ISO/ IEC 29110

ISO/ IEC 29110

About ISO/IEC 29110

This standard is applicable to a VSE - an entity such as enterprise, organization, department or even project having up to 25 people in the entity. However, the standard can also be applied to an entity that is larger than a VSE.

An organization conforming with this standard could improve its software development processes systematically and be recognized internationally. There are two key activities being focused on in this standard consisting of project management activities and software implementation activities.

Type of audit

  • Certification Audit

Advantages of ISO/IEC 29110 series certification

  • Fulfill the requirements of internationally accepted software development best practices.
  • Achieve and be able to maintain a high-quality level of software development processes.
  • Maximize business growth. 
  • Improve reputation and trustworthiness of software development project by the organization and the organization itself.
  • The ISO/IEC 29110 is designed to be used with any software development life cycle such as waterfall, iterative, incremental, evolutionary or agile.

Certification Audit Process

1.Request for A Proposal

      a.Company interested in certifying against ISA/IEC 29110 requests for a proposal based on your preferred cybersecurity scheme from the accredited certifying body, e.g., TUV NORD Thailand

2.Certification Audit

      a.Stage 1: Documentation Review

      b.Stage 2: On-site Verification

3.Issue of ISA/IEC 29110 Certificate

4.Surveillance Audit 1 & 2 (within the next 2 years after the Certificate is issued)

5.Re-certification (Re-assessment of your industrial cybersecurity within the next 3 years after the Certificate is issued)