Software Standards & Norms – ISO 25010, 9241, 27001, GDPR & ITIL

This article defines key IT standards and norms, including exam questions and relevant tags.

In a Nutshell

Standards and norms form the foundation for high-quality software development, secure IT systems, and professional project management.

Overview

1. Software Development & Quality

ISO/IEC 25010 is the system and software quality model that replaces ISO 9126. It defines 8 quality characteristics: functionality, reliability, usability, performance efficiency, maintainability, compatibility, security, and portability. This is essential for defining software quality and test objectives.

ISO/IEC/IEEE 12207 describes software lifecycle processes from tendering through development, operation, and maintenance. It forms the basis for many development methodologies.

DIN EN 301 549 sets accessibility requirements for IT products, increasingly important for inclusive software development.

2. Usability & User Experience

DIN EN ISO 9241 covers human-system interaction. The key part is Section 110, which outlines the 7 dialogue principles: task suitability, self-descriptiveness, controllability, conformity with user expectations, error tolerance, individualization, and learning support. Highly relevant for exams.

DIN EN ISO 9241-210 describes the user-centered design process: understand context, specify requirements, design, and evaluate.

3. IT Security & Data Protection

ISO/IEC 27001 is the standard for information security management systems (ISMS). It shows how to build, implement, and improve security processes.

BSI Grundschutz provides the BSI’s IT baseline protection compendium with practical measures for IT security.

BDSG/GDPR are essential regulations. Understanding the GDPR and BDSG is critical: privacy by design, right of access, deletion, data processing agreements, and technical-organizational measures (TOMs).

4. Project Management & Processes

ISO 9001 defines quality management systems with the continuous improvement process (PDCA cycle: Plan-Do-Check-Act).

V-Model XT is a development model for IT projects, especially common in the public sector.

ITIL (ISO/IEC 20000) is the framework for IT service management with processes like incident, problem, and change management.

Exam-Relevant Points

ISO 25010: Defines 8 quality characteristics for software quality and test objectives. Essential for defining quality criteria in projects and exams.

ISO 9241-110: The 7 dialogue principles must be memorized (task suitability, self-descriptiveness, controllability, conformity with user expectations, error tolerance, individualization, learning support). Critical for usability questions on exams.

ISO 27001: Standard for information security management systems (ISMS). Describes building security processes, risk management, and continuous improvement of IT security.

GDPR: The General Data Protection Regulation with core principles like privacy by design, lawfulness, purpose limitation, and data minimization. Important for data processing agreements and TOMs.

ITIL: Framework for IT service management with processes including incident management (resolving disruptions), problem management (root cause analysis), and change management (planned changes).

Standards demonstrate structured approaches: Knowledge of standards shows solid expertise and professional practice. A major advantage in technical discussions and projects.

Core Components

1. Quality characteristics per ISO 25010: 8 properties (functionality, reliability, usability, performance efficiency, maintainability, compatibility, security, portability) form the basis for quality assessment.

2. Dialogue principles per ISO 9241-110: 7 principles for user-friendly dialogue design. Foundation for usability testing and UI design.

3. ISMS structure per ISO 27001: Structured implementation of an information security management system with risk assessment, security measures, and continuous improvement.

4. GDPR data protection principles: Lawfulness, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality. Basis for privacy-compliant software development.

5. ITIL service management processes: Incident, problem, change, configuration, and release management. Structured handling of IT services and disruptions.

6. PDCA cycle per ISO 9001: Plan-Do-Check-Act cycle for continuous process and quality improvement.

7. V-Model XT phases and activities: Phase-based methodology with activities from requirements through acceptance. Particularly relevant in the public sector.

8. Accessibility criteria per DIN EN 301 549: Requirements for accessible IT products. Important for inclusive software development and legal compliance.

9. Lifecycle processes per ISO 12207: Software lifecycle from tendering through development to maintenance. Forms the basis for many development approaches.

10. Technical-organizational measures (TOMs): Concrete measures for implementing GDPR (access controls, encryption, logging, backups).

Practical Example

Example: Quality objectives for a web application per ISO 25010:
- Functionality: User registration, login, data search
- Reliability: 99.9% availability, error handling
- Usability: ISO 9241-110 dialogue principles implemented
- Performance efficiency: Load time < 2 seconds
- Maintainability: Modular architecture, documented APIs
- Compatibility: Chrome, Firefox, Safari, mobile browsers
- Security: ISO 27001 ISMS, GDPR compliance
- Portability: Docker containers, cloud deployment

Advantages and Disadvantages

Advantages

• Structured approach
• Traceable quality
• Legal certainty through standards compliance
• Improved processes and products

Disadvantages

• Learning curve
• Certification costs
• Administrative overhead
• May limit flexibility

Common Exam Questions (with Brief Answers)

1. 8 quality characteristics per ISO 25010? Functionality, reliability, usability, performance efficiency, maintainability, compatibility, security, portability.
2. 7 dialogue principles per ISO 9241-110? Task suitability, self-descriptiveness, controllability, conformity with user expectations, error tolerance, individualization, learning support.
3. Purpose of ISO 27001? Building information security management systems.
4. GDPR core principles? Privacy by design, lawfulness, purpose limitation, data minimization, accuracy, storage limitation.
5. Main ITIL processes? Incident management, problem management, change management, service desk.
6. PDCA cycle per ISO 9001? Plan-Do-Check-Act: continuous improvement process.
7. Purpose of DIN EN 301 549? Accessibility requirements for IT products.
8. Importance of ISO 12207? Software lifecycle processes from development through maintenance.

Key Sources

1. https://www.iso.org/standard/64239.html (ISO 25010)
2. https://www.iso.org/standard/63078.html (ISO 9241-110)
3. https://www.iso.org/standard/54534.html (ISO 27001)
4. https://dsgvo-gesetz.de/ (GDPR)
5. https://www.itil.org/ (ITIL)

Related Articles on Software Quality

• Software Quality Fundamentals
• Software Quality per ISO 25010
• Software Quality per ISO 9126 and ISO 25010
• Software Quality Metrics
• Software Quality Maintainability
• Software Quality Reliability
• Software Quality Usability
• Software Quality Performance
• Software Quality Security
• Software Quality Test Coverage
• Test Automation and Software Quality
• Behavior Driven Development (BDD)
• Static Code Analysis Tools