<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Survey Protocol: Traceability during Development of Systems with Safety and Security Implications - Importance, Tools, and Challenges</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Vikash Katta</string-name>
          <email>vikash.katta@hrp.no</email>
          <xref ref-type="aff" rid="aff0">0</xref>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Tor Stålhane</string-name>
          <xref ref-type="aff" rid="aff1">1</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Institute for Energy Technology</institution>
          ,
          <addr-line>Halden</addr-line>
          ,
          <country country="NO">Norway</country>
        </aff>
        <aff id="aff1">
          <label>1</label>
          <institution>Norwegian University of Science and Technology</institution>
          ,
          <addr-line>Trondheim</addr-line>
          ,
          <country country="NO">Norway</country>
        </aff>
      </contrib-group>
      <abstract>
        <p>[Context and motivation] Although traceability plays an important role in system development projects, it is often neglected or poorly performed. Stakeholders involved in system development projects have different use of traces, and therefore the required traceability and its implementation depends upon the stakeholders involved in the projects. [Problem/question] Traditional ways of implementing traceability using traceability matrices or office tools such Excel sheets are not effective, especially while developing large and complex systems. There exists several requirements management tools, but they have to be extended or tailored to achieve the traceability needed of the stakeholders, requiring human effort and resources. Little is known or has been reported on traceability usage, practises and challenges in the development of systems with safety and security implications. Such a knowledge and understanding is needed to develop cost-effective traceability solutions as well as to highlight the importance of traceability [Principal ideas] This paper presents a proposal for performing a survey - online questionnaire - with the participants of REFSQ'14 to collect and report their experiences on traceability. [Contribution] Since, REFSQ'14 participants have a diverse background, i.e. experiences with different roles and responsibilities in projects from industry, the survey will be a unique opportunity to collect and report data on traceability covering several stakeholder viewpoints.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>-</title>
      <p>1.1</p>
    </sec>
    <sec id="sec-2">
      <title>Problem definition</title>
      <p>Traceability is vital and should be implemented during development projects,
especially for the development of systems with safety and other quality (e.g. security)
implications where standards or regulatory bodies require implementation of
traceability. However, when it comes to industrial practices, traceability is often neglected
or not implemented in a satisfactory manner. In our experiences from both safety and
non-safety industries, traceability matrices and Office tools (e.g. Excel sheets) are still
widely used for implementing traceability. Such approaches to traceability practices
are not viable, especially not for projects on developing large and complex systems.</p>
      <p>
        There are several challenges related to implementing traceability including lack of
tools that are suitable for project needs and stakeholder needs, and additional cost and
effort needed to maintain traceability [
        <xref ref-type="bibr" rid="ref1 ref2 ref3">1,2,3</xref>
        ]. Stakeholders involved in system
development projects have different traceability needs (i.e. different use of traces), and the
required traceability and its implementation therefore depend on the stakeholders
involved in the projects. For example, in projects on development of safety systems, a
regulator will use traces to verify compliance of requirements from
regulations/standards during system development, whereas a system designer will use traces
to verify whether the system design caters to all the safety requirements. As stated in
[
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]:
      </p>
      <p>“Currently, there is poor understanding of what people need traceability for and how people
actually use traceability over time. Further, traceability will not be created or maintained effectively if
the required tasks to do so are themselves not understood and supported. Currently, there is poor
understanding of what individuals and teams need to do to create and maintain traces. This distinction
between satisfying the requirements of those stakeholders who establish traceability and those
stakeholders who use traceability lies at the heart of many traceability problems, for these roles are not
necessarily overlapping.”</p>
      <p>
        Based on our experiences, this problem is also evident in development projects of
safety systems or systems with security implications. There is a lack of traceability
tools that can be used to address the needs of the stakeholders involved in such
development projects [
        <xref ref-type="bibr" rid="ref4 ref5 ref6">4,5,6</xref>
        ]. In this regard, the RE community need to report on the
research and experiences on the importance as well as the challenges of traceability.
1.2
      </p>
    </sec>
    <sec id="sec-3">
      <title>Context of the survey</title>
      <p>
        The planned survey is a part of a PhD project on improving traceability practices
during the development of safety critical systems. We have performed a narrative
literature study and proposed solutions – mostly focusing on the air traffic
management domain [
        <xref ref-type="bibr" rid="ref4 ref5 ref6">4,5,6</xref>
        ]. So far, our proposed solutions aim to provide traceability
support for certain tasks performed by the stakeholders, especially the safety analyst and
the safety case author, participating in the development of safety critical systems.
However, we need to broaden the scope of the profile of stakeholders and generalize
the traceability needs and challenges of the stakeholders involved in other roles,
activities, projects and domains.
      </p>
    </sec>
    <sec id="sec-4">
      <title>Goal</title>
      <p>Goal, Research Questions and Research Design
The primary goal of the survey is to investigate the purpose and uses of traceability
during system development projects, identify the state of practice, and understand the
challenges on implementing traceability during development projects.</p>
      <p>The survey is mainly intended for the REFSQ participants who have experiences in
projects on development of systems with safety and security implications. Since
REFSQ attracts both practitioners and researchers in the area of requirements
engineering and other system engineering activities, the variation of the profile of the
participants – their roles and tasks in projects - will be large. Therefore, the survey
will gather information related to several stakeholders and their traceability needs.
2.2</p>
    </sec>
    <sec id="sec-5">
      <title>Research questions</title>
      <p>The survey addresses the following research questions:
1. What is the purpose of traceability in projects developing safety critical systems
and systems with security implications? This question looks into the purposes –
tasks, activities etc. – for which stakeholders use traces.
2. What are the practises of performing traceability? This question looks into
identifying the techniques and tools being used by the stakeholders and their
organisations for implementing traceability in their projects.
3. What are the challenges of implementing traceability? This question looks into the
challenges the stakeholders face while implementing traceability.
2.3</p>
    </sec>
    <sec id="sec-6">
      <title>Research design and method</title>
      <p>We follow a non-experimental strategy, using the survey as a method to gather data
from a large population. The purpose of the survey is both exploratory and descriptive
on traceability uses and challenges.</p>
    </sec>
    <sec id="sec-7">
      <title>Subjects</title>
      <p>The survey will be open to the participants of the REFSQ’14 conference. We aim
for the participants who have experiences in creating and using traceability
information during activities of a development project. Experiences in development of
safety critical systems or systems with security implications will be beneficial. We
consider participants with experiences in RE tasks, system designing, testing, V&amp;V,
quality assessment, qualification, project management.</p>
    </sec>
    <sec id="sec-8">
      <title>Recruitment and Incentives</title>
      <p>We expect the REFSQ organisers to inform the conference participants about the
survey. If required, we will provide organisers with information (slides etc.) on the
importance of the topic covered by the survey, which could be used by the organisers
to encourage participation.</p>
      <p>If allowed, we will have a poster promoting the survey to the conference
participants. We plan to offer four Amazon gift cards, each worth 50 euros, which can be
used by four participants (selected by lottery) to purchase books of his or her choice.</p>
    </sec>
    <sec id="sec-9">
      <title>Consent of participation</title>
      <p>Filling in the online questionnaire will be treated as participant’s consent to
participate. Participants will be made of this before filling up the questionnaire.</p>
    </sec>
    <sec id="sec-10">
      <title>Confidentiality</title>
      <p>The data collected through the survey will be kept confidential and will be stored
securely in our company’s internal server, and will be deleted after completion of the
survey related activities. The result of the survey will be anonymised.
Implementation
1. The survey is available for the participants at the URL</p>
      <p>http:// refsqsurvey.limequery.com/index.php/726296/lang-en
2. The questionnaire has been organized into the following parts:
(a) Introduction: consent of participation, confidentiality and guidelines for
completing the questionnaire.
(b) Questions on the participants’ work experiences – their roles and
responsibilities in relevant projects.
(c) Questions on whether they have created or used traceability during
developments, and if so, for which development activities (e.g. change impact analysis,
V&amp;V, and quality assessments) they have used traces.
(d) Questions on what type of traceability techniques and tools the participants
have used.
(e) Questions on challenges the participants have experienced, e.g. lack of
understanding, tools, and cost, while implementing traceability in the projects.
3. The questions has multiple choices, rating scales, and open-ended formats.
4. It is expected that the participant will be able to complete the survey within 15
minutes.
5. The survey was pre-tested with two colleagues with relevant work experiences.
6. The survey will be conducted during REFSQ’14.</p>
    </sec>
    <sec id="sec-11">
      <title>Data analysis</title>
      <p>Depending upon the format of the question, we will use analysis methods such as
statistical tests for the multiple choice and rating scales and affinity diagrams and
content analysis for the open ended questions.</p>
    </sec>
    <sec id="sec-12">
      <title>Equipment</title>
      <p>A secure and reliable internet connection during the conference should be available
for the participants.
2.4</p>
    </sec>
    <sec id="sec-13">
      <title>Dissemination</title>
      <p>A report with the data collected from the questionnaire will be sent to all the
participants one month after the conference. The results of the survey will be made
available by the end of May, 2014 on the REFSQ’14 homepage, and a description of the
results might be published in the workshop proceedings of REFSQ’15.
2.5</p>
    </sec>
    <sec id="sec-14">
      <title>Post REFSQ’14</title>
      <p>Post REFSQ, using our national and international industrial networks, the
questionnaire would be forwarded to stakeholders who might not be covered by REFSQ,
e.g. regulators. We have planned a case study involving interviews with experts (e.g.
developers, safety and security analysts) from a safety critical domain, which will
concretise and detail some of the findings from the survey. In this way, survey will
contribute to our on-going research on improving traceability approaches to safety
critical systems development.
2.6</p>
    </sec>
    <sec id="sec-15">
      <title>Threats to validity and reliability</title>
      <p>Low response and completion rate: Low response rate and low questionnaire
completion rate are typical concerns of surveys. Some of the participants might require more
than 15 minutes to completing the survey. Moreover, the sampling frame (i.e.
participants from REFSQ) might not represent all types of stakeholders involved in
development projects. We will mitigate these by promoting the survey during the
conference and by keeping the survey open for participation also after the conference. We
will also use other venues and our industrial networks.</p>
      <p>Construct validity: To mitigate the threats related to construct validity, the questions
will be carefully drafted based on our experiences as well as our theoretical
knowledge. The survey was pre-tested for completeness and ambiguity. In order to
avoid participants’ misunderstanding the questions we will supply a glossary of terms.
External validity: Apart from performing the survey with REFSQ participants, the
survey will be performed with other types of participants, especially with the contacts
in our national and international industrial networks. This will give us a better base
for generalizing the results of the survey at REFSQ.</p>
      <p>Internal validity: no cause – effect relationships are implied
Reliability and consistency: this has two components – will the participants give their
true opinion and will another survey give the same result? The answer to this question
will, at least partly, depend on how the questions in the survey are interpreted by the
respondents. When you ask for somebody’s opinion based on practical experiences
there are at least four possible bases for the answers. They can be based on the
respondent’s general experience, the worst case, the most successful case or the latest
case. In addition, we know that the respondents’ answers will vary with the degree of
concreteness of the questions. Concrete questions will bring out the respondents’
opinion while general questions will get an answer that is considered “correct” in the
respondent’s environment. Using ratings scale (Cronbach’s alpha estimate) and
specific questions referring to their opinions or experiences we will address some of the
reliability issues.
2.7</p>
      <sec id="sec-15-1">
        <title>A preliminary timetable of the survey is provided below.</title>
      </sec>
      <sec id="sec-15-2">
        <title>Activities</title>
        <p>Preparation of questionnaire and publishing online
Promotion and recruitment
Perform survey
Data analysis
Preparation of report
Dissemination – to participants, REFSQ
Post REFSQ activities</p>
      </sec>
    </sec>
    <sec id="sec-16">
      <title>Acknowledgements</title>
      <p>This work is a part of PhD projects carried out in collaboration between the
Institute for Energy Technology/Halden Reactor Project and Norwegian University of
Science and Technology. We thank our colleagues, Christian Raspotnig and André
Hauge, at the Institute for Energy Technology for pre-testing the questionnaire.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          1.
          <string-name>
            <surname>Gotel</surname>
            ,
            <given-names>O.</given-names>
          </string-name>
          , et al.:
          <source>The Grand Challenge of Traceability (v1.0)</source>
          .
          <source>Software and Systems Traceability</source>
          , pp.
          <fpage>343</fpage>
          -
          <lpage>409</lpage>
          , Springer (
          <year>2012</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          2.
          <string-name>
            <surname>Winkler</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Pilgrim</surname>
            ,
            <given-names>J. V.</given-names>
          </string-name>
          :
          <article-title>A Survey of Traceability in Requirements Engineering</article-title>
          and
          <string-name>
            <surname>Model-Driven Development</surname>
          </string-name>
          .
          <source>Software and Systems Modeling</source>
          , vol.
          <volume>9</volume>
          (
          <issue>4</issue>
          ), pp.
          <fpage>529</fpage>
          -
          <lpage>565</lpage>
          , Springer Berlin: (
          <year>2010</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          3.
          <string-name>
            <surname>Knethen</surname>
            <given-names>A. V.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Paech</surname>
            ,
            <given-names>B.</given-names>
          </string-name>
          :
          <source>A Survey on Tracing Approaches in Practice and Research. Research Report, IESE-Report</source>
          ,
          <volume>095</volume>
          .01/E,
          <string-name>
            <surname>Fraunhofer</surname>
            <given-names>IESE</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Kaiserslautern</surname>
          </string-name>
          (
          <year>2002</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          4.
          <string-name>
            <surname>Katta</surname>
            ,
            <given-names>V.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Stålhane</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          :
          <article-title>Traceability of Safety Systems: Approach, Meta-Model and Tool Support</article-title>
          .
          <source>Technical report HWR-1053</source>
          ,
          <string-name>
            <given-names>OECD</given-names>
            <surname>Halden Reactor Project</surname>
          </string-name>
          (
          <year>2013</year>
          ), Available upon request.
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          5.
          <string-name>
            <surname>Katta</surname>
            ,
            <given-names>V.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Raspotnig</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Karpati</surname>
            ,
            <given-names>P.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Stålhane</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          :
          <article-title>Requirements Management in a Combined Process for Safety and Security Assessments</article-title>
          .
          <source>In: Proceedings 2013 International Conference on Availability, Reliability and Security</source>
          (
          <year>2013</year>
          )
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          6.
          <string-name>
            <surname>Katta</surname>
            ,
            <given-names>V.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Raspotnig</surname>
            ,
            <given-names>C.</given-names>
          </string-name>
          ,
          <string-name>
            <surname>Stålhane</surname>
            ,
            <given-names>T.</given-names>
          </string-name>
          :
          <article-title>Presenting A Traceability Based Approach For Safety Argumentation</article-title>
          .
          <source>In: European Safety and Reliability conference</source>
          (
          <year>2013</year>
          )
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>