BS ISO/IEC 33002:2015 pdf download-Information technology — Process assessment — Requirements for performing process assessment.
4.2 Assessment activities The assessment process shall start with the assessment sponsor’s commitment to proceed. 4.2.1 Plan the assessment A plan for the assessment shall be developed and documented, including at a minimum: a) required inputs specified in this standard (refer to 4.4); b) class of assessment (refer to 4.6); c) category of independence of the body performing the assessment, the lead assessor and the other members of the assessment team (refer to Annex A) d) communications to the personnel involved in the assessment; e) identification of the documented assessment process including: 1) the strategy and techniques for the selection, identification, collection and analysis of objective evidence and data, to satisfy any requirements for coverage of the organizational scope or the process scope of the assessment as defined for the class of the assessment (refer 4.6); 2) the approach to derive an agreed process attribute rating, where relevant. f) activities to be performed in performing the assessment; g) resources and schedule assigned to these activities; h) identification and definition of roles and responsibilities of the participants in the assessment; i) criteria to verify that the requirements of this International Standard have been met; j) description of the planned assessment outputs. Roles and responsibilities for process assessment shall be assigned and communicated to personnel impacted by the assessment. The plan for the assessment shall be approved by the assessment sponsor, and the approval shall be documented. 4.2.2 Collect the data The data collected shall be sufficient to provide coverage of the organization scope and the process scope for the assessment, as specified for the selected class of the assessment. Data shall be collected on the basis of direct or indirect evidence that shall be sufficient for the class of assessment (refer to 4.6).