Design and Assessment for Agile Auditing Model: The Case of ISO 9001 Traceability Requirements

—ISO 9001 demands of (software) organizations that a rigorous demonstration of their software processes be implemented and a set of guidelines followed at various levels of abstraction. More specifically, these organizations need to demonstrate that their software processes have been designed and implemented in a way that allows for a level of configuration and operation that complies with ISO 9001 requirements. Agile software organizations which want to be ISO 9001 certified must therefore provide evidence of ISO 9001 conformity, and they need to develop their own procedures, tools, and methodologies to do so. This paper proposes an auditing model for ISO 9001 traceability requirements that is applicable in agile (XP) environments. The design of this auditing model is based on the evaluation theory and includes the use of several auditing " yardsticks " derived from the principles of engineering design, the SWEBOK Guide and the CMMI-DEV guidelines for requirements management and traceability. This auditing model has been assessed based on case studies selected from the literature.