Filetype PDF | Posted on 03 Feb 2023 | 2 years ago
Authentication
digital resources
127x Filetype PDF File size 0.22 MB Source: literature.rockwellautomation.com
Software Development Process Overview
Questions & Answers
Rockwell Automation's Product Lifecycle Process defines the software development processes at the product level. This starts with defining the
requirements and proceeds through the entire product lifecycle from concept through design, implementation, production, maintenance and
disposal. Development methodologies and tools may vary by team, but the Product Lifecycle Process governs the overall development.
The following are common questions regarding Rockwell Automation’s software development process and how we meet the requirements. These
answers reflect the overall Rockwell Automation software development process; however, there may be more specific details based on the software
product.
An overview of Rockwell Automation’s Quality Management System (QMS) can be found at:
http://literature.rockwellautomation.com/idc/groups/literature/documents/ct/qms-ct001_-en-e.pdf
Question Answer Internal Corporate Applicable Industry
Procedure Reference Standard
Software Development Planning
Is there a documented Software The Common Product Development Process defines the Common Product IEC 62443-4-1:2018 SM-1;
Plan describing the activities and planning and governance to execute the product lifecycle Development (900-20-36) ISO 9001:2015 8.3.2
deliverables to be completed as processes.
part of the software development
process?
Are documents (requirements The Common Product Development Process defines how Common Product IEC 62443-4-1:2018 SM-1;
docs, test plans, test results, etc.) product deliverables are controlled. Development (900-20-36) ISO 9001:2015 7.5
produced as part of the software
development lifecycle version
controlled and maintained in a
document repository?
Is the Software Plan updated at a Planning documentation is maintained per the Common Common Product IEC 62443-4-1:2018 SM-1
regular interval or development Product Development Process, with defined milestone Development (900-20-36)
milestone? reviews and approvals.
Software Requirements Management
Is there documented Requirement The process for requirement definition and management is RA Product Lifecycle Product IEC 62443-4-1:2018 SM-1;
Management Process, covering defined within the RA Product Lifecycle. Requirements Development ISO 9001:2015 8.3.3
how requirements are Process (BSRC-4730);
documented, updated, and RA Product Lifecycle
reviewed? Functional Requirements
Development Process
(BSRC-4732)
Page 1 of 8 Revision Date: November 29, 2021
Software Development Process Overview
Questions & Answers
Are software requirements defined Product and functional requirements are defined per the RA Product Lifecycle Product IEC 62443-4-1:2018 SM-1
and traced from higher level RA Product Lifecycle. Traceability requirements are Requirements Development
product or business level defined within the process. Methods and tools used for Process (BSRC-4730);
requirements? traceability may vary by team. RA Product Lifecycle
Functional Requirements
Development Process
(BSRC-4732)
Are different types of software Product and functional requirements are defined per the RA Product Lifecycle Product IEC 62443-4-1:2018 SR-3;
requirements defined based on the RA Product Lifecycle. The process encompasses various Requirements Development ISO 9001:2015 8.3.3
software product(s) being requirement categories that are considered as part of Process (BSRC-4730);
developed (functional, interface, requirement development. RA Product Lifecycle
environment, usability, user Functional Requirements
documentation, etc.)? Development Process
(BSRC-4732)
Are security requirements defined Product and functional requirements are defined per the RA Product Lifecycle Product IEC 62443-4-1:2018 SR-3
for software products? RA Product Lifecycle. The process encompasses the Requirements Development
definition of security requirements. Process (BSRC-4730);
RA Product Lifecycle
Functional Requirements
Development Process
(BSRC-4732)
Are software requirements formally Product and functional requirements are reviewed per the RA Product Lifecycle Review IEC 62443-4-1:2018 SR-5
reviewed? RA Product Lifecycle Review Process. Process (BSRC-4729)
Software Architecture & Design
Is there a documented Software The process for design definition and management is RA Product Lifecycle Design IEC 62443-4-1:2018 SM-1;
Design Process including how defined within the RA Product Lifecycle. Process (BSRC-4733) ISO 9001:2015 8.3.4
software design is documented,
updated, and reviewed?
Is the software architecture Software architecture is defined per the RA Product RA Product Lifecycle Design IEC 62443-4-1:2018 SD-1;
documented, including the Lifecycle. Various layers of design are defined within the Process (BSRC-4733) ISO 9001:2015 8.3.4
interfaces between software items process.
and external components?
Is the detailed design documented Software design is defined per the RA Product Lifecycle. RA Product Lifecycle Design IEC 62443-4-1:2018 SD-1;
for each software unit, including all Various layers of design are defined within the process. Process (BSRC-4733) ISO 9001:2015 8.3.4
interfaces? Methods and tools used for documenting detailed design
may vary by team.
Is the software design formally Design artifacts are reviewed per the RA Product Lifecycle RA Product Lifecycle Review IEC 62443-4-1:2018 SD-3;
reviewed? Review Process. Process (BSRC-4729) ISO 9001:2015 8.3.4
Software Implementation
Page 2 of 8 Revision Date: November 29, 2021
Software Development Process Overview
Questions & Answers
Is there a documented Software Software is implemented per the RA Product Lifecycle RA Product Lifecycle IEC 62443-4-1:2018 SM-1;
Implementation process, including Implementation Process, which defines coding practices, Implementation Process ISO 9001:2015 8.3.4
how software is developed, source code control and review. Reviews are conducted (BSRC-4737);
reviewed and standards applied? per the RA Product Lifecycle Review Process. RA Product Lifecycle Review
Process (BSRC-4729)
What best practices are utilized in A variety of engineering best practices are utilized by our Individual job aids exist IEC 62443-4-1:2018 SI-1;
developing your software teams to improve code quality, including, but not limited (where applicable) that will IEC 62443-4-1:2018 SI-2
products? to, continuous integration, coding standards, peer/code only be shared under NDA.
reviews, static analysis, code coverage metrics,
traceability, and automated testing. Individual job aids
exist (where applicable) that will only be shared under
NDA.
Software Testing
Is there a documented Software The software testing process is defined within the RA RA Product Lifecycle IEC 62443-4-1:2018 SM-1;
Testing Process including how Product Lifecycle. Verification and Validation ISO 9001:2015 8.3.4
software tests are documented, Process (BSRC-4837)
updated, and reviewed?
Are software test plans and test Test plans and results are created per the RA Product RA Product Lifecycle IEC 62443-4-1:2018 SVV-1;
results formally documented and Lifecycle Verification and Validation Process. Test Verification and Validation ISO 9001:2015 8.3.4
reviewed? artifacts are reviewed per the RA Product Lifecycle Process (BSRC-4837);
Review Process. RA Product Lifecycle Review
Process (BSRC-4729)
What levels/types of tests are Engineering teams assess and define which testing RA Product Lifecycle IEC 62443-4-1:2018 SVV-1;
completed on your products? activities are required for a specific product within the test Verification and Validation IEC 62443-4-1:2018 SVV-2;
plan. Test plans are developed per the RA Product Process (BSRC-4837) IEC 62443-4-1:2018 SVV-3;
Lifecycle Verification and Validation Process. The IEC 62443-4-1:2018 SVV-4
process defines various testing types that are considered
as part of test definition. Planned testing can include, but
is not limited to, unit, integration, functional, stress,
performance, security, safety, beta, exploratory,
regression, etc.
Are anomalies discovered during Anomalies discovered during testing activities are RA Product Lifecycle IEC 62443-4-1:2018 DM-1
test formally documented? documented per the RA Product Lifecycle Verification and Verification and Validation
Validation Process. Documented anomalies are managed Process (BSRC-4837);
per the Anomaly Management Procedure. Anomaly Management
Procedure (BSRC-5515)
Software Release
Page 3 of 8 Revision Date: November 29, 2021
Software Development Process Overview
Questions & Answers
Is there a documented Software Software is released per the RA Product Lifecycle RA Product Lifecycle Release IEC 62443-4-1:2018 SM-11;
Release Process including the Release Process. Process (BSRC-4742) ISO 9001:2015 8.6
identification of what needs to be
completed prior to release (testing
completion, defect closure, etc.)?
Are release notes formally Release notes are generated per the Requirements and Requirements and Guidelines ISO 9001:2015 8.6
documented and reviewed? Guidelines for Release Notes Content procedure (900-20- for Release Notes Content
66). (900-20-66)
Do release notes include known The Requirements and Guidelines for Release Notes Requirements and Guidelines IEC 62443-4-1:2018 DM-5
anomalies for the version being Content procedure (900-20-66) requires the inclusion of for Release Notes Content
released? known anomalies in release notes. (900-20-66)
Is user documentation provided User information can be found in Rockwell Automation's RA Product Lifecycle Release IEC 62443-4-1:2018 SG-1
with each release of the literature library: Process (BSRC-4742)
product(s)? https://www.rockwellautomation.com/global/literature-
library/overview.page
Software Patch Management
Is there a documented process for The process for managing software changes/patches is Product Change IEC 62443-4-1:2018 SUM-1;
managing and releasing software defined in our Product Change Management procedure. Management (I2O-04-04) ISO 9001:2015 8.3.6
patches?
Do you provide installation notes, Release notes and supporting documentation are Requirements and Guidelines IEC 62443-4-1:2018 SUM-2;
procedures, and guidance to apply generated and provided to customers per Rockwell's for Release Notes Content IEC 62443-4-1:2018 SUM-3;
patches? process. (900-20-66) ISO 9001:2015 8.6
Do you provide a secure patch Patches are provided for secure download via Rockwell Product Change IEC 62443-4-1:2018 SUM-4
download process? Automation's Download Center: Management (I2O-04-04)
https://www.rockwellautomation.com/en_NA/support/down
load-center/overview.page
Software Anomaly Management
Is there a documented process for Corporate procedures provide guidance for reviewing and Assessment of Post Release IEC 62443-4-1:2018 DM-1;
receiving, documenting, assessing post-release anomalies. Product Anomalies (900-20- IEC 62443-4-1:2018 DM-2;
evaluating, and resolving customer 15) IEC 62443-4-1:2018 DM-3;
feedback and anomalies identified IEC 62443-4-1:2018 DM-4;
by customers? ISO 9001:2015 8.2.1
Is there a documented process for Corporate procedures provide guidelines for reporting and Anomaly Management IEC 62443-4-1:2018 DM-1;
tracking all identified anomalies managing anomalies. Procedure (BSRC-5515) IEC 62443-4-1:2018 DM-2;
(found internally and by IEC 62443-4-1:2018 DM-3;
customers)? IEC 62443-4-1:2018 DM-4
Is there a process in place to Corporate procedures define the process for assessing Assessment of Post Release IEC 62443-4-1:2018 DM-5
communicate critical anomalies customer impact of post release anomalies and Product Anomalies (900-20-
discovered in released software to 15);
Page 4 of 8 Revision Date: November 29, 2021
no reviews yet
Please Login to review.
