Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
Scope and Applicability
“content”: “
The CSA ISO IEC TR 29110-5-1-4-19:2026 is the Canadian adoption of ISO/IEC TR 29110-5-1-4:2019, a Technical Report that provides a management and engineering guide for the Advanced profile of the Generic profile group defined in the ISO/IEC 29110 series. This series is specifically tailored for Very Small Entities (VSEs) — organizations with up to 25 people — that develop or maintain software. The Advanced profile builds upon the Basic profile by adding further project management and software implementation processes to address increased project complexity and risk. This article provides a comprehensive overview of the standard’s scope, key technical requirements, practical implementation guidance, and compliance considerations.
Scope and Applicability
CSA ISO IEC TR 29110-5-1-4-19 applies to VSEs that have outgrown the Basic profile and require additional process rigour without the overhead of large-scale standards such as ISO/IEC 12207 or ISO 9001. The target audience includes project managers, software engineers, quality assurance personnel, and process improvement specialists operating within VSEs. The guide is structured around two key process areas:
- Project Management (PM) — covering planning, monitoring, risk management, and stakeholder coordination.
- Software Implementation (SI) — covering requirements analysis, architectural design, detailed design, construction, integration, testing, and delivery.
It is intended for any VSE producing software either as a standalone product or as part of a larger system. The Advanced profile presumes the VSE has experience with the Basic profile (described in ISO/IEC TR 29110-5-1-2) and needs to manage more complex projects, longer durations, or higher criticality.
Tip: VSEs transitioning from the Basic profile should use this guide as a structured upgrade path. Begin by evaluating compliance with the Basic profile outcomes before adopting the additional processes defined in the Advanced profile.
Technical Requirements and Process Areas
The standard defines the expected outcomes for each process area rather than prescribing rigid procedures. This outcome-based approach allows VSEs to adapt the practices to their specific context while ensuring essential software engineering and management activities are performed. The table below summarizes the process areas, their objectives, and key outcomes.
| Process Area | Objective | Key Outcomes |
|---|---|---|
| Project Management (PM) | Establish and execute a project plan that achieves the project objectives within defined constraints. |
|
| Software Implementation (SI) | Systematically produce, verify, and validate software that satisfies the agreed requirements. |
|
The Advanced profile introduces additional subprocesses not present in the Basic profile, including formal change control, project portfolio alignment, and enhanced configuration management. It also emphasizes the use of software quality assurance (SQA) practices and independent verification and validation (IV&V) activities where feasible.
Important: CSA ISO IEC TR 29110-5-1-4-19 is a Technical Report (TR), not an International Standard. It serves as guidance and may be used as a basis for internal process improvement but is not intended for third-party certification. However, VSEs can claim conformance to the TR by demonstrating achievement of the defined outcomes.
Implementation Highlights for VSEs
Successfully adopting the Advanced profile requires a pragmatic and iterative approach. The following implementation highlights are recommended based on industry experience and the guidance itself.
1. Start with a Gap Analysis
Compare current practices against the outcomes listed in the TR. Identify missing activities or artifacts and prioritize them based on project needs. Many VSEs find that they already perform many outcomes informally; the key is to formalize them with lightweight documentation.
2. Tailor the Process to the Entity Size
One of the core principles of the 29110 series is that VSEs should not be forced to use heavyweight processes. For a VSE with only 5 people, the Project Management process may involve simple checklists and a shared spreadsheet, while a VSE of 20 people might adopt a lightweight project management tool.
3. Integrate Risk Management into Daily Work
The Advanced profile explicitly requires risk identification and mitigation. VSEs can implement this via a weekly team review of a risk register rather than a complex risk management process. The key is to keep risks visible and assign owners.
4. Leverage Pairing and Peer Reviews
Quality assurance in VSEs can be achieved through peer reviews of requirements, designs, and code. The TR encourages technical reviews as an efficient way to catch defects early without requiring a separate quality assurance department.
Practice Note: Many VSEs report that adopting even a subset of the Advanced profile outcomes leads to measurable improvements in on-time delivery and product quality. The structured approach helps build customer trust and prepares the entity for growth.
Compliance and Certification Considerations
While CSA ISO IEC TR 29110-5-1-4-19 is not a certifiable standard, VSEs may still perform compliant assessments or self-declarations. The following notes clarify common compliance aspects.
| Option | Description | Suitable For |
|---|---|---|
| Self-Assessment | VSE evaluates its own processes against the outcomes using a checklist provided in the TR. This is low-cost and can guide improvement. | All VSEs starting their journey |
| Second-Party Audit | A customer or partner evaluates the VSE’s processes for a specific contract. This is common in supply chains where the VSE is a subcontractor. | VSEs working with larger companies |
| Third-Party Assessment | An accredited certification body may offer assessment against ISO/IEC 29110 (if a national scheme exists). The TR can be used as the audit criteria. | VSEs seeking market recognition |
It is important to note that the TR references ISO/IEC 29110-2 (Framework and taxonomy) and ISO/IEC 29110-3 (Assessment guide) for formal conformity assessments. VSEs wishing to pursue a certification under the ISO/IEC 29110 series should refer to those normative standards.
Compliance Caution: Do not over-document. The goal of the Advanced profile is to add necessary control for complex projects without creating bureaucracy. Excessive documentation can defeat the purpose of having a VSE-tailored guide. Focus on outcomes, not artifacts.
Frequently Asked Questions
Q: What is the difference between the Basic and Advanced profiles in the ISO/IEC 29110 series?
A: The Basic profile focuses on a minimal set of processes (Project Management and Software Implementation) with a simple structure for small, low-risk projects. The Advanced profile adds additional project management practices (e.g., formal risk management, technical reviews) and more detailed software implementation activities (e.g., architectural design, integration testing). It is intended for VSEs that need more control due to project size, complexity, or risk.
A: The Basic profile focuses on a minimal set of processes (Project Management and Software Implementation) with a simple structure for small, low-risk projects. The Advanced profile adds additional project management practices (e.g., formal risk management, technical reviews) and more detailed software implementation activities (e.g., architectural design, integration testing). It is intended for VSEs that need more control due to project size, complexity, or risk.
Q: Can a VSE claim conformity to CSA ISO IEC TR 29110-5-1-4-19?
A: Yes. Although the document is a Technical Report (informative), a VSE can prepare a self-declaration or undergo an assessment based on the outcomes defined therein. However, official certification is typically based on the normative parts of the 29110 series (e.g., ISO/IEC 29110-2). The TR provides the “how-to” guidance for achieving the outcomes.
A: Yes. Although the document is a Technical Report (informative), a VSE can prepare a self-declaration or undergo an assessment based on the outcomes defined therein. However, official certification is typically based on the normative parts of the 29110 series (e.g., ISO/IEC 29110-2). The TR provides the “how-to” guidance for achieving the outcomes.
Q: Is this standard applicable to non-software domains, such as systems engineering?
A: As written, CSA ISO IEC TR 29110-5-1-4-19 is focused on software engineering. However, the ISO/IEC 29110 series includes parts dealing with systems engineering (e.g., ISO/IEC TR 29110-5-6). For VSEs developing hardware-software systems, those companion guides should be used alongside or in lieu of the software-specific part.
A: As written, CSA ISO IEC TR 29110-5-1-4-19 is focused on software engineering. However, the ISO/IEC 29110 series includes parts dealing with systems engineering (e.g., ISO/IEC TR 29110-5-6). For VSEs developing hardware-software systems, those companion guides should be used alongside or in lieu of the software-specific part.
Q: What is the relationship between this TR and other software lifecycle standards like ISO/IEC 12207?
A: ISO/IEC 29110 (and this TR) is a profile of ISO/IEC 12207:2008/Amd1:2011. It tailors that full-scale standard to the needs and capabilities of VSEs. The Advanced profile includes a larger subset of ISO/IEC 12207 processes than the Basic profile, but still omits those deemed unnecessary for typical VSE operations (e.g., organizational-level processes). The goal is to provide a bridge for VSEs to eventually adopt the full standard as they grow.
A: ISO/IEC 29110 (and this TR) is a profile of ISO/IEC 12207:2008/Amd1:2011. It tailors that full-scale standard to the needs and capabilities of VSEs. The Advanced profile includes a larger subset of ISO/IEC 12207 processes than the Basic profile, but still omits those deemed unnecessary for typical VSE operations (e.g., organizational-level processes). The goal is to provide a bridge for VSEs to eventually adopt the full standard as they grow.
This article is provided for informational purposes and does not constitute official interpretation of CSA ISO IEC TR 29110-5-1-4-19. Users should refer to the authoritative standard document for complete and precise requirements. The information in this article reflects the standard’s content as of its publication year 2026.
”