SQAI Software Configuration Management Checklist (IEEE 828)

Has the Software Configuration Management Plan (SCMP) or equivalent been established?

Are there any other documents (eg. CMP) established that cover configuration management controls over the project development life cycles?

Have the configuration management environment and tools be installed and setup for the configuration management activities of the project / software?

Have the personnel tasked with configuration management activities been informed and trained adequately?

Was a structure or hierarchy determined from the system architecture to the software component level? Were these configuration items identified in a model that is easily traceable (eg. a hierarchical family tree breakdown of system, hardware and software configuration items)?

Are all configuration items completely and accurately identified, described, uniquely named (tagged and versioned), and controlled in the appropriate repository?

Are the criteria for baselining and approving a configuration item defined and documented? (what constitutes to a baseline and who is required to formally approve the baseline status)

Are the configuration management procedures in place on how to retrieve and reproduce controlled items from the repository? (consideration of marking and labeling, tracking of controlled copies, projection of sensitive / security information)

Are the configuration management procedures in place to ensure that backup storage of project data / documentations are maintained to facilitate technical data recovery?

Are the change control procedures in place to ensure all configuration items are controlled when performing the initiation of change requests, evaluation and approval of change requests by appropriate authorities?

Are approved change requests verified on the implementation, testing, and traceability? Are traceability documented?

Are disapproved change requests clearly stated of their disposition and recorded?

Is the configuration management system in place to ensure that records and the ability to report on the configuration baselines associated with each configuration item can be retrieved at the point of time?

Are functional configuration audits planned and performed during the project development life cycle to assess the proper transition of functional requirements to the built product before the release to production environment?

Are physical configuration audits performed during the product development to assess whether the product is being properly assembled before releasing the product to production environment?

Are baseline configuration audits performed during the project development life cycle to asses the proper creation of baselines?

Are the release management processes documented to ensure that the proper set of deliverables (including documentation and other required materials) are delivered to customer/user based on product requirements?