agility and compliance (andrea tomasini, agile42)
Post on 14-Sep-2014
1.983 views
DESCRIPTION
Implementing agility in a strongly Regulated environment is sometimes a challenge. Many teams and company do find ways, but most of these are against the agile principles or are turning out to be big impediments. Mostly the problem being that from compliance authorities we get told HOW to do things and not WHAT they will measure to prove quality and compliance. Can we do better? Sure we can, transparency is the key...TRANSCRIPT
![Page 1: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/1.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Agility and ComplianceThe What and the How problem...
![Page 2: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/2.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Andrea Tomasini
Agile Coach & [email protected]
![Page 3: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/3.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Andy Carmichael
Andrea's company is called agile42 and if you think about it the name has some logic to it - "agile" is the undisputed answer to all the major questions of software engineering (mmm...?) in the same way that 42 is the answer to that only slightly larger chestnut: life, the universe and everything...
![Page 4: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/4.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Why Agility?
![Page 5: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/5.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Growing Software Complexity
Software complexity in FORD vehicles quadruplicated in 5 years
0
2.5
5
7.5
10
2005 2006 2007 2008 2009 2010
10
6
4.5
3.42.8
2.4
Software lines in FORD vehicles over the past 5 years
x4
![Page 6: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/6.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Growing Software Complexity
Compared software complexity growth in aerospace and automotive
F-22 Raptor
F-35 Joint Strike
Boeing 787 Dreamliner
S-Class Daimler 98.6
6.5
5.7
1.7
x10
![Page 7: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/7.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Time to MarketDue to globalization effects, and other economical changes, the time to market over time decreased significantly
Deepa Chandrasekaran, Gerard J. Tellis - Marshall School of Business, University of Southern California, Los Angeles, California
1915 1939 1972 1976 1983 1994 1998 2000 2002 2004
13.5 years
3 months
![Page 8: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/8.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Why does this matter?Defined Process Control vs. Empirical Process Control
![Page 9: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/9.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Change from this...Defined Process, suited to produce faster
![Page 10: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/10.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
... to this.Empirical Process, suited for R&D
![Page 11: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/11.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Why Compliance?
![Page 12: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/12.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
compliance |kəmˈplīəns| (also compliancy |-ˈplīənsē|)noun1 the action or fact of complying with a wish or command : they must secure each other's cooperation or compliance.
• ( compliance with) the state or fact of according with or meeting rules or standards : all imports of timber are in compliance with regulations.
![Page 13: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/13.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
What are the reason to require Compliance?
Compliance is about guaranteeing that a product reaching the market will satisfy the rules that regulate that market...
Compliance is about adhering to a set of rules considered vital to preserve human life safe
![Page 14: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/14.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Don’t get lost in the jungle...
EN ISO
13485:2003
Quality
Management
ISO 14971Risk Management
ISO 60601-1-4
Programmable electrical
medical devices
ISO 62304Medical Device Software Lifecycle
EN 62366:2007Usability
ISO 62304 closely guides / determinesdevelopment of medical software
![Page 15: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/15.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Recipe for IEC/EN 62304
Based on 60601-1-4 and AAMI 68
Defines minimal levels for process Activities
Aligned with FDA terminology and expectations
Allows the manufacturer to chose the best process, techniques and tools
![Page 16: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/16.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
5.8 Software Release
5.7 Software System Testing
5.6 Software Integration & int. testing
5.5 Software Unit impl. & verification
5.4 Software Detailed Design
5.3 Software Architectural
Design
6.2 Problems and
Modification analysis
Overview of IEC/EN 62304
6.1Establish SW
Maintenance Plan
6.3 Software Modification Implementation
7 Software Risk Management
8 Software Configuration Management
9 Software Problem Resolution
![Page 17: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/17.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
The WHAT & HOW problem...
![Page 18: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/18.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
€
Comparing the Goals
Patient SafetyEffectivenessGovernance throughout product lifecycle
123456
ProductivityPredictability/Sustainability
Business ValueQuality
DIN 62304Agile/Scrum
Mainly Measure the effects
of the Product usage
Approved!
![Page 19: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/19.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
This standard does NOT prescribe a specific life-cycle model. The users of this standard are responsible for selecting a life-cycle model for the software project and for mapping the PROCESSES, ACTIVITIES, and TASKS in this standard onto that model
Compliance is Model independent...
This standard provides a framework of life-cycle PROCESSES with ACTIVITIES and TASKS necessary for the safe design and maintenance of MEDICAL DEVICE SOFTWARE. This standard provides requirements for each life-cycle PROCESS. Each life-cycle PROCESS is further divided into a set of ACTIVITIES, with each ACTIVITY further divided into a set of TASKS.
Or not?
Confusing?
![Page 20: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/20.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Working Software over Comprehensive Documentation
Documentation is minimized and evolves in process
Test
Epics
User Stories
Design Code
Validate/Update
Dialog/Agreement
Agile/Scrum DIN 62304
Design
Requirements Specifications
Code
Test Design
Requirements specifications drive the implementation
Test Execution
Define/Execute
Verify/Approve
We can do it!
€
![Page 21: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/21.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Standard Operating Procedures vs. Continuous Process Improvement
The purpose of standards is
1.to make it possible to any
one to do the job
2.to reduce variations
3.Standards are written by
process groups / QM
4.Written standards are to
be followed, not changed
A standard defines goals for a team to reach, and constraints to observe.
An Agile Team will use that as a Baseline for continuous process improvement
DIN 62304 Agile/Scrum
We can do it!
€
![Page 22: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/22.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Document Driven vs. Consensus Driven
“This document is now approved as input for the next development phase”
“This document is now part of a consistent product increment”
“The Definition of Done and Definition of Ready, allow to set minimal requirements to measure fitness to the next phase”
DIN 62304 Agile/Scrum
We can do it!
€
![Page 23: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/23.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
What do we VALUE more?
![Page 24: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/24.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
...You have to update the 5.1, 5.2, 5.3 and 5.4
section of the SOP...
...yes and I have to complete the feature, write
unit-tests, check the Acceptance Criteria
and review the code...
While we agree there is value on the item(s) on the left, we value the items on the right more
![Page 25: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/25.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
so what?
![Page 26: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/26.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Conclusions
• Agile is mainstream, enterprises need to adopt it, is growing
• We can implement agile in a Compliance Regulated environment, but won’t come for free
• The Goal of Compliance is to guarantee that we can product better Software that won’t harm humans
• Continue to challenge the status quo, push for having a WHAT to achieve and leave the HOW to achieve it to yourself!
![Page 27: Agility and Compliance (Andrea Tomasini, agile42)](https://reader033.vdocuments.site/reader033/viewer/2022051322/5415d9428d7f728a6c8b485d/html5/thumbnails/27.jpg)
agile42 | We advise, train and coach companies building software www.agile42.com | All rights reserved. Copyright © 2007 - 2009.
Questions? & Answers!
For any further comment and or question, feel free to contact us [email protected]
Further References:
Scrum Alliance: http://www.scrumalliance.orgControl Chaos: http://www.controlchaos.com
Implementing Scrum: http://www.implementingscrum.comJeff Sutherland Blog: http://jeffsutherland.com/scrum
Mike Cohn “User Stories”: http://www.mountaingoatsoftware.comagile42 Website: http://www.agile42.com/