BS PAS 754:2014 is a

British Standards Institution The British Standards Institution (BSI) is the Standards organization, national standards body of the United Kingdom. BSI produces technical standards on a wide range of products and services and also supplies standards certification services ...

(BSI) software

Publicly Available Specification A Publicly Available Specification or PAS is a standardization document that closely resembles a formal standard in structure and format but which has a different development model. The objective of a Publicly Available Specification is to speed up ...

, published in May 2014. BS PAS 754:2014 was withdrawn following the publication of BS 10754-1:2018 in February 2018. The PAS defines the overall principles for effective software trustworthiness, and includes technical, physical, cultural and behavioral measures alongside effective leadership and governance. It also identifies the necessary tools, techniques and processes and addresses safety, reliability, availability, security and resilience issues.

Structure of the standard

The official title of the standard is "Software Trustworthiness – Governance and management – Specification". PAS 754:2014 has seven main clauses, plus three annexes, which cover: :0. Introduction :1. Scope :2. Normative References :3. Terms, definitions and acronyms :4. Approach :5. Concepts :6. Principles :Annex A. System Lifecycle :Annex B. Techniques :Bibliography

Development

The development of PAS754 has been led by the

Trustworthy Software Initiative The Trustworthy Software Foundation (TSFdn) is a UK not-for-profit organisation, with stated aim of improving software. History TSFdn evolved from a number of previous activities: *A study by the Cabinet Office, Central Sponsor for Information ...

, a UK government sponsored Public Good activity aimed at Making Software Better. The following organizations were involved in the development of this specification: Atkins Group; BIS; CPNI; Certification Europe;

De Montfort University De Montfort University Leicester (DMU) is a public university in the city of Leicester, England. It was established in accordance with the Further and Higher Education Act 1992, Further and Higher Education Act in 1992 as a degree awarding body ...

; Group 5 Training;

IET __NOTOC__ IET can refer to: Organizations * Institute of Educational Technology, part of the Open University * Institution of Engineering and Technology, a UK-based professional engineering institution ** Institute of Engineers and Technicians, wh ...

;

Microsoft Microsoft Corporation is an American multinational corporation and technology company, technology conglomerate headquartered in Redmond, Washington. Founded in 1975, the company became influential in the History of personal computers#The ear ...

(UK);

MISRA Misra or Mishra may refer to: * Motor Industry Software Reliability Association * MISRA C, a software development standard for the C programming language * Misra', half of a bayt in Arabic, Persian, Turkic and Urdu poetry * Mishra or Misra, an ...

;

Nexor Nexor Limited is a privately held company based in Nottingham, providing products and services to safeguard government, defence and critical national infrastructure computer systems. It was originally known as X-Tel Services Limited. History N ...

;

Oxford Brookes University Oxford Brookes University (OBU; formerly known as Oxford Polytechnic) is a public university, public university in Oxford, England. It is a new university, having received university status through the Further and Higher Education Act 1992. Th ...

;

QinetiQ QinetiQ ( as in '' kinetic'') is a British defence technology company headquartered in Farnborough, Hampshire. It operates primarily in the defence, security and critical national infrastructure markets and run testing and evaluation capabili ...

;

TechUK The United Kingdom has a diverse cyber security community, interconnected in a complex network. Public sector bodies Legislative According to a parliamentary committee the UK government is not doing enough to protect the nation against cyber ...

and

University of Warwick The University of Warwick ( ; abbreviated as ''Warw.'' in post-nominal letters) is a public research university on the outskirts of Coventry between the West Midlands and Warwickshire, England. The university was founded in 1965 as part of ...

References

British Standards Information assurance standards Information technology in the United Kingdom {{Software-eng-stub