IEEE/ISO/IEC P41062

This standard describes a set of useful activities, tasks and methods that can be selected and applied during the acquisition of software or software services. The standard can be applied to software that runs on any computer system regardless of the size, complexity, or criticality of the software. The software supply chain may include integration of commercial-off-the-shelf (COTS), custom, or open source software. Software services can include software development and sustainment, software integration, and software verification and validation. Security is included as a quality attribute considered during the acquisition. However, specific requirements for acquisition of information assurance (security) services and cloud services are not included.