Jan 25, 2018 software configuration management scm is a set of processes, policies, and tools that organize the development process. By implementing a process improvement program for configuration management, you can use the performance indicators to identify consistency issues and improve overall configuration management. Software configuration management is an umbrella activity. The minimum required contents of a software configuration management plan scmp are established, and the specific activities to be addressed and their requirements for any portion of a software productos life cycle are defined. This agentless solution profiles and discovers all assets on the network, assesses and audits the compliance of network infrastructure devices and other key systems, and yields crucial data about what patches are still missing on. Breaking this down, configuration management consists mostly of two. Nov 10, 2018 configuration management is the management of change. Definitions of configuration management used in various standards are covered in chapter 3, and definitions of configuration management used in various maturity models can be found in chapter 2. This standard provides minimum requirements for preparation and content of software configuration management scm plans. Software process standards for the following processes, configuration management, documentation, function points, human factors, integration, maintenance. Aerospace standards as9100c advanced quality system do 178b software considerations in airborne systems and equipment alliance for telecommunications industry solutions atis.
Effective and continuous configuration management will allow changes to information systems to be detected faster. The definition and use of configuration management standards. Scm plans document the methods to be used for identifying software product items, controlling and implementing changes, and recording and reporting change implementation status. The primary audience for the configuration management policy includes all epa personnel in roles that are directly responsible for the configuration, management, oversight, and successful daytoday operations of epa enterprise hardware, software and applicable documentation.
Asq section 509 ssig meeting, 8 november 2000 paul r. Cmpic offers a wide variety of cm certification classes where you can learn more about configuration management principals, software configuration management scm, configuration management assessments, industry standards eia649, 6491, nist sp 800, etc. Most of the time the eco process is enormously more cumbersome than software development could use and still stay productive. Do178b, software considerations in airborne systems and equipment certification is a guideline dealing with the safety of safetycritical software used in certain airborne systems. Update configuration management related policy and guidance, including data item descriptions dids. This standard defines five cm functions and their underlying principles. Configuration management provides a mechanism for identifying, controlling and tracking the versions of each software item.
Free downloadable configuration management plan templates. The templates conform to software cm requirements specified in standards ansieia649b, configuration managements standard, isoiec 12207. With the advances in language and complexity, software engineering, involving configuration management and other methods, became a major concern due to issues like schedule, budget, and quality. It explores the latest advances in scm tools, scm organization, operation and maintenance of the scm system, and the level of automation needed. The configuration manager will be appointed by the program management office pmo. From a management perspective, the principles and practices of cm represent an accepted and understood foundation for implementing isocompliant. Iso standards are internationally agreed by experts. The configuration management process improvement center. Open source software must be approved by the information technology standards committee itsc, listed in the kentucky information technology standards kits, and adhere to a secure configuration baseline.
Software configuration management handbook, second edition maps the integration of scm activities within the software development life cycle. Software configuration management scm is the activity that helps us control the evolution of a software project. This new area for the software configuration management scm complements the existing standard work found in the software lifecycle project plan. May 01, 2015 the definition and use of configuration management standards is essential for quality certification in by silencer 1.
Recommended practice for patch management of control systems. Ccm is a continuous process of controlling and approving changes to information or technology assets or related. The cm process described in the dodadopted standard american national standards instituteelectronic industry association ansieia649, configuration management standard, consists of five interrelated functions that, when collectively applied, allow the program to maintain consistency between product configuration information and the product. Since traditional configuration management literature does not commonly use the term variation, we use it here to describe an items evolution in a general way, regardless of whether such an evolution requires releasing a formal revision or a new inventory part number. Wk70986 new specification for software, configuration, and. Configuration, change and release management policies and procedures guide 6 figure 1. To mitigate this risk, configuration management must be applied over the life cycle of enterprise architectures, system hardware and software, and also related documentation. It is a formal discipline which provides methods and tools a to identify components, versions, and baselines of selected items and b to control changes made to those items. In software engineering, software configuration management scm or sw cm is the task of tracking and controlling changes in the software, part of the larger crossdisciplinary field of configuration management. Recommended practice for patch management of control.
It could be about making a product, managing a process, delivering a service or supplying materials standards cover a huge range of activities. Ieee standard for software configuration management plans. This configuration management policy manual is provided to facilitate the implementation of naval air systems command navair instruction 4. The goal of scm is to improve the speed of and quality by catching errors early and enabling quick fixes when they occur. The software configuration management process is considered by many it personnel as the best solution for handling changes to software projects. This revision of the standard expands the previous version to explain cm, including identifying and acquiring configuration items, controlling changes, reporting the status of configuration items, as well as software builds and release engineering. For users implementing scm disciplines, suggestions and detailed examples of plans are provided. Cm provides a method for logically grouping related components throughout the various stages of product development. Identification of configuration items like source code modules, test case, and requirements specification. To help companies with security configuration management, tripwire has created the configuration compliance manager. Configuration management is defined by iso 7 asks organizations to manage the components of a product. Ieee standard for software configuration management plans abstract.
Eia649a national consensus standard for configuration management. Software configuration management discusses the framework from a standards viewpoint, using the original dod milstd973 and eia649 standards to describe the elements of configuration management within a software engineering perspective. An extensive list of industryapproved standards and best practices documents that impact configuration management processes. By building and maintaining configuration management bestpractices, you can expect several benefits such as improved network availability and lower costs. Software has its own need for configuration management see section 3. The scope of the work item shall be the development and maintenance of an accepted endorsement to the f46. Software configuration management software configuration management scm is the process of identifying and defining the scis in the system and coordinating the changes made to these items a formal definition. Software configuration management handbook, second edition. Configuration management requirements for defense contracts ansieia649b and other standards, including milstd3046 and dod addenda to isoiecieee 15288, systems and software engineeringsystem life cycle processes, influenced the development of eia.
Configuration management standard eia649b sae international. This includes managing software modules, managing and controlling releases to the different system environments, managing documentation, managing work authorizations, and participating. Software configuration management government publishing office. Understand how to define scm and discuss how to accomplish it. Ecssmst40 space project managementconfiguration management. Williams, in introduction to information security, 2014. When effectively and consistently applied, configuration management cm provides a positive impact on product quality, cost, and schedule. The list of the most popular software configuration management tools top scm tools in 2020 in software engineering software configuration management is the task of tracking and controlling changes in the software part of the larger disciplinary field of configuration management the scm practices include vision controls in the establishment of baselines. The configuration management plan shall describe the contractors processes for managing configuration items that are pertinent to the system. The first software configuration management was a manual operation.
An overview of ieee software engineering standards and. Dec 03, 2015 software configuration management planning software configuration management planning starts during the early phases of a project. Configuration management is the management of change. This standard establishes the minimum requirements for processes for configuration management cm in systems and software engineering. For those planning software configuration management scm activities, this guide provides insight into the various factors that must be considered. This standard is intended to assist in establishing, performing, or evaluating cm systems. Software configuration management scm is a set of processes, policies, and tools that organize the development process. The longterm goal of the infobase is to provide justintime training for new regulations and for other topics of specific concern to. Configuration management standard nasa technical standards. Iso 9000 update configuration management and iso 9001.
The application of configuration management cm disciplines to the management of software engineering projects is described. Configuration management is a collection of processes and tools that promote network consistency, track network change, and provide up to date network documentation and visibility. The cm system should a identify uniquely the versions of each software item. Teamwork facilitate team interactions related to the process. The information technology examination handbook infobase concept was developed by the task force on examiner education to provide field examiners in financial institution regulatory agencies with a quick source of introductory training and basic information. Dec 21, 2016 this configuration management policy manual is provided to facilitate the implementation of naval air systems command navair instruction 4. This consensus standard establishes the recognized principles of cm, and is intended to assist in establishing, performing, or evaluating cm systems. Software configuration management in reference with the iso 9001 standard. Configuration management establishes a language of understanding between the customer and the supplier both in predefined relationship such as. This page listed software process standards for the following processes, configuration management, documentation.
The software configuration management process identifies the functional and physical attributes of software at critical points in time, and implements. Cm is an integrated system of processes that ensure consistency of a. Configuration management standard eia649c sae international. From a management perspective, the principles and practices of cm represent an accepted and understood foundation for implementing isocompliant processes in software engineering organizations. Configuration management and related standards extensive list. Scm is the process of identifying and defining the items in the system, controlling the. The software engineering practices associated with software configuration management scm or cm offer a number of opportunities to address requirements found in the international standard, iso 9001.
Ffiec it examination handbook infobase configuration. The principles, highlighted in text boxes, are designed to individually identify the essence of the related cm function and can be used to collectively create a checklist of best. The software configuration management process traces changes and verifies that the. Software configuration management course ieee computer society. In many cases earlier versions still in use must also be maintained and controlled. This policy establishes controls related to configuration management. Pcm addresses the composition of a project, the documentation defining it, and other data supporting it. Identification of each csci in the scm repository, by using. Configuration management cm is a technical and management discipline, that provides a positive impact on product quality, cost, and schedule when consistently applied. Configuration management standards industry and consensusapproved standards that impact cm processes.
Scm practices include revision control and the establishment of baselines. The policy provides guidance in decisionmaking and practices that optimize resources, mitigate risk, and maximize return on investment. Software configuration management in software engineering. Project configuration management pcm is the collective body of processes, activities, tools and methods project practitioners can use to manage items during the project life cycle. Iso, iec standards compliant software configuration.
It is intended to be used in conjunction with the associated department of defense dod adopted configuration management cm standards referenced and all applicable cm related checklists. Nov 12, 2006 configuration management performance indicators provide a mechanism to validate and audit network configuration standards and critical success factors. Software configuration management standards septsupplying. If something goes wrong, scm can determine what was changed and who changed it. Software configuration management is a process to systematically manage, organize, and control the changes in the documents, codes, and other entities during the software development life cycle. In software engineering, software configuration management is the task of tracking and. It is abbreviated as the scm process in software engineering. The outcome of the scm planning phase is the software configuration management plan scmp which might be extended or revised during the rest of the project. Software configuration management an overview sciencedirect. The application of this standard applies to any form, class, or type of software or system. Think of them as a formula that describes the best way of doing something. Its predecessor defined only the contents of a software configuration management plan. The definitions in these standards and maturity models are similar to a large extent. Providing configuration standards and templates to the project team.