Featured Topic Issue: Service and Software Improvement and Innovation; Guest Editors: J. A. Calvo-Manzano, J. Mejia and G. A. HernándezNo Access

MIN-ITs: A Framework for Integration of IT Management Standards in Mature Environments

Antoni-Lluís Mesquida

http://miprosoft.uib.es Department of Mathematics and Computer Science, University of the Balearic Islands, Cra. Valldemossa 7.5, Palma de Mallorca, E-07122, Spain

Search for more papers by this author

Antonia Mas

http://miprosoft.uib.es Department of Mathematics and Computer Science, University of the Balearic Islands, Cra. Valldemossa 7.5, Palma de Mallorca, E-07122, Spain

Search for more papers by this author

Tomás San Feliu

Departamento de Lenguajes y Sistemas Informáticos e Ingeniería de Software, Universidad Politécnica de Madrid, Campus de Montegancedo, Boadilla del Monte, E-28660 Madrid, Spain

Search for more papers by this author

, and

Magdalena Arcilla

Departamento de Ingeniería de Software y Sistemas Informáticos, Universidad Nacional de Educación a Distancia, Juan del Rosal 16, Madrid, E-28040 Madrid, Spain

Search for more papers by this author

https://doi.org/10.1142/S0218194014400026Cited by:6 (Source: Crossref)

Abstract

The growing interest of software companies for improving their internal processes, not just software development processes, but also processes in other domains such as Information Technology (IT) service management or information security management, has encouraged these companies to implement recognized models or standards. Most of the ISO standards that define models for software quality, IT service management or information security management provide their recommendations, guidelines, requirements or good practices under a process approach. Due to this approach, there are a large number of relations between these models as well as many common elements. From the study of these relations, this paper presents MIN-ITs, a new framework that supports the integration of different ISO standards related to IT management.

Keywords:

References

ISO 9001:2008 Quality management systems — Requirements, International Organization for Standarization . Google Scholar
A. Mas and E. Amengual, A method for the implementation of a quality management system in software SMEs, Proc. 12th International Conference on Software Quality Management (2004) pp. 61–74. Google Scholar
A. Mas, E. Amengual and A. L. Mesquida, Systems, Software and Services Process Improvement, Communications in Computer and Information Science 99 (Springer-Verlag, 2010) pp. 290–301. Crossref, Google Scholar
CMMI® for Development, Version 1.3, Software Engineering Institute, 2010 . Google Scholar
ISO/IEC 15504-1:2004 Information technology — Process assessment — Part 1: Concepts and vocabulary, International Organization for Standarization . Google Scholar
ISO/IEC 15504-5:2006 Information Technology — Process Assessment — Part 5: An exemplar Process Assessment Model, International Organization for Standarization . Google Scholar
A. L. Mesquidaet al., Information and Software Technology 54(3), 239 (2012). Crossref, Web of Science, Google Scholar
ITIL® Lifecycle Publication Suite — Books, TSO (The Stationery Office), 2011 . Google Scholar
ISO/IEC 20000–1:2011 Information technology — Service management — Part 1: Service management system requirements, International Organization for Standarization . Google Scholar
ISO/IEC TR 20000–4:2010 Information technology — Service Management — Part 4: Process reference model, International Organization for Standarization . Google Scholar
ISO/IEC 27001:2005 Information technology — Security techniques — Information security management systems — Requirements, International Organization for Standarization . Google Scholar
ISO/IEC 27002:2005 Information technology — Security techniques — Code of practice for information security management, International Organization for Standarization . Google Scholar
A. Mas, B. Fluxà and E. Amengual, Journal of Software: Evolution and Process 24(5), 493 (2012). Crossref, Web of Science, Google Scholar
B. Barafort et al. , ITSM Process Assessment Supporting ITIL ( Van Haren Publishing , Zaltbommel , 2009 ) . Google Scholar
Q. Scheuing , K. Frühauf and W. Schwarz , Maturity model for IT operations (MITO) , Proceedings of the 2nd World Congress on Software Quality ( 2000 ) . Google Scholar
A. Cass et al. , SPiCE in action — Experiences in tailoring and extension , Proceedings of the 28th Euromicro Conference ( 2002 ) . Google Scholar
B. Di Renzo and C. Feltus , Process assessment for use in very small enterprise: The NOEMI assessment methodology , Proceedings of the European Software Process Improvement Conference ( 2003 ) . Google Scholar
B. Barafortet al., Modeling and assessment in IT service process improvement, Software Process Improvement: EuroSPI 2008. Communications in Computer and Information Science16 (Springer-Verlag, 2008) pp. 117–128. Google Scholar
A. Nehfort , SPICE Assessments for IT Service Management according to ISO/IEC 20000–1 , International SPICE Days 2007 ( 2007 ) . Google Scholar
B. Karabacak and I. Sogukpinar , Computers & Security 25 , 413 ( 2006 ) . Crossref, Web of Science, Google Scholar
Y.-P. Lai and R.-H. Dai , Computer Standards & Interfaces 31 , 748 ( 2009 ) . Crossref, Web of Science, Google Scholar
B. von Solms and R. von Solms , Computers & Security 20 , 308 ( 2001 ) . Crossref, Web of Science, Google Scholar
B. C. Boynton , Identification of process improvement methodologies with application in information security , Proceedings of the 4th Annual Conference on Information Security Curriculum Development InfoSecCD ( 2007 ) . Google Scholar
A. Da Veiga and J. H. P. Eloff , Computers & Security 29 , 196 ( 2010 ) . Crossref, Web of Science, Google Scholar
K. J. Knapp et al. , Computers & Security 28 , 493 ( 2009 ) . Crossref, Web of Science, Google Scholar
G. Xiao-yan , Y. Yu-qing and L. Li-lei , Procedia Engineering 24 , 335 ( 2011 ) . Crossref, Google Scholar
B. Zvanut and M. Bajec , Information and Software Technology 52 , 397 ( 2010 ) . Crossref, Web of Science, Google Scholar
B. Barafort , J.-P. Humbet and S. Poggi , Information security management and ISO/IEC 15504: The link opportunity between security and quality , International SPICE Conference on Process Assessment and Improvement ( 2006 ) . Google Scholar
T. Valdevit , N. Mayer and B. Barafort , Software Process Improvement. Communications in Computer and Information Science 42 , 201 ( 2009 ) . Crossref, Google Scholar
C. Pardo et al. , Computer Standards & Interfaces 34 , 48 ( 2012 ) . Crossref, Web of Science, Google Scholar
Z. Micić , M. Micić and M. Blagojević , Computer Standards & Interfaces 36 , 231 ( 2013 ) . Crossref, Web of Science, Google Scholar
F. J. Domínguez-Mayo et al. , Computer Standards & Interfaces 34 , 396 ( 2012 ) . Crossref, Web of Science, Google Scholar
A. Labodová , Journal of Cleaner Production 12 , 571 ( 2004 ) . Crossref, Web of Science, Google Scholar
M. Asif , E. J. de Bruijn and O. A. M. Fisscher , Corporate motivation for integrated management system implementation. Why do firms engage in integration of management systems: A literature review & research agenda , 16th Annual High Technology Small Firms Conference ( 2008 ) . Google Scholar
D. Rajkovic and M. Aleksic , International Journal for Quality Research 3 , 3 ( 2009 ) . Web of Science, Google Scholar
A. R. Hevneret al., MIS Quarterly 28(1), 75 (2004). Crossref, Web of Science, Google Scholar
S. T. March and G. F. Smith , Decision Support Systems 15 , 251 ( 2005 ) . Crossref, Web of Science, Google Scholar
P. Järvinen, On Research Methods (Juvenes Print, 2001) . Google Scholar
ISO/IEC 12207:2008 Systems and software engineering — Software life cycle processes, International Organization for Standardization . Google Scholar
A. L. Mesquida , A. Mas and E. Amengual , Communications in Computer and Information Science 155 , 64 ( 2011 ) . Crossref, Google Scholar
European Commission (2003), Definition of micro, small and medium-sized enterprises, in European Commission (Ed.) (Vol. 2010) . Google Scholar