A CMMI® Maturity Level 4 Company
GSA Certified HSPD-12 Systems Integrator

Home > Practice Areas > Software Quality Assurance

Software Quality Assurance

The cost of fixing an error in an application increases as much as ten times if it has to be rectified in a production environment. The risks associated with inadequate testing, and consequently with insufficient quality, are rising, particularly with the increasing complexity of multiple and inter-dependent applications. Testing is a key phase of any project, and if conducted the right way, gives a business owner an objective view of the quality of the product, increases control, and reduces risk and cost. Based on the experience we’ve developed implementing some of the largest independent testing programs for the Federal government and CMMI® best practices, QSSI built an extensive Software Quality Assurance practice that manages requirements and quality with complete traceability from inception to completion.

Independent Verification & Validation (IV&V)

Independent Verification & ValidationOur IV&V services are consistent with the latest systems engineering and process improvement models, and are derived from industry standards including the IEEE Std. 1012 - 2004 Standard for Software Verification and Validation, and the CMMI® process maturity framework. QSSI provides an objective assessment of products and processes throughout the project life cycle in an environment free from the influence, guidance, and control of the development effort. Services include: Criticality Analysis, Requirements Analysis and Tracing, Software Design Analysis, Milestone Reviews and Metrics, Code Review and Analysis, Document Inspection, Defect Investigation, plus Training Evaluation, Planning, Execution, Reporting, and Witnessing.

Full Lifecycle Testing

LifecyclePlanning is crucial given the time-sensitive nature of testing and as such, should run in step with the development lifecycle. Our comprehensive modular approach to testing ensures requirements are complete, unambiguous, logically consistent, and that design and code meet these requirements. Tests are conducted with a focus on the impact and likelihood of failure of the functionality being tested. Our full lifecycle testing service covers the following testing processes: Component Integration Testing, System Integration Testing, End-to-End Testing, Performance Testing, Regression Testing, Usability Testing, Operational Readiness Testing, and User Acceptance Testing.

Security Test & Evaluation (ST&E)

securityQSSI ST&E processes follow guidelines defined in NIST Special Publications (SP) 800-37, 800-53 and 800-53a. Our methodology includes collaboration tools to ensure clients are fully prepared and completely engaged; a proven tracking and management system; and template-driven, process-based methods that ensure quality and repeatability. Our services span the three major security domains: Management Controls, Operational Controls, and Technical Controls.

Certification & Accreditation (C&A)

CertificationQSSI has an established C&A process based on NIST guidelines. We provide a faster, simpler, and more cost-effective way to create, manage, and measure ST&E readiness through C&A packages. These packages address scope, roles, responsibilities, management, commitment, compliance, and formal documented procedures to facilitate the implementation of security assessment policies and security assessment controls. We assemble and evaluate the suitability and the readiness of all necessary documents required for the ST&E. We conduct findings discussions, create the Corrective Action Plan (CAP), and prepare a detailed C&A tracking calendar.