Re: Auditing a SW supplier - who can do this?

Path	csiph.com!eeepc.pasdenom.info!news.pasdenom.info!news.dougwise.org!aioe.org!.POSTED!not-for-mail
From	Walter Banks <walter@bytecraft.com>
Newsgroups	comp.programming
Subject	Re: Auditing a SW supplier - who can do this?
Date	Fri, 04 Feb 2011 07:44:27 -0500
Organization	Aioe.org NNTP Server
Lines	65
Message-ID	<4D4BF4AB.EA25DEED@bytecraft.com> (permalink)
References	<1fe05831-c134-4c35-a64c-cea3c0bdb770@x13g2000vbe.googlegroups.com>
NNTP-Posting-Host	0sP39XbY3XIQ0JikQI7gOw.user.speranza.aioe.org
Mime-Version	1.0
Content-Type	text/plain; charset=us-ascii
Content-Transfer-Encoding	7bit
X-Complaints-To	abuse@aioe.org
X-Mailer	Mozilla 4.79 [en]C-CCK-MCD NSCPCD479 (Windows NT 5.0; U)
X-Accept-Language	en
X-Notice	Filtered by postfilter v. 0.8.2
Xref	csiph.com comp.programming:3859

Show key headers only | View raw

"Dr. Coffee" wrote:

> Hi all.
>
> I have been given the task to set up an audit of
> one of my employer's SW suppliers. While I have
> a clear view of what kinds of questions I want to
> get answered during the audit, I have no idea how
> to actually get the audit done:
>
> 1) I am not a SW professional, so I don't know the
>    relevant standards and best practices
>
> 2) Some of the resources internal to my employer
>    have suggested that the only people who actually
>    are likely to know how to perform the audit, is this
>    supplier's competitors.
>
> I am not too happy about this situation - there must
> be somebody around who can do this?
>
> What kinds of professions / companies do I look for,
> to do the audit for me? What key words do I search for?
> What is the usual way to do these things?
>
> DoC

What is the goal of your audit?

SW supplier audits are normally about process. What standards
are used to create software and does the company supplying
software actually follow the process.

It is not clear from your post if you are looking to change the
standards that your supplier is using or if you suspect that
that they may not be following a specific set of standards
they claim to be using.

> 2) Some of the resources internal to my employer
>   have suggested that the only people who actually
>   are likely to know how to perform the audit, is this
>   supplier's competitors.

This suggests that a product quality or specification problem
rather than a process problem. It may easily be both.

Regards,

w..
--
Walter Banks
Byte Craft Limited
http://www.bytecraft.com

Back to comp.programming | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Auditing a SW supplier - who can do this? "Dr. Coffee" <dr.coffee1@gmail.com> - 2011-02-03 23:30 -0800
  Re: Auditing a SW supplier - who can do this? Walter Banks <walter@bytecraft.com> - 2011-02-04 07:44 -0500

csiph-web