![](bg3.png)
Infrastructure Library (ITIL) (Cartlidge et al., 2007).
ITIL was developed in the United Kingdom at the
end of the 1980’s. ITIL has become the world wide
“de facto” standard for IT Service Management
(Barafort et al., 2009) and is now owned by the
Cabinet Office . ITILv3 consists of 5 publications
which cover – Service Strategy, Service Design,
Service Transition, Service Operation and Continual
Service Improvement.
As both ISO/IEC 20000-4 and ITIL deal with a
life cycle approach to Service Management, they are
very similar standards. The relationship between
ITILv3 and ISO/IEC 20000 is close - to the extent
that ISO/IEC 20000 has become known as the “ITIL
standard”. In the latest version of the standard
ISO/IEC 20000-1:2011, there have been steps taken
to ensure that ISO/IEC 20000 is more closely aligned
with ITILv3 (Dugmore and Taylor, 2008) .
5 ISO/IEC 15504 AND THE
DEVELOPMENT OF PROCESS
ASSESSMENT MODELS
ISO/IEC 15504-2 defines the requirements for
performing process assessment as a basis for use in
process improvement and capability determination.
ISO/IEC 15504-2 defines a measurement framework
for the process capability and defines the
requirements for performing an assessment. It also
defines requirements for building PRMs, building
PAMs and verifying conformity of process models
and of process assessment. Process assessment is
viewed on the basis of a two dimensional model
containing both a process dimension and a capability
dimension. The process dimension is provided by
reference to an external PRM in which processes are
characterized in terms of their purpose and their
outcomes. Further guidelines for process description
are outlined in ISO/IEC TR 24774:2010 (ISO/IEC,
2010b) . The capability dimension is based on 6
capability levels. The achievement of these
capability levels is based on the achievement of the
associated process attributes.
In order to perform an assessment which is
compliant with ISO/IEC 15504-2, a PAM is
required. ISO/IEC 15504-5 (ISO/IEC, 2006)
provides an exemplar PAM which can be used to
perform an assessment compliant with the
requirements defined in ISO/IEC 15504-2. The
PAM extends the PRM process definitions by
including a measurement framework.
Process assessment contains 2 aspects, capability
determination and process improvement. Once
process capability has assessed the current state of a
set of processes (against a target capability level
determined in advance of the assessment), the results
of the assessment are then analysed to determine the
strengths, weaknesses, opportunities and threats in
the process context and process improvement can be
undertaken on this basis.
6 THE DEVELOPMENT OF
A PROCESS ASSESSMENT
MODEL TO ASSESS AGAINST
IEC 80001-1
In order to perform an assessment against IEC
80001-1, our research to date has focused on
investigating how other ISO/IEC 15504-2 compliant
process models have been developed to assess
against other similar standards. Given the
relationship between IEC 80001-1 and ISO/IEC
20000-1, we have investigated how the PAM for this
standard was developed. We also investigated how
the TIPA PAM was developed. We discovered that
the TIPA framework which was developed by Public
Research Centre Henri Tudor can be used to assess
against both ISO/IEC 20000 and ITIL. The TIPA
PAM which is used to assess against ITIL continues
to be updated to assess against the latest versions of
ITIL. It should be noted that the TIPA PAM which
was developed to assess against ISO/IEC 20000 is
no longer being updated but is being further
developed in JTC1 ISO/IEC SC7 under the title
ISO/IEC 15504-8.
In developing the TIPA PAM for ITIL and the
TIPA PAM for ISO/IEC 20000, the TIPA
transformation process was used. The TIPA
transformation process was developed to address the
fact that while ISO/IEC 15504 provides a detailed
description of the process assessment approach and
provides an exemplar PAM in ISO/IEC 15504-5,
there is no guidance to support the transformation
from the input (domain requirements) to the output
(process model). This gap was identified by Barafort
et al. (Barafort et al., 2008) and the TIPA
transformation process was developed as a means to
develop ISO/IEC 15504-2 compliant PAMs using
goal driven requirement engineering techniques.
Due to the similarities between ISO/IEC 20000
and IEC 80001-1., it is clear that using the TIPA
transformation process; a process assessment model
could be built to assess medical IT networks against
IEC 80001-1
AssessingAgainstIEC80001-1
307