ISO/IEC/IEEE 23026:2023
(Main)Systems and software engineering — Engineering and management of websites for systems, software and services information
Systems and software engineering — Engineering and management of websites for systems, software and services information
This document defines system engineering and management requirements for the life cycle of websites, including strategy, design, engineering, testing and validation, and management and sustainment for intranet and extranet environments. This document applies to those using web technology to present information and communications technology (ICT) information, such as information for users of systems and services, plans and reports for systems and software engineering projects, and documentation of policies, plans, and procedures for IT service management. This document provides requirements for website owners and website providers, managers responsible for establishing guidelines for website development and operations, website engineers, designers, developers, and operations and maintenance staff, who can be external or internal to the website owner's organization. It applies to websites for public access and for limited access, such as for users, customers, and subscribers seeking information on IT systems, products and services. The requirements and recommendations in this document address the following aspects of usability of informational websites and ease of maintenance of managed website operations: a) locating relevant and timely information; b) applying information security management; c) facilitating accessibility and ease of use; d) providing for consistent and efficient development and maintenance practices. This document is not particularly applicable to websites used primarily for marketing or sales, to deliver instructional material (tutorials), or to provide graphical user interfaces (GUI) for business or consumer transactional application processing. However, this document can provide useful insights for managing such sites. This document does not address vendor and product considerations for website engineering and management. This document does not include specifications for application development tools, programming and scripting languages used for websites, metadata tags, or protocols for network communications. It does not address tools or systems used for management or storage of information content (data, documents) that can be presented on websites. This document does not address the design and architecture of software and systems supporting the Internet.
Ingénierie des systèmes et du logiciel — Ingénierie et gestion de sites web pour les systèmes, logiciels et services d'information
General Information
Relations
Standards Content (Sample)
INTERNATIONAL ISO/
STANDARD IEC/IEEE
First edition
2023-07
Systems and software engineering —
Engineering and management of
websites for systems, software and
services information
Ingénierie des systèmes et du logiciel — Ingénierie et gestion de sites
web pour les systèmes, logiciels et services d'information
Reference number
© ISO/IEC 2023
© IEEE 2023
© ISO/IEC 2023
© IEEE 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO or IEEE at the
respective address below or ISO’s member body in the country of the requester.
ISO copyright office Institute of Electrical and Electronics Engineers, Inc
CP 401 • Ch. de Blandonnet 8 3 Park Avenue, New York
CH-1214 Vernier, Geneva NY 10016-5997, USA
Phone: +41 22 749 01 11
Fax: +41 22 749 09 47
Email: copyright@iso.org Email: stds.ipr@ieee.org
Website: www.iso.org Website: www.ieee.org
Published in Switzerland
ii
© ISO/IEC 2023 – All rights reserved
© IEEE 2023 – All rights reserved
Contents Page
Foreword . vi
Introduction .viii
1 Scope . 1
2 Normative references . 1
3 Terms, definitions and abbreviated terms . 1
3.1 Terms and definitions . 1
3.2 Abbreviated terms . 5
4 Planning websites .6
4.1 Defining the purpose, users, and context of the website . 6
4.2 Establishing the informational website design and sustainment strategies . 7
4.2.1 General . 7
4.2.2 Website plan . 8
4.2.3 Website maintenance planning . 8
4.2.4 Website maintenance procedures . 9
4.3 Establishing the privacy and security strategy . 9
5 Designing and engineering websites .11
5.1 Design goals and website requirements . 11
5.2 Design principles .12
5.3 Choice of devices and media .12
5.4 Engineering for website security . 13
5.4.1 General .13
5.4.2 Website operational security procedures . 14
5.4.3 Website security reviews and audits . 15
5.5 Engineering for performance, scalability, and sustainability . 15
5.5.1 General .15
5.5.2 Selecting technical formats and standards to use for the website . . 16
5.5.3 Bandwidth efficiencies . 18
5.5.4 Document type declaration . 18
5.5.5 Description metatag . 19
5.5.6 XML considerations . 19
5.5.7 Image formats, image compression and video . 19
5.5.8 Server technology independence . 19
5.5.9 Designing for performance and scale . 20
6 Testing and evaluating websites . .21
6.1 Test planning . 21
6.2 Testing for usability . 21
6.2.1 General . 21
6.2.2 Validation of markup language and accessibility conformance .22
6.2.3 Operational validation . 22
6.2.4 Active links . 23
6.2.5 Dead links . 23
6.3 Testing for performance and resilience . 23
6.4 Testing for security . 24
7 Managing the website .24
7.1 Website roles and responsibilities . 24
7.2 Control of information content . 25
7.3 Managing security . 25
8 Sustaining the website .26
8.1 General . 26
8.2 Continuous delivery, content validation, and versioning. 26
8.3 Handling disconnects . 27
iii
© ISO/IEC 2023 – All rights reserved
© IEEE 2023 – All rights reserved
8.3.1 General . 27
8.3.2 Site or page relocation . 27
8.3.3 Redirection . 27
8.4 Security monitoring and measurement .28
8.5 Backups and archiving .28
8.5.1 Backups .28
8.5.2 Archiving . 29
9 Website features.30
9.1 Web page components .30
9.1.1 General .30
9.1.2 Website home page . . 31
9.1.3 Identifying the website and its owner . 31
9.1.4 Page title, header, and headings . 32
9.2 Site navigation . 32
9.2.1 General . 32
9.2.2 Links . 33
9.2.3 Offsite warning .34
9.2.4 Usage tracking and cookies .34
9.2.5 Frames . 35
9.3 Search and indexing . 35
9.3.1 General . 35
9.3.2 Search filtering .
...
Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.