Abstract
Society today is moving towards rapid digitalization of almost every aspect of our lives. From healthcare and transport to work or entertainment, we depend on software products that need to function properly. The adequate construction of these software products can be evaluated and certified by means of quality standards. However, adopting quality standards is a complex and time-consuming task that requires experienced practitioners with advanced knowledge about standards and development practices. This presents a dichotomy for development companies that are transitioning to more agile schemes, where the necessary quality knowledge is scarce and poorly documented, and is slowly learnt and applied by novel practitioners. To overcome these issues, this paper presents a model-driven approach to automate the analysis of software development processes that must be aligned to quality standards. The approach has been implemented in an open-source tool and applied to a case study to automatically generate a gap analysis by reusing expert knowledge related to the ISO 9001 standard. The application has demonstrated it is possible to reduce the effort required from expert practitioners to perform the analysis and improve development processes to ensure the fulfillment of specific quality standards.
Similar content being viewed by others
Data availability
The model diagrams related to the proposal application have been deposited in Zenodo repository with the reference code 7378525.
Notes
Eclipse Modeling Tools. Retrieved from https://www.eclipse.org/downloads/packages/release/202212/r/eclipse-modeling-tools.
The CMMi-DEV model defined can be downloaded from https://zenodo.org/deposit/7378525.
The ISO 9001 model defined can be downloaded from https://zenodo.org/deposit/7378525. The original model is in Spanish.
References
Al-Zewairi, M., Biltawi, M., Etaiwi, W., & Shaout, A. (2017). Agile software development methodologies: Survey of surveys. Journal of Computer and Communications, 5(05), 74. https://doi.org/10.4236/jcc.2017.55007
Ayyagari, M. R., & Atoum, I. (2019). CMMI-DEV implementation simplified. International Journal of Advanced Computer Science and Applications, 10(4).
Basri, S., & O’Connor, R. V. (2010). Understanding the perception of very small software companies towards the adoption of process standards. Paper presented at the European Conference on Software Process Improvement.
Boulos, M. N. K., Brewer, A. C., Karimkhani, C., Buller, D. B., & Dellavalle, R. P. (2014). Mobile medical and health apps: State of the art, concerns, regulatory control and certification. Online Journal of Public Health Informatics, 5(3), 229.
Campanelli, A. S., & Parreiras, F. S. (2015). Agile methods tailoring–a systematic literature review. Journal of Systems and Software, 110, 85–100. https://doi.org/10.1016/j.jss.2015.08.035
Castellanos Ardila, J. P., Gallina, B., & Ul Muram, F. (2022). Compliance checking of software processes: A systematic literature review. Journal of Software: Evolution and Process, 34(5), e2440.
CMMI Product Team. (2006). CMMI for Development, version 1.2.
da Fonseca, L. M. C. M., Domingues, J. P., Machado, P. B., & Harder, D. (2019). ISO 9001: 2015 adoption: A multi-country empirical research. Journal of Industrial Engineering and Management (JIEM), 12(1), 27–50.
Dahar, H., & Roudies, O. (2018). Measurement of co-deployment of IT quality standard: Application to ISO9001, CMMI and ITIL. Paper presented at the International Conference Europe Middle East & North Africa Information Systems and Technologies to Support Learning.
de la Vara, J. L., Marín, B., Ayora, C., & Giachetti, G. (2020). An empirical evaluation of the use of models to improve the understanding of safety compliance needs. Information and Software Technology, 126, 106351. https://doi.org/10.1016/j.infsof.2020.106351
de la Vara, J. L., Ruiz, A., & Blondelle, G. (2021). Assurance and certification of cyber–physical systems: The AMASS open source ecosystem. Journal of Systems and Software, 171, 110812.
Deguchi, A., Hirai, C., Matsuoka, H., Nakano, T., Oshima, K., Tai, M., & Tani, S. (2020). What is society 5.0. Society, 5, 1–23.
Digital.ai. (2021). 15th Annual State of Agile Report. Retrieved from https://stateofagile.com/. Last accessed December 2022.
Edison, H., Wang, X., & Conboy, K. (2021). Comparing methods for large-scale agile software development: A systematic literature review. IEEE Transactions on Software Engineering. https://doi.org/10.1109/TSE.2021.3069039
Engelen, L., & van den Brand, M. (2010). Integrating textual and graphical modelling languages. Electronic Notes in Theoretical Computer Science, 253(7), 105–120.
Ferreira, A. I. F., Santos, G., Cerqueira, R., Montoni, M., Barreto, A., Barreto, A. O. S., & Rocha, A. R. (2007). Applying ISO 9001: 2000, MPS. BR and CMMI to achieve software process maturity: BL informatica's pathway. Paper presented at the 29th International Conference on Software Engineering (ICSE'07).
Fisher, M., Mascardi, V., Rozier, K. Y., Schlingloff, B.-H., Winikoff, M., & Yorke-Smith, N. (2021). Towards a framework for certification of reliable autonomous systems. Autonomous Agents and Multi-Agent Systems, 35, 1–65.
Frakes, W., & Terry, C. (1996). Software reuse: Metrics and models. ACM Computing Surveys (CSUR), 28(2), 415–435.
Fukuyama, M. (2018). Society 5.0: Aiming for a new human-centered society. Japan Spotlight, 27(5), 47–50.
Furtado, A. P. C. C., Gomes, M. A. W., Andrade, E. C., & de Farias Junior, I. H. (2012). MPT. BR: A Brazilian maturity model for testing. Paper presented at the 2012 12th International Conference on Quality Software.
García-Borgoñon, L., Barcelona, M. A., García-García, J. A., Alba, M., & Escalona, M. J. (2014). Software process modeling languages: A systematic literature review. Information and Software Technology, 56(2), 103–116. https://doi.org/10.1016/j.infsof.2013.10.001
Giachetti, G., de la Vara, J. L., & Marín, B. (2022). Mastering agile practice adoption through a model-driven approach for the combination of development methods. Business & Information Systems Engineering, 1–23. https://doi.org/10.1007/s12599-022-00785-5
Gonzalez-Perez, C., & Henderson-Sellers, B. (2008). A work product pool approach to methodology specification and enactment. Journal of Systems and Software, 81(8), 1288–1305.
Gonzalez-Perez, C., Henderson-Sellers, B., McBride, T., Low, G. C., & Larrucea, X. (2016). An Ontology for ISO software engineering standards: 2) Proof of concept and application. Computer Standards & Interfaces, 48, 112–123.
Guerrero, G., Guevara, A., Quiña-Mera, J. A., Guevara-Vega, C. P., & García-Santillán, I. (2022). Software Project Management Integrating CMMI-DEV and SCRUM. Paper presented at the Applied Technologies: Third International Conference (ICAT 2021).
Hallstedt, S. I., Isaksson, O., & Öhrwall Rönnbäck, A. (2020). The need for new product development capabilities from digitalization, sustainability, and servitization trends. Sustainability, 12(23), 10222.
Henriquez, V., Calvo-Manzano, J. A., Moreno, A. M., & San Feliu, T. (2022). Agile-CMMI V2. 0 alignment: Bringing to light the agile artifacts pointed out by CMMI. Computer Standards & Interfaces, 82, 103610.
Ijaz, Q., Asghar, H., & Ahsan, A. (2016). Exploratory study to investigate the correlation and contrast between ISO 9001 and CMMI framework: Context of software quality management. Paper presented at the 2016 Sixth International Conference on Innovative Computing Technology (INTECH).
Imoize, A. L., Idowu, D., & Bolaji, T. (2019). A brief overview of software reuse and metrics in software engineering. World Scientific News, (122), 56–70.
International Organisation for Standardisation. (2000). ISO, 9001, 2000.
International Organisation for Standardisation. (2015). ISO, 9001, 2015.
Jeffries, R. (2001). What is extreme programming. XP magazine, 11.
Kurapati, N., Manyam, V. S. C., & Petersen, K. (2012). Agile software development practice adoption survey. Paper presented at the International Conference on Agile Software Development.
Lee, I., Sokolsky, O., Chen, S., Hatcliff, J., Jee, E., Kim, B., . . . & Roederer, A. (2011). Challenges and research directions in medical cyber–physical systems. Proceedings of the IEEE, 100(1), 75–90.
Lee, M.-C., & Chang, T. (2006). Applying TQM, CMM and ISO 9001 in knowledge management for software development process improvement. International Journal of Services and Standards, 2(1), 101–115.
Leveson, N. G., & Weiss, K. A. (2009). Software system safety. In Safety Design for Space Systems (pp. 475–505): Elsevier.
López, L., Burgués, X., Martínez-Fernández, S., Vollmer, A. M., Behutiye, W., Karhapää, P., . . . & Oivo, M. (2022). Quality measurement in agile and rapid software development: A systematic mapping. Journal of Systems and Software, 186, 111187.
Machado, E. M. M., Mexas, M. P., Meza, L. A., & de Oliveira, I. A. M. (2022). Implementation processes of quality multi models: ISO 9001, CMMI-DEV ML3, AND MPT. BR ML3 in small and medium-sized enterprises (SMES) of information technology. Economic and Social Development: Book of Proceedings, 29–38.
Mahanti, A. (2006). Challenges in enterprise adoption of agile methods-a survey. Journal of Computing and Information Technology, 14(3), 197–206. https://doi.org/10.2498/cit.2006.03.03
Montoni, M. A., Rocha, A. R., & Weber, K. C. (2009). MPS. BR: A successful program for software process improvement in Brazil. Software Process: Improvement and Practice, 14(5), 289–300.
Munoz, M., Mejia, J., & Ibarra, S. (2018). Tools and practices to software quality assurance: A systematic literature review. Paper presented at the 2018 13th Iberian Conference on Information Systems and Technologies (CISTI).
Muñoz, M., Peña, A., Mejia, J., Gasca-Hurtado, G. P., Gómez-Alvarez, M. C., & Laporte, C. (2019). A comparative analysis of the implementation of the Software Basic profile of ISO/IEC 29110 in thirteen teams that used predictive versus adaptive life cycles. Paper presented at the Systems, Software and Services Process Improvement: 26th European Conference (EuroSPI 2019).
Mutafelija, B., & Stromberg, H. (2003). Systematic process improvement using ISO 9001: 2000 and CMMI. Artech House.
Mylopoulos, J. (1992). Conceptual modelling and Telos. Conceptual modelling, databases, and CASE: An integrated view of information system development, 49–68.
OMG. (2011). Business Process Model and Notation (BPMN) Specification. Version 2.0.
Ozkaya, I. (2021). Can we really achieve software quality? IEEE Software, 38(3), 3–6.
Pardo-Calvache, C. J., Chilito-Gómez, P. R., Viveros-Meneses, D. E., & Pino, F. J. (2019). Scrum+: A scaled Scrum for the agile global software development project management with multiple models. Revista Facultad de Ingeniería Universidad de Antioquia(93), 105–116.
Pastor, O., España, S., Panach, J. I., & Aquino, N. (2008). Model-driven development. Informatik-Spektrum, 31(5), 394–407.
Pino, F. J., García, F., & Piattini, M. (2008). Software process improvement in small and medium software enterprises: A systematic review. Software Quality Journal, 16(2), 237–261.
Poth, A., Sasabe, S., Mas, A., & Mesquida, A. L. (2019). Lean and agile software process improvement in traditional and agile environments. Journal of Software: Evolution and Process, 31(1), e1986.
Qumer, A., & Henderson-Sellers, B. (2008). A framework to support the evaluation, adoption and improvement of agile methods in practice. Journal of Systems and Software, 81(11), 1899–1919. https://doi.org/10.1016/j.jss.2007.12.806
Rodríguez, M., & Piattini, M. (2012). Systematic review of software product certification. Paper presented at the 7th Iberian Conference on Information Systems and Technologies (CISTI 2012).
Rodriguez, M., Verdugo, J., Pino, F., Delgado, B., & Piattini, M. (2021). Software development process assessment with MMIS v. 2, an ISO/IEC 33000-Based Model. IT Professional, 23(6), 17–23.
Runeson, P., Host, M., Rainer, A., & Regnell, B. (2012). Case study research in software engineering: Guidelines and examples. John Wiley & Sons.
Ruy, F. B., de Almeida Falbo, R., Barcellos, M. P., & Guizzardi, G. (2014). An ontological analysis of the ISO/IEC 24744 metamodel. Paper presented at the FOIS.
Schwaber, K., & Beedle, M. (2002). Agile software development with Scrum (Vol. 1): Prentice Hall Upper Saddle River.
SEI. (2010). CMMI for Development v1. 3, CMU/SEI-2010-TR-033.
Silva, F. S., Soares, F. S. F., Peres, A. L., de Azevedo, I. M., Vasconcelos, A. P. L., Kamei, F. K., & de Lemos Meira, S. R. (2015). Using CMMI together with agile software development: A systematic review. Information and Software Technology, 58, 20–43.
Singh, A., Singh, K., & Sharma, N. (2012). Managing knowledge in agile software development. International Journal of Advanced Computer Science and Applications (IJACSA), 2(4).
Tomar, D. (2020). TQM, ISO 9000, Six sigma and CMMI project management in business and technology. Software Engineering, 9(1), 1–8.
Unterkalmsteiner, M., Gorschek, T., Islam, A. M., Cheng, C. K., Permadi, R. B., & Feldt, R. (2011). Evaluation and measurement of software process improvement—a systematic literature review. IEEE Transactions on Software Engineering, 38(2), 398–424.
Valdés, G., Visconti, M., & Astudillo, H. (2011). The tutelkan reference process: A reusable process model for enabling SPI in small settings. Paper presented at the European Conference on Software Process Improvement.
Vieira, J. K., de Farias Junior, I., de Moura, H. P., & da Silva, D. S. M. (2020). Multi-model software process improvement based on c2m and mr-mps-sw models. Journal of Information Systems Engineering and Management, 5(4), em0127.
Walz, J., & Caroll, S. (2011). IEEE Std 730 software quality assurance: Supporting CMMI-DEV v1. 3, product and process quality assurance. Paper presented at the 23rd Systems and Software Technology Conference (SSTC).
Weske, M. (2007). Business process management architectures. Springer.
Wohlin, C., Runeson, P., Höst, M., Ohlsson, M. C., Regnell, B., & Wesslén, A. (2012). Experimentation in software engineering. Springer Science & Business Media.
Funding
The work leading to this paper received funding from the VALU3S (H2020-ECSEL grant agreement no 876852; Music360 Project (Horizon Europe research and innovation programme) grant agreement No 101094872; MCIN/AEI/10.13039/501100011033 ref. PCI2020-112001; European Union NextGenerationEU/PRTR), REBECCA (HORIZON-KDT agreement no 101097224; MCIN/AEI/10.13039/501100011033 ref. PCI2022-135043–2; European Union NextGenerationEU/PRTR), iRel4.0 (H2020-ECSEL grant agreement no 876659; MCIN/AEI/10.13039/501100011033 ref. PCI2020-112240; European Union NextGenerationEU/PRTR), ETHEREAL (MCIN/AEI/10.13039/501100011033 ref. PID2020-115220RB-C21; ERDF A way of making Europe), and Treasure (JCCM ref. SBPLY/19/180501/ 000270; EC’s ERDF A way of making Europe) projects; the Ramon y Cajal Program (MCIN/AEI/10.13039/501100011033 ref. RYC-2017–22836; ESF Investing in your future); The Valencian Innovation Agency and Innovation through the OGMIOS project (INNEST/2021/57); The Generalitat Valenciana through the CoMoDiD project (CIPROM/2021/023); The Spanish State Research Agency through the DELFOS (PDC2021-121243-I00) and SREC (PID2021-123824OB-I00) projects; MICIN/AEI/ 10.13039/501100011033; and co-financed with ERDF and the European Union Next Generation EU/PRTR; and SIAM (Chile’s CORFO-INNOVA ref. 16COTE-60218), and NISUM Technologies in Chile.
Author information
Authors and Affiliations
Contributions
Giovanni Giachetti conceived the proposal and wrote the main manuscript text. José Luis de la Vara performed the conceptual validation of the model-driven approach. Beatriz Marín supported the empirical validation of the approach. Giovanni Giachetti, José Luis de la Vara, and Beatriz Marín prepared and reviewed the manuscript.
Corresponding author
Ethics declarations
Conflict of interest
The authors declare no competing interests.
Additional information
Publisher's Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
Springer Nature or its licensor (e.g. a society or other partner) holds exclusive rights to this article under a publishing agreement with the author(s) or other rightsholder(s); author self-archiving of the accepted manuscript version of this article is solely governed by the terms of such publishing agreement and applicable law.
About this article
Cite this article
Giachetti, G., de la Vara, J.L. & Marín, B. Model-driven gap analysis for the fulfillment of quality standards in software development processes. Software Qual J 32, 255–282 (2024). https://doi.org/10.1007/s11219-023-09649-x
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s11219-023-09649-x