本标准中的度量是通过检测和计算源代码中违反良好体系结构和编码实践的行为来计算的，这些行为可能会导致不可接受的操作风险或过高的成本。在源代码级别为这些措施制定标准很重要，因为它们在外包和系统开发合同中使用，没有国际标准可供参考。例如，管理软件产品质量的ISO/IEC 25000系列标准仅在源代码级别提供了一小部分度量。 更新这些措施的一个主要目标是将其适用范围扩展到嵌入式软件，这对于嵌入式设备和物联网的日益普及尤为重要。传统上在IT应用程序中实现的功能现在被转移到嵌入式芯片上。由于本文件规定的措施中包含的缺陷适用于所有形式的软件，因此本规范不单独处理嵌入式软件。

The measures in this standard were calculated from detecting and counting violations of good architectural and coding practices in the source code that could result in unacceptable operational risks or excessive costs. Establishing standards for these measures at the source code level is important because they have been used in outsourcing and system development contracts without having international standards to reference. For instance, the ISO/IEC 25000 series of standards that govern software product quality provide only a small set of measures at the source code level. A primary objective of updating these measures was to extend their applicability to embedded software, which is especially important for the growing implementation of embedded devices and the Internet of Things. Functionality that has traditionally been implemented in IT applications is now being moved to embedded chips. Since the weaknesses included in the measures specified in this document have been found to be applicable to all forms of software, embedded software is not treated separately in this specification.