DefinePK

Abstract

In today’s business environment, agile and secure software processes are essential since they bring high quality and secured software to market faster and more cost-effectively. Unfortunately, some software practitioners are not following the proper practices of both processes when developing software. There exist various studies which assess the quality of software process; nevertheless, their focus is on the conventional software process. Furthermore, they do not consider weight values in the assessment although each evaluation criterion might have different importance on the project. Consequently, software certification is needed to give conformance on the quality of agile and secure software processes. Therefore, the objective of this paper is to propose ESPAC (Extended Software Process Assessment and Certification) Model which addresses both software processes and considers the weight values during the assessment. The model has been constructed by using deductive approach, whereby the theoretical and exploratory studies were conducted in order to determine the components of the proposed model. The ESPAC Model consists of six components, which are the target, evaluation criteria, reference standard, data gathering technique, assessment phases and synthesis technique. The proposed model has been validated by seven software practitioners from the practical perspectives through focus group discussion. The validation result shows that the ESPAC Model gained their satisfaction and able to be practically executed in the real environment.