .2 Get approval for modifications per contract -- --
acceptance
5.5.5 Migration .1 Ensure products meet with this standard -- --
.2 Develop and use Migration Plan Plan --
.3 Notify users of migration Report --
.4 Conduct parallel operations if needed -- --
.5 Notify all concerned, archive all records -- --
.6 Perform post-op review of changes -- --
.7 Keep data from old environment -- --
5.5.6 Software .1 Document plans for retirement Plan --
retirement .2 Notify all users of plans and activities Report --
.3 Conduct parallel operations -- --
.4 Notify all concerned, archive all records -- --
.5 Keep data from retired product per contract -- --

12207.0 Clause 6 - Supporting processes

Process Activity Tasks (paraphrased)
6.1 Documentation 6.1.1 Process implementation .1 Develop a documentation plan
6.1.2 Design and development .1 Use applicable standards for documents
.2 Confirm source of input data
.3 Review and edit documents against stds.
6.1.3 Production .1 Produce documents per the plan
.2 Control iaw CM Process (6.2)
6.1.4 Maintenance .1 Modify documents iaw CM Process
6.2 Configuration 6.2.1 Process implementation .1Develop CM Plan
Management 6.2.2 Configuration identification .1 Establish scheme to identify software items
6.2.3 Configuration control .1 Record, evaluate, approve, and implement
change requests. Keep audit trail. Control
access to items.
6.2.4 Configuration status accounting .1 Maintain records and status reports
6.2.5 Configuration evaluation .1 Ensure functional completeness of products
6.2.6 Release management and .1 Control release and delivery of products
delivery and documentation

12207v11.doc 5 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
(12207.0 clause 6, continued)
Process Activity Tasks (paraphrased)
6.3 Quality 6.3.1 Process implementation .1 Establish QA process
Assurance .2 Coordinate QA with Verification (6.4),
Validation (6.5), Joint reviews (6.6), and
Audits (6.7)
.3 Develop a QA Plan
.4 Schedule and execute QA tasks
.5 Make QA records available to acquirer
.6 Give QA team organizational freedom
6.3.2 Product assurance .1 Assure that plans are being executed
.2 Assure products comply with contract
.3 Assure delivered products satisfy req'ts
6.3.3 Process assurance .1 Assure processes comply with contract
.2 Assure practices, tests, libraries comply
.3 Assure prime requirements passed to subs
.4 Assure support provided iaw contract
.5 Assure measures iaw standards, procedures
.6 Assure staff is trained
6.3.4 Assurance of quality systems .1 Assure additional quality management
activities iaw ISO 9001 as specified in contract
6.4 Verification 6.4.1 Process implementation .1 Determine if verification effort needed
.2 If needed, establish a process
.3 Select independent verification organization
.4 Identify activities and products to verify
.5 Develop verification plan and procedures
.6 Implement verification plan
6.4.2 Verification .1 Verify contract against criteria
.2 Verify process against criteria
.3 Verify requirements against criteria
.4 Verify design against criteria
.5 Verify code against criteria
.6 Verify integration against criteria
.7 Verify documentation against criteria
6.5 Validation 6.5.1 Process implementation .1 Determine if validation effort needed
.2 If needed, establish a process
.3 Select an validation organization
.4 Develop validation plan
.5 Implement validation plan
6.5.2 Validation .1 Prepare test requirements, cases, specs
.2 Ensure requirements met
.3 Conduct tests
.4 Validate that product satisfies intended use
.5 Test product in target environment
6.6 Joint review 6.6.1 Process implementation .1 Hold periodic and ad hoc reviews
.2 Agree to resources needed
.3 Set agenda, products, scope, procedures
.4 Record problems detected
.5 Document and distribute results
.6 Agree on outcome and action items
6.6.2 Project management reviews .1 Evaluate status against plans, schedules
6.6.3 Technical reviews .1 Evaluate products or services

12207v11.doc 6 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
(12207.0 clause 6, continued)
Process Activity Tasks (paraphrased)
6.7 Audit 6.7.1 Process implementation .1 Audit at predetermined milestones iaw plan
.2 Auditors shall be independent
.3 Agree to audit resources
.4 Agree on agenda, products, scope
.5 Record problems detected
.6 Document and distribute results
.7 Agree on outcome and action items
6.7.2 Audit .1 Conduct audits per criteria
6.8 Problem 6.8.1 process implementation .1 Establish problem resolution process for
resolution handling problems in products and activities.
6.8.2 Problem resolution .1 Track problems through detection, analysis,
and resolution

Clause 7 - Organizational life cycle processes

Process Activity Tasks (paraphrased)
7.1 Management 7.1.1 Initiation and scope definition .1 Establish the requirements for management
.2 Check resources: personnel, materials, etc.
.3 Modify requirements to achieve criteria
7.1.2 Planning .1 Plan efforts, schedules, tasks, duties, costs
7.1.3 Execution and control .1 Implement plan to meet objectives
.2 Monitor process
.3 Investigate and resolve problems
.4 Report progress
7.1.4 Review and evaluation .1 Ensure products and plans are evaluated
.2 Assess evaluation results
7.1.5 Closure .1 Determine when process is complete
.2 Check results for completeness
7.2 Infrastructure 7.2.1 Process implementation .1 Define infrastructure needed
.2 Plan and document its establishment
7.2.2 Establishment of the .1 Document configuration of infrastructure
infrastructure .2 Install infrastructure in time for process
7.2.3 Maintenance of the .1 Maintain, monitor, modify infrastructure to
infrastructure satisfy requirements of the process
7.3 Improvement 7.3.1 Process establishment .1 Establish organizational processes for
software life cycle
7.3.2 Process assessment .1 Develop process assessment procedure
.2 Review process for effectiveness
7.3.3 Process improvement .1 Improve processes as needed
.2 Collect and analyze process data
.3 Collect and use quality cost data
7.4 Training 7.4.1 Process implementation .1 Determine training needs, develop plan
7.4.2 Training material development .1 Develop training presentation materials
7.4.3 Training plan implementation .1 Provide training to personnel, keep records

Annex A - Tailoring process (normative)

Process Activity Tasks (paraphrased)
Annex A: Tailoring A.1 Identifying project environment .1 Identify model, activities, requirements,
policies, strategies, criticality, etc.
A.2 Soliciting inputs .1 solicit inputs from users, support personnel,
bidders, etc.
A.3 Selecting processes, activities, .1 Decide on processes, activities, tasks
and tasks .2 Specify in contract those not in this
standard
A.4 Documenting tailoring decisions .1 Document decisions and rationale
and rationale

12207v11.doc 7 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology

12207.0 Annex B - Guidance on tailoring (informative)

Annex C - Guidance on processes and organizations (informative)
Annex D - Bibliography (informative)
Annex E - Basic concepts of ISO/IEC 12207 (informative)
Annex F - Compliance
Annex G - Life cycle processes objectives
Annex H - Life cycle data objectives (normative)
• Purpose of data is to describe, assist, define, communicate, etc.
• Characteristics of data: unambiguous, complete, verifiable, consistent, modifiable,
traceable, presentable
• Types of data: requirements, design, test, configuration, user, management, quality
• Form should: be appropriate, support retrieval, support operations, etc.
Annex I - Relationships (informative)
• 12207 relationships to IEEE Std 1074, ISO/IEC 12207, IEEE Std 1498, ISO 9001
Annex J - Errata
• Errors or last-minute changes

IEEE/EIA 12207.1, Standard for Information Technology-software life cycle processes-

Life cycle data. Provides additional guidance on recording life cycle data.

IEE/EIA 12207.1
Clause 1-Scope.
This guide provides guidance for recording life cycle data resulting from the life cycle processes of
IEEE/EIA 12207.0.

Clause 2 - Normative references

Clause 3 - Definitions
Clause 4 - Life cycle data (expands on 12207.0 Annex H)

Table 1 identifies 84 requirements in 12207.0 for outputs or artifacts. Specified are the
information item, the 12207.0 clause, the kind of documentation (record, plan, procedure, description,
etc.). , the 12207.1 clause (6.x) with specific guidelines, and other available standards/guides/tech
reports.

12207.1 Clause 5 - General information item content guidelines

Lists purpose and 10 to 20 general content guidelines each for:
5.1 Description
5.2 Plan
5.3 Procedure
5.4 Record
5.5 Report
5.6 Request
5.7 Specification

12207v11.doc 8 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
12207.1 Clause 6 - Specific information item content guidelines
Gives purpose, 12207.0 references, specific contents, and characteristics guidelines for:
Information Item in 12207.1 Process/Activity Reference in 12207.0
6.1 Acquisition plan 5.1.1.8 Acquisition process - initiation
6.2 Change request or modification request 5.4.4 Operation process-user support
6.3 Concept of operations description 5.1.1.1 Acquisition process - initiation
6.4 Database design description 5.3.5.3 Development-Software Arch design
6.5 Development process plan 5.3.1.4 Development process- implementation
6.6 Evaluation records 5.3.2.2 Development-System reqts analysis
6.7 Executable object code record 5.3.7.0 Development-Software code & test
6.8 Maintenance process plan 5.5. Maintenance process
6.9 Operation process plan 5.4 Operation process- implementation
6.10 Problem report and problem resolution report 6.8 Problem resolution process
6.11 Project management plan 5.2.4.3 Supply process-planning
6.12 Software architecture description 5.3.5.1 Development-Software Arch design
6.13 Software configuration index record 6.2 CM process
6.14 Software configuration management plan 6.2.1.1 CM process
6.15 Software configuration management records 6.2 CM process
6.16 Software design description 5.3.6.1 Development-Software detailed design
6.17 Software development standards description 5.3.1.4 Development process- implementation
6.18 Software integration plan 5.3.8.1 Development-Software integration
6.19 Software interface design description 5.3.5.2 Development-Software Arch design
6.20 Software quality assurance plan 6.3.1.3 QA process
6.21 Software quality assurance records 6.3 QA process
6.22 Software requirements description 5.1.1.4 Acquisition process - initiation
6.23 Software verification results report 6.4. Verification process
6.24 Source code record 5.3.7.1 Development-Software code & test
6.25 System architecture and reqts alloc. descr 5.3.3.1 Development-Sys Arch design
6.26 System requirements specification 5.1.1.2 Acquisition process - initiation
6.27 Test or validation plan 5.3.5.5 Development-Software Arch design
6.28 Test or validation procedures 5.1.5.1 Acquisition process - acceptance
6.29 Test or validation results report 5.3.7.2 Development-Software code & test
6.30 User documentation description 5.3.4.1 Development-Software reqts analysis

Sequence of documents across process/activities (same data as above with different sort)

Process/Activity Reference in 12207.0 Information Item in 12207.1

5.1.1.1 Acquisition process - initiation 6.3 Concept of operations description
5.1.1.2 Acquisition process - initiation 6.26 System requirements specification
5.1.1.4 Acquisition process - initiation 6.22 Software requirements description
5.1.1.8 Acquisition process - initiation 6.1 Acquisition plan
5.1.5.1 Acquisition process - acceptance 6.28 Test or validation procedures
5.2.4.3 Supply process-planning 6.11 Project management plan
5.3.1.4 Development process- implementation 6.5 Development process plan
5.3.1.4 Development process- implementation 6.17 Software development standards description
5.3.2.2 Development-System reqts analysis 6.6 Evaluation records
5.3.3.1 Development-Sys Arch design 6.25 System architecture and reqts alloc. description
5.3.4.1 Development-Software reqts analysis 6.30 User documentation description
5.3.5.1 Development-Software Arch design 6.12 Software architecture description
5.3.5.2 Development-Software Arch design 6.19 Software interface design description
5.3.5.3 Development-Software Arch design 6.4 Database design description
5.3.5.5 Development-Software Arch design 6.27 Test or validation plan
5.3.6.1 Development-Software detailed design 6.16 Software design description
5.3.7.0 Development-Software code & test 6.7 Executable object code record
5.3.7.1 Development-Software code & test 6.24 Source code record
5.3.7.2 Development-Software code & test 6.29 Test or validation results report
5.3.8.1 Development-Software integration 6.18 Software integration plan
5.4 Operation process- implementation 6.9 Operation process plan
5.4.4 Operation process-user support 6.2 Change request or modification request
5.5. Maintenance process 6.8 Maintenance process plan
6.2.1.1 CM process 6.14 Software configuration management plan
6.2 CM process 6.13 Software configuration index record
6.2 CM process 6.15 Software configuration management records
6.3.1.3 QA process 6.20 Software quality assurance plan
6.3 QA process 6.21 Software quality assurance records
6.4. Verification process 6.23 Software verification results report
6.8 Problem resolution process 6.10 Problem report and problem resolution report

Annex A - References (informative)

12207v11.doc 9 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology

IEEE/EIA 12207.2, Standard for Information Technology-software life cycle processes-

Implementation considerations. Provides additions, alternatives, and clarifications to the ISO-
IEC 12207's life cycle processes as derived for U.S. practices..

IEE/EIA 12207.2 - provides guidance in implementing the process requirements of 12207.0.

The guidance is intended to summarize the best practices of the software industry in the context
of the process structure provided by ISO/IEC 12207.

12207.2 includes all clauses of 12207.0 in boxes, followed by GUIDANCE information.

Clause 5 - 12207.0 Clause 5 (Primary life cycle processes) and associated GUIDANCE
Clause 6 - 12207.0 Clause 6 (Supporting processes) and associated GUIDANCE
Clause 7 - 12207.0 Clause 7 (Organizational life cycle processes) and associated GUIDANCE
Annex A - 12207.0 Annex A (tailoring process) and associated GUIDANCE
Annex B - 12207.0 Annex F (Compliance) and associated GUIDANCE
Annex C - 12207.0 Annex G (Life cycle processes objectives) and associated GUIDANCE
Annex D - 12207.0 Annex H (Life cycle data objectives) and associated GUIDANCE
Annex E - 12207.0 Annex J (Errata) and associated GUIDANCE
Annex F - Use of reusable software products (informative)

12207.2 Annex G - Candidate joint management reviews (informative)

Suggests 11 types of reviews and cites IEEE Std 1028
• Software plan reviews
• Operational concept reviews
• System/subsystem requirements reviews
• System/subsystem design reviews
• Software requirements reviews
• Software design reviews
• Test readiness reviews
• Test results reviews
• Software usability reviews
• Software maintenance reviews
• Critical requirements reviews

Annex H - Software measurement categories (informative)

Recognizes that measures are unique for each project. Provides these categories:
• Schedule and progress
• Resources and cost
• Growth and stability
• Product quality
• Development performance
• Technical adequacy
Annex I - Guidance on development strategies and build planning (informative)
Compares and contrasts once-through (waterfall), incremental, evolutionary strategies

Annex J - Category and priority classifications for problem reporting (informative)

Defines Priority 1-5 for problem areas

12207v11.doc 10 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
(12207.2, continued)
Annex K - Software product evaluations (informative) - defines 11 criteria
• Accurately describes (an item)
• Adequate test cases, procedures, data, results
• Consistent with indicated product(s)
• Covers (a given set of items)
• Feasible
• Follows software plan
• Internally consistent
• Meets delivery requirements, if applicable
• Presents a sound approach
• Shows evidence that (an item under test) meets its requirements
• Testable
• Understandable
Annex L - Risk Management (informative)
Addresses risk planning, identification, analysis, mitigation, tracking and control

Annex M - Life cycle processes references (informative)

Provides IEEE and ISO references to 12207 processes

Sample Flow of the 12207 Development Process and associated documents

One example of applying 12207 to the Waterfall development strategy

Process Implementation Activity

DPP, SDSD
Software
Qual
Software
Test
Integra-
Software tion SCR, T/VRR
Software Item 1: Code Software
Software & Test SIP,T/VPr Installation
Software Detailed
Arch. Design EOCR, SCR,T/VPr, T/VRR
Software
Design
Reqts. SRD, UDD System
Analysis T/VRR
SAD, SIDD, DBDD, T/VP Software System Qual
Qual Test SCR
SRD, UDD Software Integra-
Test tion
SARAD Integra-
Software tion
Sys Arch Software Item 2: Code T/VPr
Design Software & Test
T/VRR
Software Detailed
System Arch. Design
Software Software
Reqts Design Acceptance
Reqts.
Analysis Support
Analysis
SRS T/VRR
Hardware items SCR

Supporting Processes: Documentation, CM, QA, Verification, Validation, Joint Review, Audit, Problem resolution
SCMP, SCMR, SCIR, SQAP, SQAR, SVRR, PR/PRR
Organizational Processes: Management, Infrastructure, Improvement, Training

12207v11.doc 11 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology

Comparison of MIL-STD-498 development activities to 12207:

MIL-STD-498 Development Activities IEEE/EIA 12207.0 Development Activities
5.1 Project planning and oversight 5.3.1 Process implementation
5.2 Establish software devel. environment
5.3 System requirements analysis 5.3.2 System requirements analysis
5.4 System design 5.3.3 System architectural design
5.5 Software requirements analysis 5.3.4 Software requirements analysis
5.6 Software design 5.3.5 Software architectural design
5.3.6 Software detailed design
5.7 Software implementation and unit testing 5.3.7 Software coding and testing
5.8 Unit integration and testing 5.3.8 Software integration
5.9 CSCI Qualification testing 5.3.9 Software qualification testing
5.10 CSCI/HWCI integration and testing 5.3.10 Software integration
5.11 System qualification testing 5.3.11 System qualification testing
5.12 Preparing for software use 5.3.12 Software installation
5.13 Preparing for software transition 5.3.13 Software acceptance support
5.14 Software configuration management 6.2 CM Process
5.15 Software product evaluation 6.7 Audit Process
5.16 Software quality assurance 6.3 QA Process
5.17 Corrective action 6.8 Problem resolution Process
5.18 Joint technical and management reviews 6.6 Joint review Process
5.19.1 Risk management .2 Annex L - Risk Management
5.19.2 Software management indicators .2 Annex H - Software measurement categories
5.19.3 Security and privacy
5.19.4 Subcontractor management 6.3.3.3 Assure prime requirements passed to subs
5.19.5 Interface with software IV&V agents
5.19.6 Coordination with associate developers
5.19.7 Improvement of project processes 7.3 Improvement Process

Comparison of Reviews
DoD-STD-2167A/MIL-STD-1521B MIL-STD-498: 12207.0 Joint Review Process
Formal Reviews Joint Reviews
Joint Technical Reviews Technical reviews
Joint Management Reviews: Project management reviews
Software plan reviews Software plan reviews
System Requirements Review (SRR) Operational concept reviews Operational concept reviews
System/subsys reqts review System/subsys reqts review
System Design Review (SDR) System/subsys design review System/subsys design review
Software Specification Review (SSR) Software requirements review Software requirements review
Preliminary design Review (PDR) Software design review Software design review
Critical Design Review (CDR)
Test Readiness Review (TRR) Test readiness review Test readiness review
Test results review Test results review
Software usability review Software usability review
Software supportability review Software supportability review
Critical requirements review Critical requirements review
Functional Configuration Audit (FCA)
Physical Configuration Audit (PCA)

12207v11.doc 12 of 13 7/30/98
 Overview of IEEE/EIA 12207: Standard for Information Technology
Comparison of documents among software standards

2167A MIL-STD-498 / 498 016 12207.0 12207.1 Information Item

Doc. J-STD-016 Document DI-IPSC- Annex Clause
SDP Software Development Plan (SDP) 81427 E.2.1 5.3.1.4 6.5 Development process plan
5.2.4 6.11 Project management plan
STP Software Test Plan (STP) 81438 E.2.2 5.3.8 6.18 Software integration plan
IP Software Installation Plan (SIP) 81428 E.2.3 5.5.5.2 Migration plan
5.3.12.1 Software installation plan
7.4.1.1 Training plan
CRISD Software Transition Plan (STrP) 81429 E.2.4 5.5.1.1 Maintenance plan
5.5.5.2 6.8 Maintenance process plan
5.5.5.2 Migration plan
5.4 6.9 Operation process plan
SSDD Operational Concept Descr (OCD) 81430 F.2.1 5.1.1.1 6.3 Concept of operations description
SSS System/Subsystem Spec (SSS) 81431 F.2.2 5.1.1.2 6.26 System requirements specification
5.3.2
IRS Interface Requirements Spec (IRS) 81434 F.2.3 5.1.1.4 6.22 Software requirements description
5.3.4
SRS Software Requirements Spec (SRS) 81433 F.2.4 5.1.1.4 6.22 Software requirements description
5.3.4
5.3.5.5 6.27 Test or validation plan
5.3.6
5.3.7
6.5
SSDD System/Subsys. Design Descr (SSDD) 81432 G.2.1 5.3.3.1 6.25 Software arch.& reqts alloc descr
5.3.3.2
IDD Interface Design Description (IDD) 81436 G.2.2 5.3.5.2 6.19 Software interface design descr
5.3.6.2
-- Database Design Description (DBDD) 81437 G.2.3 5.3.5.3 6.4 Database design description
5.3.6.3
5.3.7.1
SDD Software Design Description (SDD) 81435 G.2.4 5.3.5 6.12 Software arch. description
5.3.6 6.16 Software design description
STD Software Test Description (STD) 81439 H.2.1 5.1.5.1 6.28 Test or validation procedures
5.3.7.1
5.3.8
5.3.10
6.5
STR Software Test Report (STR) 81440 H.2.2 5.3.7.2 6.29 Test or validation results report
5.3.8.2
5.3.9.1
5.3.10.1
5.3.11.1
5.3.13.1
6.5
SPS Software Product Specification 81441 I.2.1 5.3.1.2 Software product description
(SPS) 6.2.2.1
VDD Software Version Description (SVD) 81442 I.2.2 6.2 6.13 Software config. index record
SPM Computer Prog'mg Manual (CPM) 81447 I.2.3 -- --
FSM Firmware Support Manual (FSM) 81448 I.2.4 -- --
SUM Software User Manual (SUM) 81443 J.2.1 5.3.4.1 6.30 User documentation description
5.3.5.4
5.3.6.4
5.3.7.3
5.3.8.3
5.3.8.5
5.3.9.2
-- Software Input/Output Manual (SIOM) 81455 J.2.2 -- --
-- Software Center Operator Mnl (SCOM) 81444 J.2.3 5.4 6.9 Operation process plan
CSOM Computer Operation Manual (COM) 81446 J.2.4 5.4 6.9 Operation process plan

12207v11.doc 13 of 13 7/30/98