Software Engineering - Product Quality Model

ISO/IEC 9126-1, titled "Software engineering — Product quality — Part 1: Quality model," is a withdrawn international standard. It provided a comprehensive framework for defining and evaluating software quality, structuring it into six key characteristics: Functionality, Reliability, Usability, Efficiency, Maintainability, and Portability. Within enterprise risk management, this model serves to translate the abstract concept of "quality" into measurable attributes, helping to mitigate operational risks arising from software defects, system failures, or data corruption. It is crucial to note that this standard was officially superseded in 2011 by ISO/IEC 25010:2011, part of the SQuaRE series (ISO/IEC 25000), which introduced new characteristics such as Security and Compatibility, reflecting modern software development needs.

Although superseded, the principles of the ISO/IEC 9126-1 quality model remain fundamental to software risk management. Enterprises apply its framework to systematically control software quality and ensure business continuity. The implementation involves three key steps: 1) **Define Quality Requirements**: Based on a Business Impact Analysis (BIA), use the six characteristics to specify non-functional requirements for critical systems, such as setting a 99.99% availability target for a core banking application. 2) **Establish Quantitative Metrics**: Translate abstract characteristics into measurable metrics. For example, measure 'Usability' by 'average time for a new user to complete a task' and 'Efficiency' by 'system response time under peak load'. 3) **Integrate into SDLC**: Embed these metrics into testing and acceptance phases. A multinational e-commerce company used this model to define performance benchmarks, reducing post-launch critical incidents by 35% and improving system reliability.

Taiwan enterprises often encounter several challenges when applying the principles of ISO/IEC 9126-1 or its successor, ISO/IEC 25010: 1) **Outdated Standard Knowledge**: Many teams still reference the obsolete 9126-1, overlooking critical new characteristics like 'Security' in ISO/IEC 25010, leading to inadequate risk assessments. The solution is to conduct updated training on the SQuaRE series. 2) **Difficulty in Metrication**: Teams struggle to convert abstract concepts like 'Maintainability' into concrete, quantifiable metrics, making evaluations subjective. A solution is to develop a corporate-level library of predefined quality metrics. 3) **Project Schedule Pressure**: In agile environments, comprehensive quality evaluation is often sacrificed for speed. To overcome this, integrate automated quality gates into the CI/CD pipeline, making quality assurance an integral part of the development process rather than a final, skippable step.

Winners Consulting specializes in ISO/IEC 9126-1 and its successor standards for Taiwan enterprises, delivering compliant software quality management systems within 90 days. We have served over 100 clients. Request a free consultation: https://winners.com.tw/contact