软件工程 软件获取推荐规程

[中文适用范围]： 本推荐做法描述了一组有用的软件质量考虑因素，这些考虑因素可以在软件获取过程的任意一个或多个步骤中选择和应用。本推荐做法适用于任何计算机系统上运行的软件，无论其大小、复杂性或关键性如何。软件供应链可能包括商业现成（COTS）、定制或免费开源软件（FOSS）的集成。使用本推荐做法的组织或个人需要确定在其获取过程中需要包含的具体质量和活动。安全将在获取期间被视为要考虑的质量属性。 [外文原描述]： This recommended practice describes a set of useful quality considerations that can be selected and applied during one or more steps in a software acquisition process. The recommended practices can be applied to software that runs on any computer system regardless of the size, complexity, or criticality of the software. The software supply chain may include integration of commercial-off-the-shelf (COTS), custom, or free and open source software (FOSS). Each organization or individual using this recommended practice will need to identify the specific quality and activities that need to be included within the organization's acquisition process. Security will be included as a quality attribute considered during the acquisition.