Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
ISO/IEC 29155-2 defines the specific requirements that organizations must satisfy when conducting IT project performance benchmarking studies. Building on the framework established in Part 1, this standard addresses the procedural rigor, data quality criteria, and validation mechanisms needed to produce trustworthy and actionable benchmarking results.
The standard specifies requirements across five key dimensions: benchmarking planning, data collection and validation, analysis methods, reporting protocols, and quality assurance. Each dimension includes mandatory and conditional requirements, where conditional requirements apply only when certain contextual factors are present. For instance, when benchmarking across different geographic regions, additional normalization for purchasing power parity and labor rate differentials becomes mandatory.
| Requirement Dimension | Mandatory Elements | Conditional Elements |
|---|---|---|
| Benchmarking Planning | Scope definition, entity selection, factor identification | Cross-regional normalization, multi-year trend analysis |
| Data Collection | Measurement instrument validation, training records | Third-party audit of collection processes |
| Analysis Methods | Statistical significance testing, outlier identification | Bayesian adjustment for small samples |
| Reporting Protocols | Format standardization, disclaimer inclusion | Anonymization for multi-entity studies |
| Quality Assurance | Independent review, reproducibility checks | External benchmarking certification |
A significant portion of ISO/IEC 29155-2 addresses data quality requirements. The standard mandates that all measurement data must be traceable to primary sources, verifiable through independent means, and complete within defined tolerance thresholds. Missing data points require documented justification and sensitivity analysis to confirm they do not materially affect results. Normalization rules are specified for common adjustment factors including project size (function points or story points), team size, duration, and labor category mix.
The normalization framework introduces the concept of equivalency classes: groups of projects or entities that share sufficiently similar characteristics for direct comparison. Projects in different equivalency classes may still be compared, but the analysis must document the expected variance contribution from class differences and apply appropriate statistical corrections. This layered approach prevents the common pitfall of comparing projects that are superficially similar but fundamentally different in structure or risk profile.
ISO/IEC 29155-2 mandates independent quality assurance procedures for benchmarking programs. Internal audits must be conducted at least annually, and external audits are recommended every three years or whenever the benchmarking scope expands significantly. The quality assurance framework includes reproducibility requirements: any independent analyst applying the same data and methods must be able to reproduce the reported results within defined tolerance bands. This reproducibility requirement is particularly important when benchmarking results inform strategic decisions such as outsourcing evaluations, tool selection, or process improvement investments.