Overview
ISO/IEC 25040:2024 - part of the SQuaRE (Systems and software Quality Requirements and Evaluation) family - defines a quality evaluation framework for ICT products (including software), data, and IT services. This international standard specifies concepts, requirements and recommendations for implementing and improving quality-evaluation processes. It is a framework standard: it does not prescribe specific test methods or tell you how to use evaluation results.
Key topics and technical requirements
- Quality evaluation concepts: definitions of assessment, measurement sources, quality rating modules and evaluation tasks.
- Quality models and measures: alignment with SQuaRE quality models (ISO/IEC 2501n) and quality measures (ISO/IEC 2502n) to ensure consistent characteristics and metrics.
- Measurement sources: guidance on internal/external measurement sources and evidence collection (see Annex A).
- Process reference model: a structured lifecycle for evaluations covering six stages - Define, Design, Plan, Execute, Conclude, and ongoing oversight. Each stage lists purposes, outcomes and activities.
- Four evaluation types: suitability for a specific use, qualification to a quality standard, conformity checking to requirements, and market suitability - expanded from the previous edition.
- Requirements and recommendations: specifies mandatory elements and recommended practices for process implementation and continuous improvement.
- Guidance material: informative annexes with examples of evaluation types and integration into system/software life-cycle processes.
Practical applications
ISO/IEC 25040:2024 is used to design repeatable, auditable quality-evaluation activities that support:
- Procurement and acquisition: objective assessment of supplier deliverables and readiness for deployment.
- Vendor qualification: checking conformity to contractual or regulatory quality requirements.
- Product selection and market readiness: helping acquirers or customers compare alternatives for suitability to intended use.
- Independent evaluation and certification: providing a process framework for third-party assessors and auditors.
- Internal QA and continuous improvement: integrating evaluation results into development and service management lifecycles.
Who should use it
- Developers, integrators and QA teams implementing evaluation processes.
- Acquirers and procurement organizations specifying and verifying quality requirements.
- IT service providers assessing service quality and compliance.
- Independent evaluators and auditors delivering structured assessments.
Related standards
- ISO/IEC 25000 (Guide to SQuaRE)
- ISO/IEC 25030 (Quality requirements framework)
- ISO/IEC 2501n (Quality models) and ISO/IEC 2502n (Quality measurement)
- ISO/IEC/IEEE 12207, ISO/IEC/IEEE 15288 (life-cycle processes)
- ISO 9001 (quality management systems)
Keywords: ISO/IEC 25040:2024, SQuaRE, quality evaluation framework, ICT product quality, software quality, quality measures, quality model, IT service evaluation.