本推荐规程描述了一组有用的质量注意事项，可在软件采集过程中的一个或多个步骤中选择和应用。无论软件的大小、复杂程度或关键程度如何，建议的做法都可以应用于在任何计算机系统上运行的软件。软件供应链可能包括商用现货（COTS）、定制或自由开源软件（FOSS）的集成。使用本推荐做法的每个组织或个人都需要确定组织中需要包含的具体质量和活动a？公司的收购过程。安全性将作为收购过程中考虑的质量属性。

This recommended practice describes a set of useful quality considerations that can be selected and applied during one or more steps in a software acquisition process. The recommended practices can be applied to software that runs on any computer system regardless of the size, complexity, or criticality of the software. The software supply chain may include integration of commercial-off-the-shelf (COTS), custom, or free and open source software (FOSS). Each organization or individual using this recommended practice will need to identify the specific quality and activities that need to be included within the organization's acquisition process. Security will be included as a quality attribute considered during the acquisition.