{"id":876,"date":"2026-05-27T18:10:39","date_gmt":"2026-05-27T18:10:39","guid":{"rendered":"https:\/\/i2sc.es\/?p=876"},"modified":"2026-05-27T18:37:32","modified_gmt":"2026-05-27T18:37:32","slug":"certificaciones-iso-iec-para-la-calidad-del-software-de-ia","status":"publish","type":"post","link":"https:\/\/i2sc.es\/en\/blog\/certificaciones-iso-iec-para-la-calidad-del-software-de-ia\/","title":{"rendered":"ISO\/IEC certifications for AI software quality"},"content":{"rendered":"<p class=\"translation-block\">As we pointed out, <a href=\"https:\/\/i2sc.es\/en\/blog\/una-ia-funcional-y-de-calidad-como-base-para-una-ia-etica-y-legal\/\" data-type=\"post\" data-id=\"791\" target=\"_self\">a functional, high-quality AI is the essential foundation for an ethical and legal AI<\/a>. In this post, we summarise the two main standards for creating, evaluating and certifying both the software processes for developing AI systems (<a href=\"https:\/\/www.iso.org\/es\/contents\/data\/standard\/08\/11\/81118.html\" target=\"_self\"><strong>ISO\/IEC 5338<\/strong><\/a>) and the AI software product itself (<a href=\"https:\/\/iso25000.com\/index.php\/normas-iso-25000\/iso-25059\" target=\"_self\"><strong>ISO\/IEC 25029<\/strong><\/a>).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Artificial Intelligence Engineering<\/strong><\/h3>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\">In the 2010s, the development of AI systems was already gaining momentum, particularly those based on machine learning\/deep learning (ML\/DL) models, which required engineering solutions to ensure the quality of AI software in production and its deployment in industry, highlighting the need for <strong><a href=\"https:\/\/www.sei.cmu.edu\/our-work\/artificial-intelligence-engineering\/\" data-type=\"link\" data-id=\"https:\/\/www.sei.cmu.edu\/our-work\/artificial-intelligence-engineering\/\" target=\"_self\">AI Engineering<\/a><\/strong>.<\/p>\n\n\n\n<p class=\"translation-block\">In fact, since the early 2000s, various proposals have been put forward <a href=\"https:\/\/www.amazon.es\/Gobierno-Gestin-Calidad-Inteligencia-Artificial\/dp\/B0DK8CVM61\/\" data-type=\"link\" data-id=\"https:\/\/www.amazon.es\/Gobierno-Gestin-Calidad-Inteligencia-Artificial\/dp\/B0DK8CVM61\/\" target=\"_self\">life cycle models for AI<\/a> (CRISP-DM, CRISP-ML(Q), TDSP, ADLC, etc.) as well as adaptations of agile and DevOps methods for AI and MLOps.<\/p>\n\n\n\n<p class=\"translation-block\">More recently, this field has undergone rapid transformation with the incorporation of AI itself to develop software, using methods such as <em>Vibe Engineering<\/em> or SDD (<em>Spec Driven Development<\/em>), as well as to specify, develop and test more quickly and automatically; or even with the incorporation of agents in the creation and deployment of software.<\/p>\n\n\n\n<p>In any case, as reality invariably confirms, even as technology advances, the principles remain valid; it is therefore essential to have a set of appropriate processes in place for software development and evolution.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Quality of AI software processes <\/strong><\/h3>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\">The ISO\/IEC 5338 standard defines a total of 33 processes, which amend those in the ISO\/IEC 12207 standard and introduce some new ones. Based on the model <a href=\"https:\/\/www.iso33000.es\/index.php\/noticias\/26-aenor-publica-el-modelo-de-madurez-de-ingenieria-del-software-version-2-0-basado-en-las-normas-iso-iec-33000-e-iso-iec-12207-2017\" data-type=\"link\" data-id=\"https:\/\/www.iso33000.es\/index.php\/noticias\/26-aenor-publica-el-modelo-de-madurez-de-ingenieria-del-software-version-2-0-basado-en-las-normas-iso-iec-33000-e-iso-iec-12207-2017\" target=\"_self\">MMIS<\/a> and the previous standard, the <a href=\"https:\/\/i2sc.es\/en\/recursos\/an-artificial-intelligence-maturity-assessment-framework-based-on-international-standards\/\" target=\"_self\">MMSIA<\/a> model has been defined, which is a maturity model for Artificial Intelligence software processes in which the following processes are defined:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"683\" src=\"https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/MMSIA_processes.png\" alt=\"\" class=\"wp-image-879\" srcset=\"https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/MMSIA_processes.png 1264w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/MMSIA_processes-300x200.png 300w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/MMSIA_processes-1024x682.png 1024w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/MMSIA_processes-768x512.png 768w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/MMSIA_processes-18x12.png 18w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"translation-block\">With this model, companies that develop AI software can assess the quality of their processes and gradually improve them, as well as obtain certifications based on the <a href=\"https:\/\/www.iso33000.es\/index.php\/organizaciones-certificadas\" target=\"_self\">ISO\/IEC 33000<\/a>, as many organisations with \u201ctraditional\u201d software already have.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Quality of the AI software product<\/h3>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\">Furthermore, it is important to ensure the quality of the AI software itself (as a product). To this end, based on the ISO\/IEC 25000 family of standards, the standard <a href=\"https:\/\/www.iso.org\/standard\/80655.html\" target=\"_self\">ISO\/IEC 25059<\/a> has been developed, which sets out the Product Quality characteristics that any AI system must meet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"737\" height=\"451\" src=\"https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/iso-25059_processes.png\" alt=\"\" class=\"wp-image-891\" srcset=\"https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/iso-25059_processes.png 739w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/iso-25059_processes-300x183.png 300w, https:\/\/i2sc.es\/wp-content\/uploads\/2026\/05\/iso-25059_processes-18x12.png 18w\" sizes=\"auto, (max-width: 737px) 100vw, 737px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p class=\"translation-block\">With regard to the ISO\/IEC 25010 standard, the definitions have been amended to bring them into line with AI systems, and changes have been made to several sub-characteristics, such as <strong>Interaction Capability<\/strong>, <strong>Reliability, Safety<\/strong>, and <strong>Functional Suitability<\/strong>. By using this standard, and through assessment by an accredited laboratory (<a href=\"https:\/\/aqclab.es\/index.php\/en\/\" data-type=\"link\" data-id=\"https:\/\/aqclab.es\/\" target=\"_self\">AQCLab<\/a> is the only one in Spain authorised to do so), AI software producers can <a href=\"https:\/\/iso25000.com\/index.php\/en\/certified-products\" data-type=\"link\" data-id=\"https:\/\/iso25000.com\/index.php\/productos-certificados\" target=\"_self\">certify their products<\/a>, as has been done for years with \u201ctraditional\u201d software products.<\/p>\n\n\n\n<p class=\"translation-block\">Obviously, if the AI software uses a machine learning system, then we will also need to assess (and eventually certify) the <a href=\"https:\/\/i2sc.es\/en\/blog\/nueva-certificacion-iso-iec-5259-para-la-calidad-de-los-datos-de-la-ia\/\" data-type=\"post\" data-id=\"840\" target=\"_self\">quality of the data<\/a> used for its training, validation and testing.<\/p>","protected":false},"excerpt":{"rendered":"<p>Como ya se\u00f1alamos, una IA funcional y de calidad es la base esencial para una IA \u00e9tica y legal. En este post resumimos los dos principales est\u00e1ndares para crear, evaluar y certificar tanto los procesos software para desarrollar sistemas de IA (ISO\/IEC 5338) como para el propio producto software de IA (ISO\/IEC 25029). Ingenier\u00eda de [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":882,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-876","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts\/876","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/comments?post=876"}],"version-history":[{"count":5,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts\/876\/revisions"}],"predecessor-version":[{"id":894,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/posts\/876\/revisions\/894"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/media\/882"}],"wp:attachment":[{"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/media?parent=876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/categories?post=876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i2sc.es\/en\/wp-json\/wp\/v2\/tags?post=876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}