The developer shall perform the following activities.
5.19.1 Risk management. The developer shall perform risk management
throughout the software development process. The developer shall identify,
analyze, and prioritize the areas of the software development project that
involve potential technical, cost, or schedule risks; develop strategies for
managing those risks; record the risks and strategies in the software
development plan; and implement the strategies in accordance with the
plan.
5.19.2 Software management indicators. The developer
shall use software management indicators to aid in managing the software
development process and communicating its status to the acquirer. The
developer shall identify and define a set of software management indicators,
including the data to be collected, the methods to be used to interpret and
apply the data, and the planned reporting mechanism. The developer shall
record this information in the software development plan and shall collect,
interpret, apply, and report on those indicators as described in the plan.
Candidate indicators are given in Appendix
F
.
5.19.3 Security and privacy. The developer shall meet the security and
privacy requirements specified in the contract. These requirements may affect
the software development effort, the resulting software products, or
both.
5.19.4 Subcontractor management. If subcontractors are used, the developer
shall include in subcontracts all contractual requirements necessary to ensure
that software products are developed in accordance with prime contract
requirements.
5.19.5 Interface with software IV&V agents. The developer shall
interface with the software Independent Verification and Validation (IV&V)
agent(s) as specified in the contract.
5.19.6 Coordination with associate developers. The developer shall
coordinate with associate developers, working groups, and interface groups as
specified in the contract.
5.19.7 Improvement of project processes. The developer shall periodically
assess the processes used on the project to determine their suitability and
effectiveness. Based on these assessments, the developer shall identify any
necessary and beneficial improvements to the process, shall identify these
improvements to the acquirer in the form of proposed updates to the software
development plan and, if approved, shall implement the improvements on the
project.
