ISO/IEC 25040:2024

Overview

ISO/IEC 25040:2024 - part of the SQuaRE (Systems and software Quality Requirements and Evaluation) family - defines a quality evaluation framework for ICT products (including software), data, and IT services. This international standard specifies concepts, requirements and recommendations for implementing and improving quality-evaluation processes. It is a framework standard: it does not prescribe specific test methods or tell you how to use evaluation results.

Key topics and technical requirements

• Quality evaluation concepts: definitions of assessment, measurement sources, quality rating modules and evaluation tasks.
• Quality models and measures: alignment with SQuaRE quality models (ISO/IEC 2501n) and quality measures (ISO/IEC 2502n) to ensure consistent characteristics and metrics.
• Measurement sources: guidance on internal/external measurement sources and evidence collection (see Annex A).
• Process reference model: a structured lifecycle for evaluations covering six stages - Define, Design, Plan, Execute, Conclude, and ongoing oversight. Each stage lists purposes, outcomes and activities.
• Four evaluation types: suitability for a specific use, qualification to a quality standard, conformity checking to requirements, and market suitability - expanded from the previous edition.
• Requirements and recommendations: specifies mandatory elements and recommended practices for process implementation and continuous improvement.
• Guidance material: informative annexes with examples of evaluation types and integration into system/software life-cycle processes.

Practical applications

ISO/IEC 25040:2024 is used to design repeatable, auditable quality-evaluation activities that support:

• Procurement and acquisition: objective assessment of supplier deliverables and readiness for deployment.
• Vendor qualification: checking conformity to contractual or regulatory quality requirements.
• Product selection and market readiness: helping acquirers or customers compare alternatives for suitability to intended use.
• Independent evaluation and certification: providing a process framework for third-party assessors and auditors.
• Internal QA and continuous improvement: integrating evaluation results into development and service management lifecycles.

Who should use it

• Developers, integrators and QA teams implementing evaluation processes.
• Acquirers and procurement organizations specifying and verifying quality requirements.
• IT service providers assessing service quality and compliance.
• Independent evaluators and auditors delivering structured assessments.

Related standards

• ISO/IEC 25000 (Guide to SQuaRE)
• ISO/IEC 25030 (Quality requirements framework)
• ISO/IEC 2501n (Quality models) and ISO/IEC 2502n (Quality measurement)
• ISO/IEC/IEEE 12207, ISO/IEC/IEEE 15288 (life-cycle processes)
• ISO 9001 (quality management systems)

Keywords: ISO/IEC 25040:2024, SQuaRE, quality evaluation framework, ICT product quality, software quality, quality measures, quality model, IT service evaluation.