Quality Management System for GNUmed
Establish √, document, implement √ and maintain √ an effective quality management system (QMS)
a) √ Quality Policy and Quality Objectives: see AboutGNUmed
b) Quality Manual
c) documented procedures
d) √ documents needed by the org to ensure the effective planning, operation and control
of the processes
f) any other docs specified by national or regional regulations
and documents that define product specifications including the complete manufacturing process and, if applicable, installation and servicing.
Processes needed for the QMS
Within the limits of the project's resources,
| Quality objective
| Project and software capability information are kept clear, accurate and up to date
|| After each phase of testing, the information on the software's capability is updated and (optionally) actively communicated. Any loss of capability is to be both updated and actively communicated
| Project and software operate in a way that best allow providers to serve patient care
|| design derived from list discussion
| Project and software operate with a minimum of downtime, data loss, inappropriate data alteration or access, or errors
|| via design and educated execution
| Project and software operate in a way that promotes community participation to further improve the software
|| via design, information, human interaction and systems
| Project and software downtime, data loss, inappropriate data alteration or access, and errors are, where manageable, avoided by design
|| via best practices
| Project and software downtime, data loss, inappropriate data alteration or access, and errors are able to be detected, reported, made known to the user base, repaired, worked around, and resolved in a time and manner appropriate to the severity of the errors or their consequences
|| via design, information, human interaction and systems
Sequence, Interaction (and Application) of the Processes
- Prior to use of any version of the software, the potential marketers, distributors or directly downloading users will take account of information that includes, but need not be limited to, the following to determine the suitability of registration with the project and/or use of the software for their intended purposes:
- Supplemental questions and answers about the capacities of the project, or released versions of software, or versions under development, will be shared via the developer email list.
- Change requirements as to information on the project or software capacity will be tracked in the email of doc team members until incorporated online at the earliest opportunity.
- Revocation or other loss or diminution of software capacity in a new or updated release will be actively communicated via the "announce" mailing list.
- Optimal project and software operation will be identified through discussion on the developer list. Final decisions will made by project members holding decision-making and control responsibilities.
- Change requirements for project management will be tracked in the email of doc team members until incorporated at the earliest opportunity on the wiki ToDo.
- Change requirements for the software will be identified on the wiki RoadMap.
- New or materiel modified capacities in the project will be communicated on the developer list, and capacities to the software (per 2 above) via the "announce" mailing list.
- Errors or their consequences will normally be detected, reported, made known to the user base, repaired, worked around, and resolved in the following sequence
- will require observancy on the part of the testers and users
- will be assisted by the software's built-in exception handler and log files
- via the software's built-in exception handler, which will issue an email to the project bug email list, and/or
- a tester or user manually-generated email to the project bug email or developer email lists, and/or
- a bug report manually entered into the project's downstream bug tracker at Launchpad, and/or
- personal communication to one of the project team AND
- if the organization has been established as falling under regulatory requirements to provide a report of errors or consequences to specific regulatory bodies, and has been provided with the means to manageably issue such notices, then
- such report will be given, on the understanding that
- such report is to be regarded without prejudice to project and software disclaimers of warrantee and liability
- Making known to the user base
- issues posing limited inconvenience to users without threat to patient well-being may not be made known to the user base beyond the report originally filed
- issues posing considerable inconvenience to users will prompt a message on the developer list and/or an update to Known Issues
- issues judged clinically important, will – in addition to the above – be communicated via the "announce" mailing list
- Work arounds
- any identified work arounds and methods of correction of consequences will update Known Issues and, where judged clinically important, will be communicated via the "announce" mailing list
- this work around process will be repeated upon availability of significant new information pending a resolution of the problem
- root causes and factors contributing to errors will be looked for and, where possible, resolved
- progress will be posted to relevant entries at the Launchpad bug tracker, the Known issues page and the developer and/or "announce" email lists
- post-0.2.9 versions of the software, as at August 2008, possess by default ("on") the capacity to check for updates automatically
Planning, Operation and Control
: While an occasional Free / Libre and Open Source Software (FLOSS) project is commercially-owned, the present one is owned by its historical contributors under a relationship that is inconstant over time. Traditional business constructs including corporate entity, executive branches, departments, human resource managers, job descriptions, employer-employee relationships and reporting relationships are impractical and inapplicable. Moreover no contractual relationship exists either among the project owners, or between the project owners and those who would use the software.
In spite of the above, planning, operation and control by the community (developers, supporters and users) are achieved as follows:
- Planning of the quality processes was achieved in concert with the software development and the result first captured in October 2009 a posteriori
- Planning continues on an informal basis via the developer list
- Operation of the quality process
- New project members are pointed to the quality processes
- Detection and reporting systems operate continuously
- Making known to the user base has the capacity to operate continuously
- Work arounds and resolution operate discontinuously, but have the potential for continuous operation depending on growth in an international developer or remunerated software support base
- Redundancy in the system (list and individual email), separately-hosted wiki, software's built-in exception handler, bug report and RSS subscription options at Launchpad, and automatic update-checking, and a culture and practice of open communication and collaboration all help to quickly identify any lapse in the quality processes
- Control of the quality process
- Deviations from the agreed-to quality processes are dealt with first by education and redirection
- Constructive criticism of project (including quality) processes are dealt with as openly as possible
- Revision of quality processes is considered in an open, deliberative fashion
- Control is established and maintained primarily via a series of trusts developed over time
- Ultimate operational control is achieved through the management of access to alter the project's information and resources
Implementation, Evaluation and Monitoring
The actions needed to achieve the results have already been implemented and remain in place continuously.
Criteria for effective operation and control will include:
- stability (uptime) of the quality process subsystems
- statistics on bug handling, and
- community satisfaction, as evidenced through its communications.
Monitoring, measurement and analysis of these processes are achieved passively and auto-documented in the normal course of participation on the developer and other email lists and automatic bug notifications, and actively as a result of periodic checking of the auto-generated bug statistics at Launchpad.