SlideShare a Scribd company logo
Software Standards 
http://www.isaca.lk/ info@isaca.lk 
This work is licensed under a Creative Commons Attribution 3.0 Unported License. 
Parakum Pathirana vice.president@isaca.lk CISA, CISM, CGEIT, MSc, FBCS, CISSP, ISO 27001 LA, MCP, CHFI, QCS, ITIL
Agenda 
•What are standards? 
•De jure and de facto standards 
•Examples of de jure and de facto 
•Gray-area Standards 
•Open Vs. Closed 
•Why standardize? 
•Software Standards: Why? 
•Why standardize? Software perspective 
•Key software and software related standards 
•When to adopt a standard?
What are standards? 
•Definition: a standard is a form of agreement between parties 
•Many kinds of standards 
•For notations, tools, processes, organizations, domains 
•There is a prevalent view that complying to standard ‘X’ ensures that a constructed system has high quality 
•This is almost never strictly true 
•But that doesn’t mean standards are worthless 
•Here, we will attempt to put standards in perspective
De jure and de facto standards 
•Some standards are controlled by a body considered authoritative 
•ANSI, ISO, ECMA, W3C, IETF 
•These standards are called de jure (“from law”) 
•De jure standards are (usually) 
•are formally defined and documented 
•are evolved through a rigorous, well-known process 
•are managed by an independent body, governmental agency, or multi-organizational coalition rather than a single individual or company
De jure and de facto standards (cont’d) 
•Some standards emerge through widespread awareness and use 
•These standards are called de facto (“in practice”) 
•De facto standards usually 
•are created by a single individual organization to address a particular need 
•are adopted due to technical superiority or market dominance of the creating organization 
•evolve through an emergent, market-driven process 
•are managed by the creating organization or the users themselves, rather than through a formal custodial body
Examples of de jure and de facto 
•De jure standards 
•UML (managed by OMG) 
•CORBA (also managed by OMG) 
•HTTP protocol (managed by IETF) 
•De facto standards 
•PDF format (managed by Adobe) 
•May become de jure through ISO 
•Windows (managed by Microsoft) 
•There is a substantial gray area between these two
Gray-area Standards 
•HTML 
•Officially standardized by W3C, indicating de jure 
•Flavors and browser-specific extensions developed by Microsoft, Netscape, and others, creating de facto variants 
•None of these has power to force users to use standard 
•JavaScript 
•Developed by Netscape; copied (as JScript) by Microsoft 
•After substantial adoption and possibly under threat of forking/splintering, Netscape submits it to ECMA 
•Now standardized as ECMAScript (de jure) 
•JavaScript and variants continue to be developed as compatible extensions of ECMAScript
Open Vs. Closed 
•Standards (whether de jure or de facto) can be: 
•Open 
•Allow public participation in the standardization process 
•Anyone can submit ideas or changes for review 
•Closed (a.k.a. proprietary) 
•Only the custodians of a standard can participate in its evolution
Why standardize? 
•Technological perspective 
•Social perspective 
•Economic perspective
Software Standards: Why? 
•Software development is still plagued with low degree reusability, inconsistent data definitions, lack of standardization in processes covering the entire development cycle 
•Creativity in software development could lead to adopting non standardizes approaches
Why standardize? Software perspective 
•To ensure interoperability between products developed by different organizations 
•To carry engineering knowledge from one project to another 
•As an effort to attract tool vendors 
•To create economies of scale 
•To attempt to control the standard’s evolution in your favor
Key software and software related standards
When to adopt a standard? (cont’d) 
•Early adoption 
•Benefits 
•Improved ability to influence the standard 
•Get your own goals incorporated; exclude competitors 
•Early to market 
•If standard becomes successful, early marketers will profit 
•Early experience 
•Leverage enhanced experience to your benefit
When to adopt a standard? 
•Early adoption 
•Drawbacks 
•Risk of failure 
•Standard may not be successful for reasons out of your control 
•Moving target 
•Early standards tend to evolve and ‘churn’ more than mature ones, and may be ‘buggy’ 
•Lack of support 
•Early standards tend to have immature (or no) support from tool and solution vendors
When to adopt a standard? (cont’d) 
•Late adoption 
•Benefits 
•Maturity of standard 
•Better support 
•Drawbacks 
•Inability to influence the standard 
•Restriction of innovation
Thank you

More Related Content

PPT
Use Case Modeling
PPTX
Windowforms controls c#
PPTX
Generic Software Process Models
PPT
3. security architecture and models
PPT
Advanced data modeling
PPTX
Software requirement and specification
PPT
Introduction to the Web API
PPTX
Web technologies: HTTP
Use Case Modeling
Windowforms controls c#
Generic Software Process Models
3. security architecture and models
Advanced data modeling
Software requirement and specification
Introduction to the Web API
Web technologies: HTTP

What's hot (20)

PPT
C# Exceptions Handling
PPTX
User Interface Analysis and Design
DOC
Pega sample resume
DOCX
Professional Practice Course Outline
PPTX
Client Server Architecture ppt
PPTX
02 Legal, Ethical, and Professional Issues in Information Security
PPT
Requirement Engineering
PPT
Unit 1 - Introduction to Software Engineering.ppt
PPT
Non functional requirements
PPTX
Software as a service
PPT
REQUIREMENT ENGINEERING
PPT
chapter 1. Introduction to Information Security
PPTX
Requirements engineering for agile methods
PDF
Web Application Design
PPTX
McCall Software Quality Model in Software Quality Assurance
PPTX
Quality Concept
PPT
CHAPTER 1 - PROFESSIONAL ISSUES (Lecture 1.2).ppt
PDF
Software requirements engineering problems and challenges erp implementation ...
PPT
Software Configuration Management
C# Exceptions Handling
User Interface Analysis and Design
Pega sample resume
Professional Practice Course Outline
Client Server Architecture ppt
02 Legal, Ethical, and Professional Issues in Information Security
Requirement Engineering
Unit 1 - Introduction to Software Engineering.ppt
Non functional requirements
Software as a service
REQUIREMENT ENGINEERING
chapter 1. Introduction to Information Security
Requirements engineering for agile methods
Web Application Design
McCall Software Quality Model in Software Quality Assurance
Quality Concept
CHAPTER 1 - PROFESSIONAL ISSUES (Lecture 1.2).ppt
Software requirements engineering problems and challenges erp implementation ...
Software Configuration Management
Ad

Viewers also liked (9)

PPT
Chapter 42 – Organization and Financial Structure of Corporations
PPT
Software Inspection And Defect Management
PPTX
Software Configuration Management
PPTX
BroadSign Open Standard
PPT
Dotted Eyes - Open Software, Standards and Data
PDF
software configuration management
PPT
Software Testing
PPT
Software Testing Fundamentals
PPTX
Software testing ppt
Chapter 42 – Organization and Financial Structure of Corporations
Software Inspection And Defect Management
Software Configuration Management
BroadSign Open Standard
Dotted Eyes - Open Software, Standards and Data
software configuration management
Software Testing
Software Testing Fundamentals
Software testing ppt
Ad

Similar to Software Standards (20)

PPT
26 standards
PPT
A Contextual Framework For Standards
PDF
Why are standards needed in data communication and networking What .pdf
PPT
Open, De Jure, De Facto and Proprietary: Standards and Microsoft
PPT
How Far Have We Come? From eLib to NOF-digi and Beyond
PPT
Standards Through Interoperability? Really?
PDF
Software development PROCESS
PPTX
Ch2 introduction to standard
PPT
Intro to ISO-IEC SE standards 02RO reviewer
PPT
Standards and Standardization - A Research Project
PPT
Addressing The Limitations Of Open Standards
PDF
Software engineering
PDF
Standards101
PDF
The Momentum of Open Standards - a Pragmatic Approach to Software Interoperab...
PPT
Open Source Operating System [Chapter 1]
PPT
Using requirements to retrace software evolution history
PPT
Seminar on Semantic web analysis by Juha
PPT
sem_web_slides_k2013.ppt
PPT
ArchitectureStandardsforeGovtJS5Nov06 (1).ppt
26 standards
A Contextual Framework For Standards
Why are standards needed in data communication and networking What .pdf
Open, De Jure, De Facto and Proprietary: Standards and Microsoft
How Far Have We Come? From eLib to NOF-digi and Beyond
Standards Through Interoperability? Really?
Software development PROCESS
Ch2 introduction to standard
Intro to ISO-IEC SE standards 02RO reviewer
Standards and Standardization - A Research Project
Addressing The Limitations Of Open Standards
Software engineering
Standards101
The Momentum of Open Standards - a Pragmatic Approach to Software Interoperab...
Open Source Operating System [Chapter 1]
Using requirements to retrace software evolution history
Seminar on Semantic web analysis by Juha
sem_web_slides_k2013.ppt
ArchitectureStandardsforeGovtJS5Nov06 (1).ppt

More from Parakum Pathirana (11)

PPT
Cyber Threat Landscape - A Local Perspective
PDF
Unplug Yourself
PPT
Why your digital reputation matters?
PDF
IoT Adoption
PDF
Security beyond compliance
PDF
Social Media Adoption among the Banking Sector in Sri Lanka: Paper presented ...
PPT
Social media and Security risks
PDF
Social Media Governance
PDF
Disruptive Technologies
PDF
Social media & the Financial Sector
PPT
digital tattoo
Cyber Threat Landscape - A Local Perspective
Unplug Yourself
Why your digital reputation matters?
IoT Adoption
Security beyond compliance
Social Media Adoption among the Banking Sector in Sri Lanka: Paper presented ...
Social media and Security risks
Social Media Governance
Disruptive Technologies
Social media & the Financial Sector
digital tattoo

Recently uploaded (20)

PDF
Softaken Excel to vCard Converter Software.pdf
PPTX
Operating system designcfffgfgggggggvggggggggg
PPTX
Transform Your Business with a Software ERP System
PDF
Design an Analysis of Algorithms II-SECS-1021-03
PPTX
assetexplorer- product-overview - presentation
PDF
Claude Code: Everyone is a 10x Developer - A Comprehensive AI-Powered CLI Tool
PDF
Internet Downloader Manager (IDM) Crack 6.42 Build 42 Updates Latest 2025
PDF
Nekopoi APK 2025 free lastest update
PDF
Navsoft: AI-Powered Business Solutions & Custom Software Development
PDF
medical staffing services at VALiNTRY
PDF
EN-Survey-Report-SAP-LeanIX-EA-Insights-2025.pdf
PPTX
CHAPTER 2 - PM Management and IT Context
PDF
System and Network Administration Chapter 2
PDF
Upgrade and Innovation Strategies for SAP ERP Customers
PDF
Design an Analysis of Algorithms I-SECS-1021-03
PDF
Odoo Companies in India – Driving Business Transformation.pdf
PDF
Adobe Premiere Pro 2025 (v24.5.0.057) Crack free
PDF
Understanding Forklifts - TECH EHS Solution
PDF
How to Migrate SBCGlobal Email to Yahoo Easily
PPTX
Agentic AI Use Case- Contract Lifecycle Management (CLM).pptx
Softaken Excel to vCard Converter Software.pdf
Operating system designcfffgfgggggggvggggggggg
Transform Your Business with a Software ERP System
Design an Analysis of Algorithms II-SECS-1021-03
assetexplorer- product-overview - presentation
Claude Code: Everyone is a 10x Developer - A Comprehensive AI-Powered CLI Tool
Internet Downloader Manager (IDM) Crack 6.42 Build 42 Updates Latest 2025
Nekopoi APK 2025 free lastest update
Navsoft: AI-Powered Business Solutions & Custom Software Development
medical staffing services at VALiNTRY
EN-Survey-Report-SAP-LeanIX-EA-Insights-2025.pdf
CHAPTER 2 - PM Management and IT Context
System and Network Administration Chapter 2
Upgrade and Innovation Strategies for SAP ERP Customers
Design an Analysis of Algorithms I-SECS-1021-03
Odoo Companies in India – Driving Business Transformation.pdf
Adobe Premiere Pro 2025 (v24.5.0.057) Crack free
Understanding Forklifts - TECH EHS Solution
How to Migrate SBCGlobal Email to Yahoo Easily
Agentic AI Use Case- Contract Lifecycle Management (CLM).pptx

Software Standards

  • 1. Software Standards http://www.isaca.lk/ info@isaca.lk This work is licensed under a Creative Commons Attribution 3.0 Unported License. Parakum Pathirana vice.president@isaca.lk CISA, CISM, CGEIT, MSc, FBCS, CISSP, ISO 27001 LA, MCP, CHFI, QCS, ITIL
  • 2. Agenda •What are standards? •De jure and de facto standards •Examples of de jure and de facto •Gray-area Standards •Open Vs. Closed •Why standardize? •Software Standards: Why? •Why standardize? Software perspective •Key software and software related standards •When to adopt a standard?
  • 3. What are standards? •Definition: a standard is a form of agreement between parties •Many kinds of standards •For notations, tools, processes, organizations, domains •There is a prevalent view that complying to standard ‘X’ ensures that a constructed system has high quality •This is almost never strictly true •But that doesn’t mean standards are worthless •Here, we will attempt to put standards in perspective
  • 4. De jure and de facto standards •Some standards are controlled by a body considered authoritative •ANSI, ISO, ECMA, W3C, IETF •These standards are called de jure (“from law”) •De jure standards are (usually) •are formally defined and documented •are evolved through a rigorous, well-known process •are managed by an independent body, governmental agency, or multi-organizational coalition rather than a single individual or company
  • 5. De jure and de facto standards (cont’d) •Some standards emerge through widespread awareness and use •These standards are called de facto (“in practice”) •De facto standards usually •are created by a single individual organization to address a particular need •are adopted due to technical superiority or market dominance of the creating organization •evolve through an emergent, market-driven process •are managed by the creating organization or the users themselves, rather than through a formal custodial body
  • 6. Examples of de jure and de facto •De jure standards •UML (managed by OMG) •CORBA (also managed by OMG) •HTTP protocol (managed by IETF) •De facto standards •PDF format (managed by Adobe) •May become de jure through ISO •Windows (managed by Microsoft) •There is a substantial gray area between these two
  • 7. Gray-area Standards •HTML •Officially standardized by W3C, indicating de jure •Flavors and browser-specific extensions developed by Microsoft, Netscape, and others, creating de facto variants •None of these has power to force users to use standard •JavaScript •Developed by Netscape; copied (as JScript) by Microsoft •After substantial adoption and possibly under threat of forking/splintering, Netscape submits it to ECMA •Now standardized as ECMAScript (de jure) •JavaScript and variants continue to be developed as compatible extensions of ECMAScript
  • 8. Open Vs. Closed •Standards (whether de jure or de facto) can be: •Open •Allow public participation in the standardization process •Anyone can submit ideas or changes for review •Closed (a.k.a. proprietary) •Only the custodians of a standard can participate in its evolution
  • 9. Why standardize? •Technological perspective •Social perspective •Economic perspective
  • 10. Software Standards: Why? •Software development is still plagued with low degree reusability, inconsistent data definitions, lack of standardization in processes covering the entire development cycle •Creativity in software development could lead to adopting non standardizes approaches
  • 11. Why standardize? Software perspective •To ensure interoperability between products developed by different organizations •To carry engineering knowledge from one project to another •As an effort to attract tool vendors •To create economies of scale •To attempt to control the standard’s evolution in your favor
  • 12. Key software and software related standards
  • 13. When to adopt a standard? (cont’d) •Early adoption •Benefits •Improved ability to influence the standard •Get your own goals incorporated; exclude competitors •Early to market •If standard becomes successful, early marketers will profit •Early experience •Leverage enhanced experience to your benefit
  • 14. When to adopt a standard? •Early adoption •Drawbacks •Risk of failure •Standard may not be successful for reasons out of your control •Moving target •Early standards tend to evolve and ‘churn’ more than mature ones, and may be ‘buggy’ •Lack of support •Early standards tend to have immature (or no) support from tool and solution vendors
  • 15. When to adopt a standard? (cont’d) •Late adoption •Benefits •Maturity of standard •Better support •Drawbacks •Inability to influence the standard •Restriction of innovation