ISO/IEC/IEEE 12207:2017
The software life cycle process standard: a declared conformance claim and tailoring process, acquisition and supply under an agreement, organisational processes for life cycle models, infrastructure, portfolio, people, quality and knowledge, project processes for planning, control, decisions, risk, configuration, information, measurement and quality assurance, and the technical processes from mission analysis and requirements through architecture, design, implementation, integration, verification, transition, validation, operation and maintenance to disposal.
ISO/IEC/IEEE 12207:2017 is a compliance framework from International with 5 domains and 32 controls. The largest domains are Clause 6.4: Technical processes – ISO/IEC/IEEE 12207:2017 (14 controls), Clause 6.3: Technical management processes – ISO/IEC/IEEE 12207:2017 (8 controls), Clause 6.2: Organizational project-enabling processes – ISO/IEC/IEEE 12207:2017 (6 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (5)
Clause 4 and Annex A: Conformance and tailoring – ISO/IEC/IEEE 12207:2017
| Code | Title |
|---|---|
| iso-iec-ieee-12207-2017::4 | Declare the conformance claim: full conformance to outcomes or to tasks, or tailored conformance |
| iso-iec-ieee-12207-2017::A | Run the tailoring process when processes are adapted to the project or organisation |
Clause 6.1: Agreement processes – ISO/IEC/IEEE 12207:2017
| Code | Title |
|---|---|
| iso-iec-ieee-12207-2017::6.1.1 | Acquisition process: obtain a product or service that meets the acquirer's requirements |
| iso-iec-ieee-12207-2017::6.1.2 | Supply process: provide an acquirer with a product or service that meets the agreed requirements |
Clause 6.2: Organizational project-enabling processes – ISO/IEC/IEEE 12207:2017
| Code | Title |
|---|---|
| iso-iec-ieee-12207-2017::6.2.1 | Life Cycle Model Management process: define, assess and improve the organisation's life cycle policies, processes, models and procedures |
| iso-iec-ieee-12207-2017::6.2.2 | Infrastructure Management process: provide and maintain the infrastructure and services projects need |
| iso-iec-ieee-12207-2017::6.2.3 | Portfolio Management process: initiate, sustain, redirect and close projects against the organisation's strategy |
| iso-iec-ieee-12207-2017::6.2.4 | Human Resource Management process: identify, develop and provide the skills projects need |
| iso-iec-ieee-12207-2017::6.2.5 | Quality Management process: set quality policy, objectives and procedures and improve them from results |
| iso-iec-ieee-12207-2017::6.2.6 | Knowledge Management process: build and share the knowledge, skills and knowledge assets the organisation can reuse |
Clause 6.3: Technical management processes – ISO/IEC/IEEE 12207:2017
| Code | Title |
|---|---|
| iso-iec-ieee-12207-2017::6.3.1 | Project Planning process: produce and coordinate workable plans and activate them |
| iso-iec-ieee-12207-2017::6.3.2 | Project Assessment and Control process: assess progress and performance and direct corrective action |
| iso-iec-ieee-12207-2017::6.3.3 | Decision Management process: analyse alternatives objectively and record the decision and its rationale |
| iso-iec-ieee-12207-2017::6.3.4 | Risk Management process: identify, analyse, treat and monitor risks continually |
| iso-iec-ieee-12207-2017::6.3.5 | Configuration Management process: identify, baseline, control, account for, audit and release configuration items |
| iso-iec-ieee-12207-2017::6.3.6 | Information Management process: generate, maintain and provide information to designated stakeholders |
| iso-iec-ieee-12207-2017::6.3.7 | Measurement process: collect, analyse and report objective data to support management and show quality |
| iso-iec-ieee-12207-2017::6.3.8 | Quality Assurance process: evaluate products, services and processes and treat incidents and problems |
Clause 6.4: Technical processes – ISO/IEC/IEEE 12207:2017
| Code | Title |
|---|---|
| iso-iec-ieee-12207-2017::6.4.1 | Business or Mission Analysis process: define the problem or opportunity and select the solution class |
| iso-iec-ieee-12207-2017::6.4.10 | Transition process: move the system into its operational or other target environment ready for use |
| iso-iec-ieee-12207-2017::6.4.11 | Validation process: provide objective evidence that the system in use meets stakeholder requirements and its intended use |
| iso-iec-ieee-12207-2017::6.4.12 | Operation process: use the system to deliver its services and support the customer |
| iso-iec-ieee-12207-2017::6.4.13 | Maintenance process: sustain the system's capability to provide its service |
| iso-iec-ieee-12207-2017::6.4.14 | Disposal process: end the use of a system or element and handle retired elements, data and waste properly |
| iso-iec-ieee-12207-2017::6.4.2 | Stakeholder Needs and Requirements Definition process: turn stakeholder needs into agreed stakeholder requirements |
| iso-iec-ieee-12207-2017::6.4.3 | System/Software Requirements Definition process: specify a measurable technical solution view |
| iso-iec-ieee-12207-2017::6.4.4 | Architecture Definition process: develop, assess and select an architecture expressed in consistent views |
| iso-iec-ieee-12207-2017::6.4.5 | Design Definition process: give enough detail about each element to implement it consistently with the architecture |
| iso-iec-ieee-12207-2017::6.4.6 | System Analysis process: provide rigorous data and analysis to support technical decisions |
| iso-iec-ieee-12207-2017::6.4.7 | Implementation process: realise each specified software system element |
| iso-iec-ieee-12207-2017::6.4.8 | Integration process: assemble implemented elements into a system that meets requirements, architecture and design |
| iso-iec-ieee-12207-2017::6.4.9 | Verification process: provide objective evidence that the system or element meets its specified requirements |
What is ISO/IEC/IEEE 12207:2017 and who does it apply to?
ISO/IEC/IEEE 12207:2017 is a compliance framework from International with 5 domains and 32 controls. The software life cycle process standard: a declared conformance claim and tailoring process, acquisition and supply under an agreement, organisational processes for life cycle models, infrastructure, portfolio, people, quality and knowledge, project processes for planning, control, decisions, risk, configuration, information, measurement and quality assurance, and the technical processes from mission analysis and requirements through architecture, design, implementation, integration, verification, transition, validation, operation and maintenance to disposal. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does ISO/IEC/IEEE 12207:2017 actually require?
ISO/IEC/IEEE 12207:2017 has 32 controls organised across 5 domains. The largest domains are Clause 6.4: Technical processes – ISO/IEC/IEEE 12207:2017 (14 controls), Clause 6.3: Technical management processes – ISO/IEC/IEEE 12207:2017 (8 controls), Clause 6.2: Organizational project-enabling processes – ISO/IEC/IEEE 12207:2017 (6 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of ISO/IEC/IEEE 12207:2017 do I already cover?
ISO/IEC/IEEE 12207:2017 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement ISO/IEC/IEEE 12207:2017?
Start your ISO/IEC/IEEE 12207:2017 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO/IEC/IEEE 12207:2017 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 32 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,248 frameworks.
Get Started Free →Free forever, no credit card required