Short reference list of principles, guidelines and standards
2022-05-26
This is a brief list of references to external sources of information, software-related.
Client specifications derived from standards must be used in projects.
Principles and Practices
- Clean code principles and practices
- SOLID design
- SMART goals: Specific, Measurable, Achievable, Relevant, Timely
- SMARTER goals: SMART & Evaluate, Revise
- ATDD: Acceptance Test-Driven Development
- BDD: Behavior-Driven Development
- TDD: Test-Driven Development
- CI: Continuous Integration
- CD: Continuous Delivery
- CD: Continuous Deployment
- CT: Continuous Testing
- DevOps practices
Software-related Standards
Automotive Regulations and Standards
- IATF 16949:2016 International Standard for Automotive Quality Management Systems
- former ISO/TS 16949:2009 Quality management systems - Particular requirements for the application of ISO 9001:2008 for automotive production and relevant service part organizations
- ISO 9000 Quality Management
- ISO 9001:2015 Quality management systems - Requirements
Medical Devices Regulations and Standards
- FDA Rules and Regulations
- EU MDR (replaces MDD, AIMD)
- EU IVDR (replaces IVDD)
- IEC 62304:2006 Medical device software - Software life cycle processes
- ISO 13485:2016 Medical devices - Quality management systems - Requirements for regulatory purposes
- Related to ISO 9001:2015 Quality management systems - Requirements
- ISO 14971:2019 Medical devices - Application of risk management to medical devices
- IEC 60601 Series of standards - Safety and essential performance of medical electrical equipment
Information Security Guidelines
- ISO/IEC 27001:2013 Information technology — Security techniques — Information security management systems — Requirements
- ISO/IEC 27002:2022 Information security, cybersecurity and privacy protection — Information security controls
- ISO/IEC 27017:2015 Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services
- ISO/IEC 27018:2019 Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
- ISO/IEC 27701:2019 Security techniques — Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management — Requirements and guidelines
- Cybersecurity Regulations
