ISO/IEC 33001:2015

Overview - ISO/IEC 33001:2015 (Process assessment concepts and terminology)

ISO/IEC 33001:2015 establishes a common repository of terminology and an introductory concepts framework for process assessment in information technology. It explains how the parts of the ISO/IEC 330xx family fit together, describes the purpose and scope of process assessment, and clarifies the applicability of the suite’s requirements when performing assessments. The standard supports consistent understanding of process-related terms, assessment inputs/outputs, and how assessment results can be applied to process management and improvement.

Key topics and technical requirements

ISO/IEC 33001 focuses on concepts and definitions rather than prescriptive procedures. Key technical topics include:

• Terms and definitions for processes, process management, assessment roles (assessor, lead assessor, assessment team), and assessment artifacts (assessment input, output, record).
• Structure of the ISO/IEC 330xx family, explaining relationships among parts of the suite and guidance for selecting the appropriate standard for a given assessment context.
• Assessment framework concepts, including:
  • Measuring process quality characteristics and process capability
  • Use of process reference models and process assessment models
  • The process assessment process and boundaries (assessment scope, constraints, inputs)
• Organizational process maturity and how assessment results relate to maturity and capability evaluation.
• Competency of assessors, including lead assessor responsibilities and the need for objective evidence.
• Application of assessment results for performance improvement, risk evaluation, and benchmarking.
• Conformance and conformity assessment considerations and cross-referencing to legacy standards (ISO/IEC 15504).

Note: ISO/IEC 33001 provides conceptual requirements and vocabulary; implementers should reference other parts of the ISO/IEC 330xx family for detailed assessment models, procedures and measurement techniques.

Practical applications - who uses ISO/IEC 33001

• Process assessors and assessment bodies - to ensure consistent terminology and a shared understanding of assessment scope and outputs.
• Quality managers, process owners, and CIOs - to align assessment results with process improvement and risk-management plans.
• Software and systems engineering teams - to interpret and apply process models and capability concepts.
• Consultants and auditors - for benchmarking, conformity assessment planning, and translating assessment findings into improvement actions.

Practical uses include planning assessments, defining assessment scope, establishing assessor competency criteria, and mapping assessment outputs to improvement initiatives and benchmarking activities.

Related standards

• ISO/IEC 330xx family (detailed assessment models and procedures)
• Reference mapping to ISO/IEC 15504 (legacy series) is provided in Annex A of ISO/IEC 33001
• ISO/IEC 29169 (conformity assessment of process capability and organizational process maturity)

Keywords: ISO/IEC 33001, process assessment, process capability, process models, process measurement, process improvement, process management, ISO/IEC 330xx.