The detailed operation content consolidates the established assessor guidance into the JEAuditFlow 6.8 workflow. English navigation and summaries follow the same chapter structure. Ratings, capability levels and closure conclusions remain assessor-owned.
评估闭环
ASPICE 的评估对象通常是项目。先定义项目中哪些过程需要达到何种能力等级,再将工作产品、执行记录、访谈和闭环信息组织为可复核的证据链。
01建立正式评估范围
在“ASPICE 评估”中创建项目,选择适用 PAM、目标 CL1 或 CL2,并只勾选客户或评估计划覆盖的过程。范围外过程保留为关联背景,不进入评级矩阵和正式报告。
02将评估活动计划化
在“计划和日程”维护过程实例、样本、评估师、访谈和里程碑。对于 CL2,应能说明绩效目标、过程计划、资源、监控调整和接口管理与 MAN.3 的关系。
03只依据可回溯的事实形成结论
每一个 BP / GP 候选都需要回到工作产品、执行记录或访谈定位。发现应描述客观事实、影响、所属过程和后续补证或关闭动作。
范围、能力与评级
过程维度回答“哪些过程被评估”,能力维度回答“这些过程达到什么能力”。能力等级由过程属性(PA)的评级组合决定,而不是由文件数量或单个平均分决定。
| 评级 | 达成度 | 评估含义 |
| N | 0% - 15% | 未达成:结果不存在,或内容不足以证明实践已执行。 |
| P | >15% - 50% | 部分达成:已实施部分结果,但不能支持稳定满足质量、进度或资源目标。 |
| L | >50% - 85% | 大部分达成:实践有显著实施证据,但仍存在影响目标实现的不足。 |
| F | >85% - 100% | 完全达成:没有与目标相关的显著风险,允许存在孤立的不完善点。 |
CL1:过程被执行关注 PA 1.1。BP 的实施、工作产品及结果应构成充分证据链。
CL2:过程被管理在 PA 1.1 的基础上,检查 PA 2.1 绩效管理与 PA 2.2 工作产品管理。
MAN.3 是 CL2 的骨架目标、计划、资源、监控调整和接口管理须能支持各过程的绩效管理。
SUP.1 与 SUP.8 支持 CL2质量保证、工作产品控制、标识、基线与一致性支撑 PA 2.2 的判断。
产品边界:AuditFlow 的本地引擎提供 CL1 / CL2 的候选结论。CL3 涉及组织标准过程、角色能力、资源和部署监控,需采用组织批准的外部评估方法;本地引擎不对 GP 3.x 作正式评级。
十个评估阶段
项目页左上方的顶部阶段导航遵循评估工作流。每个阶段都有可恢复的 URL;可在各阶段之间往返,但关闭前必须重新检查范围、证据充分性、人工复核和开放问题。
01项目概况
集中查看项目进度、证据解析、追溯覆盖、人工复核、开放弱项和 BP / PA / GP 矩阵。
操作:先确认正式范围和待评过程是否完整,再用看板识别证据、复核或弱项的阻塞项。
02计划评估
管理过程实例、计划卡片、评估活动、访谈安排和进度状态。
操作:为每个正式范围过程确定样本与评估活动;记录角色、日期、输入和预期输出,保留计划调整依据。
03范围与资料 / Scope
左侧选择正式过程域,在当前过程上下文中导入 DOCX、PPTX、XLSX/XLSM、PDF、CSV、JSON、HTML、Helix 或文本;右上角 Audit Master 可对已上传来源做四遍交叉过程分析。
操作:确认过程实例、资料主过程、Direct/Corroborating/Index-only、解析状态和定位信息。Audit Master 回流项始终是 Index-only AI 意见。
04逐条评审 / Grid View
左侧固定过程域,中间逐项审查 BP / GP,右侧持续显示当前指标的候选评级、证据链和 C/R/O/W/S/Q 记录。
操作:对每项指标记录直接事实、引用定位、访谈问题和发现;人工改定应写明与证据相符的理由。
05证据溯源 / Tree View
并排展示 Assessment Scope、Records & confirmed links 和 Evidence Inventory。
操作:确认 direct、corroborating 或 index-only 作用;确认关系不改变原始证据强度,也不能绕过评级护栏。
06记录合并
将多位评估师的记录收敛到 Consolidated 工作区并定稿。
操作:处理分歧、重复、冲突证据和未决问题;只把一致且可回溯的结论移入定稿记录。
07AI 评审
集中显示正式范围内全部 BP / GP 的 AI 初稿、证据充分性和人工改定状态;可导入 aspice-audit-master 导出的评审 JSON,在每个过程域下修改或确认。
操作:导入文件只更新未人工复核的候选,不覆盖已有人工结论;若候选与原始证据冲突,以评估师判断和直接证据为准。
08版本与基线
评估版本用于比较候选变化;受控基线冻结文件、条目、正式范围、责任、时间和变更原因。
操作:先确认原子条目,再创建 Draft;由 Independent Reviewer 完成独立复核,最后由 Lead Assessor 或 Configuration Manager 批准。
09关闭评估
运行证据、复核、记录、弱项和 Guideline 质量门并冻结正式结论。
操作:先完成 SUP.9 → SUP.10 → 工作产品更新 → 验证 → SUP.8 基线闭环,再关闭。
10报告
预览或生成 Word、PowerPoint、Excel 与评估计划输出。
操作:门禁未通过时报告标记 Draft;正式报告只展示正式范围和已人工复核结论。
范围内嵌 ASPICE Audit Master
进入项目的“范围与资料”,点击右上角小型 Audit Master 按钮。弹窗只列出当前项目已经上传的文件及 Helix 原子条目,评估师决定选哪些来源,并逐项确认 Direct、Corroborating 或 Index-only。
四遍分析Qualified flow、Agree & summarize、Divide & control 和 Trace consistency 同时执行;正式范围在本次分析中不可扩张。
受控传输启用在线 AI 时只发送所选摘要、定位、正式范围和现有候选,不发送原始文件 Blob。关闭开关则完全使用本地专业规则。
证据回流结果保存为 AI Review Opinion,并强制标记 Index-only;同时进入 AI 评审历史和独立参考版本。
人工门禁回流意见不会自动修改人工评分、建立虚假直接证据、批准基线、关闭问题或声明认证结论。
评定结果:BP + GP AI 初稿与人工改定
AI 预评估完成后自动进入“AI 评审”。该页沿用当前评估版本中的 BP / GP 数据,不复制结果,因此评分、证据链、人工复核、PA 聚合和版本记录保持一致。v7.4 还可导入 `auditflow-ai-review/v1` 文件,所有导入内容始终作为待审核候选。
01先看范围和阻塞
顶部摘要显示范围内 BP / GP 数量、人工复核进度、证据充分项和项目候选等级。项目等级受 PA 否决门禁约束,不由简单平均分决定。
02按过程和 PA 核对
结果按“过程 → PA 1.1 / PA 2.1 / PA 2.2 → BP / GP”分组。每行显示 AI 候选、置信度、Direct / Corroborating / Index-only 数量、主要缺口和当前人工评分。
03复核并留下改定依据
评分下拉用于快速改定,并立即标记为“人工改定”。需要完整复核时打开“核对详情”,核实标准意图、证据定位、四遍跨过程分析和关闭证据,再填写人工复核意见与 O/W/R。
04受控运行 Codex 参考评审
只有 Consolidated 已定稿记录会进入 Codex 上下文。模型只能返回正式范围内已知 BP / GP 候选;无证据不得编造事实,范围外过程只形成“关联观察·不评级”。每次运行保存独立版本且不覆盖人工结论。
评分边界:AI 初稿和 Codex 候选均不是正式评估结果。关联证据不能替代目标过程直接证据;F 必须由评估师依据多来源、代表性、受控且稳定闭环的直接证据确认。
MAN.3 / SUP.8 支持域专项子项目
该功能适用于原项目范围较大、但当前只需要核查 MAN.3 项目管理或 SUP.8 配置管理材料的场景。它把问题文件作为筛选入口,建立一个保留父项目上下文的轻量评估工作区;专项结果必须回到父项目完成正式证据核实和结论定稿。
专项边界:子项目只评估上传文件中实际出现的 Issue。它不补齐未出现的 BP/GP,不声明过程能力等级;Action Plan 或问题记录是问题佐证,不等于目标过程直接实施证据。
01从项目列表生成
在“审核总览”或“ASPICE 评估”项目列表找到父项目,点击图层图标“生成 MAN.3 / SUP.8 专项子项目”。选择过程和需要继承的证据后,创建并进入子项目证据页。父项目已有 MAN.3 / SUP.8 Action Plan 问题会自动带入。
02上传问题和支持材料
上传 DOCX、DOC、PDF、XLSX、CSV、JSON、HTML 或粘贴文本。系统按来源文件折叠展示,并把需求 ID、观察、段落和表格行拆为文档条目;逐条评审中可调整 SYS/SWE/MAN/SUP 分类及直接、佐证、仅索引角色。对旧版 DOC 或解析警告文件,必须打开原件核对页码与表格。
03识别文件中的实际 Issue
点击“识别问题并配对 BP/GP”。系统从 Issue 编号、过程域、严重度/状态、原始问题、ASPICE 审核说明、风险、行动和最小关闭证据中建立问题记录;选择 MAN.3/SUP.8 后,其他过程的问题被排除,不生成无来源评定项。
04核对 AI 初稿
打开“评定结果(BP + GP · AI 初稿,可复核改定)”。每一行对应一个来源 Issue,查看候选 BP/GP、AI 候选评分、问题来源定位、证据角色、风险、访谈问题和最小关闭证据。使用“核对详情”改定评分、理由、引用和 O/W/R,保存后才算人工复核。
05一键回写父项目
当所有专项评定项均已人工复核时,“一键回写原项目”才可用。回写会追加父项目草稿弱项和候选追溯;新增证据会复制并建立来源映射。父项目已有评分、人工复核状态和历史版本不会被候选结论覆盖。
06父项目完成正式 ASPICE 流程
回写后继续在父项目中核对目标过程直接证据、评估师记录、访谈、版本/基线、状态、批准和关闭有效性。专项子项目标记“已回写”只说明数据移交完成,不代表问题已关闭,也不代表 MAN.3/SUP.8 达成目标能力等级。
问题驱动评定的证据护栏
| 证据作用 | 可以证明什么 | 不能替代什么 |
| Direct | 目标过程内、可定位、直接证明活动执行及结果的受控工作产品或记录。 | 不能只用文件名、模板或问题清单证明完整实施。 |
| Corroborating | 上下游、MAN.3、SUP.1、SUP.8、SUP.9、SUP.10 的接口、一致性、配置、问题或变更佐证。 | 不能替代当前目标过程的直接实施证据。 |
| Index-only | 文档、对象或链接存在。 | 不能证明内容、执行结果、评审批准或关闭有效性。 |
证据与双向追溯
有效证据既要说明工作产品存在,也要说明相关过程已经实施并产生结果。对需求、设计、验证、问题与变更,应检查一致性和双向追溯是否持续成立。
Direct 直接证据
正式范围内目标过程的可定位事实,直接证明某项 BP 或 GP 已执行。例如受控评审记录、可复现的测试结果、已批准的基线或已执行的活动记录。
Corroborating 佐证
说明接口、依赖、一致性、配置、问题、变更或治理关系的相关信息。它提高可信度,但不能替代目标过程的直接实施证据。
Index-only 仅索引
仅证明文档、对象或链接存在。尚未检查内容、执行结果或定位时,应保持为索引,不应用它单独支持充分实施的结论。
定位性至少保留文件、表、章节、对象 ID、版本或记录时间等能让评估师回到原始事实的信息。
一致性检查输入、工作产品、评审结果和后续使用对象是否匹配;发现矛盾应形成观察、弱项或补证请求。
双向追溯从需求到设计、实现和验证结果,也从结果或问题回到需求和受影响工作产品,均应可验证。
变更影响工作产品变化应能关联变更请求、影响分析、授权、实施、验证和关闭状态。
跨过程闭环
对正式范围内过程的直接证据评级,不应被关联过程取代;但评估师需要利用下列过程检查管理、质量、配置、问题与变更闭环是否可信。
MAN.3项目管理范围、生命周期、可行性、计划、资源、接口、监控、纠正与状态沟通。
SUP.1质量保证独立性、质量准则、工作产品与过程保证、不符合项解决和升级。
SUP.8配置管理配置项、属性、控制、基线、状态、完整性、备份与恢复。
SUP.9问题解决问题记录、根因和影响、解决、验证、关闭、状态与趋势。
SUP.10变更请求变更登记、影响分析、授权、实施验证、追溯和关闭。
记录方式:跨过程观察应明确来源过程、目标过程、关系类型、证据编号、已支持的事实、缺口或风险,以及需要的后续证据或访谈问题。范围外过程只作为非评级观察呈现。
功能安全与网络安全审核
从顶部“自定义审核”选择内置方案。两类安全审核采用同一套六阶段交互,但审核问题、工作产品和生命周期范围分别依据 ISO 26262:2018 与 ISO/SAE 21434:2021 的项目活动组织。
01范围
确认适用标准、项目/Item、生命周期阶段、组织边界、供应商接口、审核目标和排除项。未纳入范围的支持关系只形成关联观察。
02计划
为审核活动指定 Lead Assessor、Assessor 和 Data Logger,明确独立复核、访谈、样本、时间、输入输出和升级路径。
03证据
上传 DOCX、DOC、PPTX、XLSX、PDF、CSV、JSON、HTML 或粘贴文本,核对作用域、抽取内容和定位。旧版 DOC 可能丢失表格与页码,需回到原件复核。
04AI 分析
按审核问题匹配 Direct、Corroborating 与 Index-only,生成八档候选、证据充分性、缺口、访谈问题、O/W/R 和最小关闭证据。
05人工复核
评估师打开每一项核对标准意图、原始证据、跨过程关系和未证明事项,必要时改定评分并留下理由、引用和发现。
06关闭
全部项目已人工复核、证据充分且弱项受控关闭后,由 Lead Assessor 执行关闭;系统记录操作人、时间和协作修订号。
功能安全重点总体/项目安全管理、Item Definition、HARA、FSC/TSC、系统/硬件/软件安全开发、V&V、配置与变更、供应商管理、生产发布和 Safety Case。
网络安全重点治理与能力、项目 Cybersecurity Plan、职责与培训、TARA、Cybersecurity Concept、产品开发与验证、持续监控、漏洞/事件/更新管理、发布和 Cybersecurity Case。
直接证据需要可定位内容证明活动已执行及结果已评审、批准、配置受控或验证完成;仅有模板、目录或文件名不构成充分实施证据。
支持闭环项目管理、质量保证、配置、问题和变更信息用于核对责任、状态、影响和关闭一致性,但不能替代目标审核项的直接证据。
方法边界:内置模板用于内部审核准备和证据复核,不自动声明 ISO 26262 或 ISO/SAE 21434 合规、认证或独立评估结论。
功能操作索引
下表覆盖 AuditFlow 的主要入口、用途和推荐操作顺序。正式范围、人工复核和数据边界对所有功能均适用。
| 功能 | 入口 | 推荐操作 |
| 审核总览 | 顶部“审核总览” | 浏览项目状态、证据和复核进度;用作评估资源和阻塞项的管理看板。 |
| ASPICE 评估 | 顶部“ASPICE 评估” | 新建项目,明确 PAM、目标等级和正式范围;进入九阶段工作流完成评估。 |
| 自定义审核 | 顶部“自定义审核” | 选择功能安全、网络安全或组织方案,按六阶段工作流上传材料、运行分析并逐项人工复核。 |
| 标准知识库 | 更多 → ASPICE 标准知识库 | 查看和维护 PAM、过程 BP、通用实践 GP、审核要素、评分规则和报告输出配置。 |
| 专业工具 | 更多 | 打开原工作区、专业能力或关联工具。使用外部工具所得材料仍需按本项目范围重新登记和判定。 |
| 账户与角色 | 设置 → 账户与角色 | 维护报告签署、记录创建人与职责边界。仅 Lead Assessor 可关闭评估和确认 PA。 |
| 项目多人协作与 ECS / MySQL | 设置 → 多人协作 | 维护审核员、Microsoft 用户 ID、项目角色、过程域权限、修订号、同步端点及服务端用户目录隔离。 |
| Codex / Virtual Key | 设置 → Codex / Virtual Key | 仅在组织授权后配置企业网关与本机服务会话中的 Virtual Key;不将密钥写入工作区。 |
| AI / MCP | 设置 → AI / MCP | 启用或检查本机 AI 服务;模型不可用时保留本地规则和人工评估工作流。 |
| Helix 表格解析 | 设置 → Helix 表格解析 | 设置唯一标识与字段识别策略,导入后核对解析结果、范围和原始文件定位。 |
| 反馈建议 | 设置 → 反馈建议 | 记录功能、页面和改进建议,条目保存在本地工作区并可按需删除。 |
| 回收站 | 设置 → 回收站 | 恢复误删项目;彻底删除不可撤销,应先导出工作区备份。 |
| 数据与隐私 | 设置 → 数据与隐私 | 导出本地备份、恢复演示数据、调整证据文本保留策略和检查本地数据说明。 |
项目多人协作与 ECS / MySQL 部署
v7.4 在本地工作区提供三人左右的协作模型,用于提前验证职责、权限和操作轨迹。它不会把浏览器本地数据自动变成公司级多用户系统。
| 角色 | 可执行操作 | 限制 |
| Lead Assessor | 证据、分析、人工复核、角色协调、关闭与重新打开 | 仍须满足质量门并对正式结论负责 |
| Assessor | 登记证据、运行分析、核对详情、评分改定与发现维护 | 不能关闭或重新打开安全审核 |
| Data Logger | 上传、粘贴和整理证据 | 不能运行分析、改定评分或关闭审核 |
| Viewer | 查看项目、证据索引、候选结果与操作记录 | 所有写入动作被本地角色护栏阻止 |
01本地验证
在设置中添加成员,为各项目分配角色,再切换当前操作人验证权限。每次证据或结论修改都会增加项目修订号并记录用户与时间。
02配置 ECS / MySQL 目标参数
录入同步端点、Tenant ID、SPA/API Client ID 和工作区 ID。页面只保存非敏感参数;机密、证据原件和数据库连接串不应写入扩展本地存储。
03公司部署
使用 Microsoft Entra ID/OIDC 登录,Node 服务实施 RBAC、项目权限和编辑锁,MySQL InnoDB 保存项目快照、成员及修订事件,并按用户分离服务端目录。原始证据文件默认不上传,密钥只放在服务器环境变量。
当前状态:网站部署支持 ECS / MySQL、本地协议预览、角色护栏和修订事件;Microsoft Entra 正式身份仍需由公司租户管理员配置。
关闭与报告
关闭动作应当发生在评估结论已经可追溯、开放问题已处置并且质量门通过之后。关闭不是报告导出的快捷入口,而是评估状态的正式转换。
01完成逐项人工复核
确认每个范围内 BP / GP 的正式评级、证据充分性、引用定位和评分理由。AI 候选、未确认追溯和草稿记录不能替代人工复核。
02处理质量门与弱项
关闭或受控处置证据不足、未处理 Guideline / TAA Broken、未定稿记录和开放弱项;验证 SUP.9 / SUP.10 关联的关闭结果。
03生成受控报告
导出前复查正式范围过滤、评级矩阵、发现和跨过程观察。Word 文档中的目录字段可在打开后使用 Ctrl+A、F9 刷新页码。
本地数据与 AI
AuditFlow 采用本地优先工作流:项目、评分、记录、协作角色和设置保存在浏览器本地工作区,附件 Blob 位于 IndexedDB,证据文件在浏览器中解析。服务器协作同步需要显式启用,原始证据默认不上传。
最小化传输只有在显式配置企业网关和 AI 服务后,才向该服务发送复核所需的评估上下文。
会话密钥Virtual Key 仅保留在本机服务进程内存中,不写入浏览器存储、扩展包或报告。
敏感项目在“数据与隐私”关闭证据文本保留;导出前按组织数据分类规则复查报告内容。
先备份再清理恢复演示数据或彻底删除项目前,先导出本地工作区,保留可恢复的审计轨迹。
常见问题
为什么关联过程证据不能提高目标过程的评级?
它只能支持接口、配置、治理、问题或变更关系。目标过程的 BP / GP 必须由目标过程内可定位的直接证据来证明已经实施。
为什么有文件仍然显示证据不足?
文件索引不能证明内容、执行或结果。请检查是否能定位到相关指标、是否有版本/基线、执行记录、评审结论、验证结果和关闭信息。
什么时候使用 AI 评审?
在证据已解析、评估师记录已初步完成后,用它生成候选、发现建议和访谈问题。它不取代评估师的范围判断、证据判定和正式评级。
审核员现在可以在不同电脑上同时修改吗?
网站服务支持项目成员、过程域权限、五秒事件轮询和九十秒编辑租约。用户编辑一条证据链时,服务端会根据直接上下游和支持过程冻结相关条目,并显示当前编辑人。正式部署仍应接入 Microsoft Entra,避免把浏览器手工身份当作企业认证。
CL3 为什么不能在本地引擎中直接给结论?
CL3 需要评估组织标准过程及其在项目中的部署、能力、资源和监控。AuditFlow 明确将 GP 3.x 的正式评级留给组织批准的评估方法。
Assessment workflow
Start with the processes and capability level in scope. Plan interviews and samples, parse evidence locally, inspect direct and corroborating relationships, review every BP/GP, consolidate records, then pass the closure gates before publishing.
01 · ScopeChoose the PAM, target level and formal processes. Out-of-scope process data remains context and is never rated.
02 · PlanMaintain process instances, samples, assessors, interview sessions, milestones and accountable owners.
03 · EvidenceUpload source files or read a Helix snapshot. The browser keeps source locators and classifies evidence.
04 · AssessReview BP/GP intent, implementation, consistency, governance and closure. AI remains a draft.
05 · TraceConfirm direct links and mark corroborating or index-only relationships with notes and findings.
06 · CloseResolve evidence gaps, Guideline/TAA findings and open records before generating a controlled report.
Scope, capability and ratings
Process scope answers which processes are assessed. Capability is derived from process attributes (PA), not file count or an average score.
| Rating | Meaning | Required discipline |
|---|
| N · Not achieved | No convincing implementation evidence. | Record the gap and required follow-up. |
| P · Partially achieved | Some implementation exists but important evidence or closure is missing. | Keep the candidate provisional and identify the missing sample. |
| L · Largely achieved | Most evidence is present, with sampling, stability or consistency gaps. | Document the limitation and assessor rationale. |
| F · Fully achieved | Systematic, controlled and stable implementation across representative samples. | Assessor confirms direct evidence, governance and closure. |
Ten assessment phases
The project phase bar is resumable. You may move between phases, but scope, evidence sufficiency, human review and open issues must be checked again before closure.
- 01
Define formal scope
Select the PAM, target level and covered processes.
- 02
Plan assessment
Set instances, samples, interviews, dates and milestones.
- 03
Collect evidence
Upload files or select Helix objects, keeping locators and versions.
- 04
Conduct interviews
Record accountable owners, facts, decisions and follow-up questions.
- 05
Trace evidence
Separate direct, corroborating and index-only evidence.
- 06
Consolidate records
Resolve disagreements and move only agreed records to the final workspace.
- 07
Review AI candidates
Amend or reject drafts; imported AI conclusions never overwrite human decisions.
- 08
Control versions and baselines
Freeze source items, scope, owners, dates and change reasons.
- 09
Close assessment
Pass evidence, review, record, weakness and Guideline quality gates.
- 10
Publish report
Export a controlled report that shows formal-scope, assessor-reviewed conclusions.
Embedded ASPICE Audit Master
Use the embedded ASPICE Audit Master from Scope and Evidence to inspect uploaded sources and Helix items. The assessor chooses the source set and confirms Direct, Corroborating or Index-only evidence before a conclusion.
Assessor boundary
AI and cross-process analysis remain candidates until an assessor confirms the evidence chain.
AI candidates and human review
AI candidates can suggest process mappings, ratings or follow-up questions, but they remain provisional. Review the source locator, evidence role, rationale and assessor decision before saving a formal record.
Assessor boundary
AI and cross-process analysis remain candidates until an assessor confirms the evidence chain.
MAN.3 / SUP.8 support sub-project
Use the MAN.3 and SUP.8 support sub-project view for project planning, configuration baselines and work-product updates. Support evidence checks interfaces and consistency; it does not replace direct target-process evidence.
Assessor boundary
AI and cross-process analysis remain candidates until an assessor confirms the evidence chain.
Evidence and traceability
Every source file is shown once and expands to its document items. Each item keeps a source file, chapter/page/sheet locator, process candidate, document class, item type and evidence role. Related processes such as MAN.3, SUP.1, SUP.8, SUP.9 and SUP.10 provide corroborating context only; they do not replace direct implementation evidence for the target process.
DirectLocatable implementation evidence from the target process. This can support a formal rating.
CorroboratingUpstream, downstream or support-process evidence that checks interfaces and consistency.
Index-onlyA filename, header or metadata row without enough substance to prove implementation.
Cross-process closure
Cross-process evidence can corroborate interfaces, governance and closure. Keep the target process in formal scope, record the relationship and explain why the supporting process is relevant to the assessor decision.
Assessor boundary
AI and cross-process analysis remain candidates until an assessor confirms the evidence chain.
Functional-safety and cybersecurity audits
Functional-safety and cybersecurity work remains linked to the assessment without changing ASPICE scope automatically. Preserve HARA/FSC/TSC or TARA locators, responsibility, independence and the review decision.
Assessor boundary
AI and cross-process analysis remain candidates until an assessor confirms the evidence chain.
Feature index
Use the feature index to locate project, evidence, review, Trace, report and settings functions. Each entry points back to the formal-scope, evidence and human-review boundaries that apply to the operation.
Assessor boundary
AI and cross-process analysis remain candidates until an assessor confirms the evidence chain.
Project collaboration and deployment
Project collaboration uses authenticated membership, role and process scope, revision checks and item locks. Local-first data remains authoritative until an explicitly configured service accepts a synchronized revision.
Assessor boundary
AI and cross-process analysis remain candidates until an assessor confirms the evidence chain.
Closure and reports
Before closure, complete item-level human review, resolve Broken Guideline/TAA results, consolidate records, and verify SUP.9 → SUP.10 → work-product update → verification → SUP.8 baseline links. Reports remain Draft while a quality gate is open.
Local data and AI
Projects, ratings, records, settings and evidence indexes stay in the browser workspace; file attachments use IndexedDB. Source files are parsed locally. A model request is made only when the user has configured the local AI bridge or service. Virtual Keys remain in the local service session and are not written to the extension package.
FAQ
Why can related evidence not raise a target-process rating?
It can demonstrate an interface, configuration, issue or change relationship, but the target BP/GP still needs locatable direct implementation evidence.
Why does a file still show an evidence gap?
A filename or index cannot prove execution or results. Add a locator, version/baseline, accountable owner, review outcome, verification result and closure evidence.
When should I use the Codex assistant?
After local parsing and initial assessor notes, use it for candidate summaries, missing-evidence prompts and questions. Review every response before recording a conclusion.
Can the local engine declare CL3?
No. CL3 requires organisation-level deployment, capability, resources and monitoring; use an organisation-approved assessment method.
操作内容 · 87 个操作页
Operation content · 87 operation pages
以下章节完整保留既有手册的操作页顺序;每页补充当前版本的证据、门禁和人工职责提示。
The following chapters preserve the established operation-page order and add current evidence, gate and human-responsibility notes.
操作页 01工作区与项目管理Workspace and project management
启动与本机账号
启动与本机账号
功能入口操作页 01 · 首次访问 / 登录门禁用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开 WebApp 首页,确认地址栏为受信任的本机或企业部署地址。
- 02选择界面语言,在姓名栏输入可识别的审核员姓名。
- 03输入格式有效的工作邮箱并选择“进入本机工作台”;单机模式不会向远端发送该邮箱。
- 04进入后从项目列表打开评估;退出或切换账号前确认本地数据已保存。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Startup and local account
Establish the identity of the native workspace; the name and mailbox in stand-alone mode are used for local visibility and do not represent corporate identity authentication.
Entry操作页 01 · 首次访问 / 登录门禁PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the WebApp home page and confirm that the address bar is a trusted native or enterprise deployment address.
- 02Select the interface language and enter the identifiable auditor's name in the Name field.
- 03Enter a valid work email and select Enter Native Workbench; stand-alone mode does not send the email to the remote end.
- 04After entering, open the evaluation from the project list; confirm that the local data has been saved before logging out or switching accounts.
ASPICE assessment impactDocument operator context for local project visibility and audit descriptions; does not substitute for organization authentication, authorization, or independence confirmation.
Completion checksConfirm your browser domain name, account mode, app version, and data storage scope.
操作页 02工作区与项目管理Workspace and project management
工作台导航与搜索
工作台导航与搜索
功能入口操作页 02 · 顶部导航 / 全局搜索用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01从顶部图标进入评估总览、ASPICE、自定义审核或专业工作台。
- 02使用搜索按钮或 Ctrl/Command+K 输入项目号、过程 ID、记录编号、文件名或正文关键词。
- 03在结果列表核对对象类型与所属项目,再打开目标项。
- 04使用帮助、语言、主题、通知、Helix 配置及账号入口前,先确认当前所处项目。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Workbench navigation and search
Identify global workspace entrances and project entrances to shorten the transition path from project to plan, track, review, and setup.
Entry操作页 02 · 顶部导航 / 全局搜索PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Access the Assessment Overview, ASPICE, Custom Review, or Professional Workbench from the top icon.
- 02Use the search button or Ctrl/Command+K to enter a project number, process ID, record number, file name, or body keyword.
- 03Check the object type and the item it belongs to in the result list, and then open the target item.
- 04Confirm your current item before using Help, Language, Subject, Notification, Helix Configuration, and Account Portal.
ASPICE assessment impactMake audit activities, evidence, and records searchable in the same workspace; search hits only indicate that content exists and do not prove that evidence is valid or conclusions are correct.
Completion checksAvoid judging the association only by the record with the same name; check the item, process, version and object ID.
操作页 03工作区与项目管理Workspace and project management
ASPICE 项目列表
ASPICE 项目列表
功能入口操作页 03 · ASPICE → 项目列表用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01从左侧进入 ASPICE 评估。
- 02用项目名称、编号、组织及状态识别目标项目。
- 03查看当前阶段、待复核数、阻断项和最近活动。
- 04点击项目行或打开按钮进入该项目,再从项目侧栏选择评估阶段。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
ASPICE assessment projects
View project status, current stage, evidence resolution, manual review, open questions, and progress.
Entry操作页 03 · ASPICE → 项目列表PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Enter the ASPICE assessment from the left.
- 02Identify the target project by project name, number, organization and status.
- 03View the current stage, number of pending reviews, blocks, and recent activity.
- 04Click the project row or open button to enter the project and select the evaluation phase from the project sidebar.
ASPICE assessment impactCentralize the evaluation activities in the project-level workspace to help find evidentiary gaps and unreviewed items; the project progress is not equivalent to the process capability level.
Completion checksDo not use percentages, AI backlogs, or sample project status as official ratings.
操作页 04工作区与项目管理Workspace and project management
新建 ASPICE 评估
新建 ASPICE 评估
功能入口操作页 04 · ASPICE → 新建评估项目用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01选择“新建 ASPICE 评估”。
- 02填写项目名称、组织/客户、产品或项目标识、评估类型与目的。
- 03选择适用的 Automotive SPICE PAM 版本、目标等级及评估过程。
- 04逐项核对正式过程范围后创建;范围外接口只作为关联背景,不自动进入评级。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Create an ASPICE assessment
Establish controlled containers for evaluation purposes, product, PAM, target level and formal process scope.
Entry操作页 04 · ASPICE → 新建评估项目PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select New ASPICE Assessment.
- 02Fill in the project name, organization/customer, product or project identification, evaluation type and purpose.
- 03Select the applicable Automotive SPICE PAM version, target level, and assessment process.
- 04After checking the formal process scope item by item, it is created; the out-of-scope interface is only used as an association background and does not automatically enter the rating.
ASPICE assessment impactExplicitly define the assessed process and competency objectives, establishing common boundaries for interviews, sampling, scoring, and reporting.
Completion checksEvaluation scenarios are prioritized with the client; do not broaden coverage unwarrantedly in pursuit of coverage.
操作页 05工作区与项目管理Workspace and project management
项目概况与进度
项目概况与进度
功能入口操作页 05 · 评审进度 / Summary用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入项目“评审进度 / Summary”。
- 02核对项目标识、范围过程、当前版本、证据文件和人工复核状态。
- 03逐项打开未关联、证据不足、待复核和开放弱项指标。
- 04根据当前阻断项返回范围、逐条评审、记录合并或版本阶段处理。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Project overview and progress
Summarize process status, chain of evidence, pending review, gaps, and closure readiness.
Entry操作页 05 · 评审进度 / SummaryPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Go to Project Review Progress/Summary.
- 02Check the project identification, scope process, current version, evidentiary documents and manual review status.
- 03Open the unrelated, insufficient evidence, pending review, and open weaknesses metrics item by item.
- 04Return range, item-by-item review, record merge, or version stage processing based on the current block.
ASPICE assessment impactIncrease transparency of project status; dashboard metrics are derived views of workspace data and are not directly assigned CL or process ratings.
Completion checksDistinguish between uploaded, resolved, linked, and confirmed statuses.
操作页 06工作区与项目管理Workspace and project management
评估计划与日程
评估计划与日程
功能入口操作页 06 · 计划评估 → 计划和活动用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开“计划评估”,先检查项目目的、评估周期、过程及参与角色。
- 02为每个过程安排准备、访谈、工作产品抽样、评分校准与结果沟通活动。
- 03指定负责人、计划日期、状态和必要的前置依赖。
- 04保存后定期更新完成状态、偏差原因和调整决定。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Assessment plan and schedule
Define assessment activities, samples, responsible persons, interviews, milestones and required resources.
Entry操作页 06 · 计划评估 → 计划和活动PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open Plan Evaluation and first check the project objectives, evaluation cycle, process, and role of participation.
- 02Schedule preparation, interviews, work product sampling, scoring calibration and results communication activities for each process.
- 03Specify the owner, schedule date, status, and necessary upfront dependencies.
- 04Regularly update the completion status, deviation reason and adjustment decision after saving.
ASPICE assessment impactIncorporate the evaluation itself into the planning and monitoring; the evaluation of the project management of MAN.3 should focus on the project planning, monitoring, adjustment and interface evidence, not just the schedule.
Completion checksProgram records cannot independently prove that the evaluated project has MAN.3 capability; check implementation records and true adjustments.
操作页 07工作区与项目管理Workspace and project management
评估团队与参与者
评估团队与参与者
功能入口操作页 07 · 计划评估 / Participants用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入计划页的参与者或团队区域。
- 02添加 Lead Assessor、Assessor、独立复核者和必要的过程专家。
- 03为每位评估师分配负责过程、活动或记录任务。
- 04保存后检查评估团队能力、独立性和利益冲突声明是否在组织流程中另行完成。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Assessment team and participants
Document evaluators, respondents, roles, responsibilities, and process coverage arrangements.
Entry操作页 07 · 计划评估 / ParticipantsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Go to the Participants or Teams section of the plan page.
- 02Add Lead Assessor, Assessor, Independent Reviewer, and necessary process experts.
- 03Assign each evaluator the task of taking responsibility for a process, activity, or record.
- 04After saving, check that the assessment team competency, independence and conflict of interest statements are completed separately in the organizational process.
ASPICE assessment impactClearly assess execution responsibilities and review responsibilities; the in-app list is not a substitute for qualification, authorization, independence, or conflict review.
Completion checksKey conclusions need to be confirmed by an appropriately authorized assessor.
操作页 08工作区与项目管理Workspace and project management
访谈计划与样本
访谈计划与样本
功能入口操作页 08 · 计划评估 / Interviews & samples用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01按过程或 BP/GP 建立访谈主题和抽样对象。
- 02记录受访角色、项目阶段、样本数量、选择理由和计划时间。
- 03在访谈后补充事实、引用材料、矛盾点和未解决问题。
- 04将需跟进的事项转为 Q(问题)、R(建议)或 W(弱项)记录,并指明责任人。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Interview plan and sampling
Connect interviews and work product sampling to formal scope and process practices.
Entry操作页 08 · 计划评估 / Interviews & samplesPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Follow the process or BP/GP to create an interview topic and sample.
- 02Record interview role, project phase, number of samples, reason for selection, and planned time.
- 03Add facts, references, inconsistencies, and unresolved issues after the interview.
- 04Turn what needs to be followed up into a Q (issue), R (recommendation), or W (weakness) record and identify who is responsible.
ASPICE assessment impactHelp assess coverage of representative samples and implementation evidence; sampling conclusions still need to be judged according to applicable assessment methods.
Completion checksThe number of covers does not in itself represent representativeness; specifying sample selection and boundaries.
操作页 09计划与证据范围Plan and evidence scope
范围与资料工作区
范围与资料工作区
功能入口操作页 09 · 范围与资料 / Development用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入“范围与资料”,确认正式过程与实例。
- 02检查现有证据清单的来源、文件名、解析状态和过程候选。
- 03使用 Upload 上传文件,或 Paste text 登记可追溯文本。
- 04逐个核对解析结果、文档条目、定位和证据角色;确认后才进入后续评审。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Scope and evidence workspace
Confirm formal process scope and centrally upload, parse, and classify evaluation materials.
Entry操作页 09 · 范围与资料 / DevelopmentPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Go to Scope & Documentation to confirm formal processes and examples.
- 02Examine the source, filename, resolution status, and process candidates of the existing evidence list.
- 03Use Upload to upload a file, or Paste text to register traceable text.
- 04Check parsing results, document entries, positioning and evidence roles one by one; confirm before proceeding to follow-up review.
ASPICE assessment impactOrganize work product and process evidence from scattered files into locatable entries; only direct evidence confirmed by evaluators can support target process practice ratings.
Completion checksA successful upload is not the same as a successful resolution; a successful resolution is not the same as satisfying BP/GP.
操作页 10计划与证据范围Plan and evidence scope
上传文件及格式处理
上传文件及格式处理
功能入口操作页 10 · 范围与资料 → Upload用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01点击 Upload,选择待用文件并确认来源、过程范围和文件版本。
- 02等待本地解析;检查正文、表格、工作表/幻灯片或 PDF 页定位。
- 03对旧格式或扫描件检查解析告警,必要时补充文本或人工定位。
- 04确认文件行、条目数和结构后再进行逐项分类。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Upload files and process formats
Import Office, PDF, CSV, JSON, HTML or textual evidence and observe the parsing status.
Entry操作页 10 · 范围与资料 → UploadPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Click Upload, select the file to be used and confirm the source, process scope, and file version.
- 02Wait for local parsing; check body, form, worksheet/slide or PDF page positioning.
- 03Examine parsing alarms for old formats or scans, supplementing text or manual positioning if necessary.
- 04Confirm the file lines, number of entries, and structure before itemizing.
ASPICE assessment impactImprove data retrievability and preserve the file's positioning relationship with the original rows/pages/cells.
Completion checksDo not override original evidence; control unnecessary sensitive data; confirm version and approval status.
操作页 11计划与证据范围Plan and evidence scope
粘贴文本证据
粘贴文本证据
功能入口操作页 11 · 范围与资料 → Paste text用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01点击 Paste text。
- 02填写证据名称、主过程/作用域和文本正文。
- 03在正文中保留来源编号、日期、责任角色、版本和必要的上下文。
- 04保存后检查新证据项并补充原始文件路径或正式记录引用。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Paste text evidence
Include meeting minutes, interview excerpts, or locatable exports in the evidence list as text.
Entry操作页 11 · 范围与资料 → Paste textPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Click Paste text.
- 02Fill in the evidence name, main process/scope, and text body.
- 03Keep the source number, date, responsibility role, version, and necessary context in the body.
- 04After saving, check for new items of evidence and supplement the original file path or formal record references.
ASPICE assessment impactMake up interviews/transcripts that cannot be directly uploaded and enter the evidence index; pasting content must still be traceable to the original source of control.
Completion checksAvoid using abstracts or individual opinions as approved work products.
操作页 12计划与证据范围Plan and evidence scope
证据条目与来源分组
证据条目与来源分组
功能入口操作页 12 · 范围与资料 / Evidence Inventory用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01展开目标证据文件行查看拆分出的原子条目。
- 02核对每条的源文件、页码/工作表/行列、标题、过程候选和内容摘要。
- 03用预览抽取文本查看解析正文,不要仅凭自动分类标签判断。
- 04必要时更正主过程、条目类型或证据说明,并保存评估师核查结果。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Evidence items and source grouping
Check the evidence list, positioning and parsing content according to the original documents and entries.
Entry操作页 12 · 范围与资料 / Evidence InventoryPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Expand the Target Evidence Document row to view the split atomic entries.
- 02Review each article's source file, page number/worksheet/row and column, title, process candidates, and content summary.
- 03Use preview extracted text to view the parsed body, and don't judge by automatic classification labels alone.
- 04Correct the main process, item type or evidence description as necessary and save the evaluator's verification results.
ASPICE assessment impactAllow review conclusions to be returned to the specific location of the original document; reduce the risk of the entire document covering up discrepancies as a single piece of evidence.
Completion checksA file can contain multiple entries of varying process, version, or evidence strength.
操作页 13计划与证据范围Plan and evidence scope
证据角色 Direct / Corroborating / Index-only
证据角色 Direct / Corroborating / Index-only
功能入口操作页 13 · 证据条目 → 角色用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在证据条目详情中检查当前角色。
- 02只有直接记录了目标过程实施及结果的条目,才考虑设为 Direct。
- 03接口、治理、配置、问题或变更资料通常作为 Corroborating,需指出其支持的关系。
- 04文件名、链接或元数据且缺少可核正文时使用 Index-only;保存后复核引用。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Evidence roles: Direct / Corroborating / Index-only
Differentiate between target processes that directly implement evidence, cross-process corroboration, and indexing information only.
Entry操作页 13 · 证据条目 → 角色PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Check the current role in the evidence entry details.
- 02Only entries that directly document the implementation and results of the target process are considered to be Direct.
- 03The interface, governance, configuration, issue, or change profile is typically Corroborating, indicating the relationship it supports.
- 04Use Index-only when the file name, link, or metadata is missing and the verifiable body is missing; review the reference after saving.
ASPICE assessment impactImprove the transparency of the rating basis to prevent the direct implementation of evidence across processes where information, indexes, or documents exist to substitute for the objective process.
Completion checksRoles are for evidentiary purposes and not quality grades; assessors are required to confirm item by item.
操作页 14计划与证据范围Plan and evidence scope
删除或移除证据
删除或移除证据
功能入口操作页 14 · 范围与资料 → 证据行操作用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认目标文件名、导入来源和可能关联的记录/评定。
- 02使用文件行右侧删除操作并阅读确认提示。
- 03确认后检查关联指标、追溯关系和审计日志是否符合预期。
- 04需要保留记录时,先保存替代文件及变更原因,再删除旧条目。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Delete or remove evidence
Remove data that is misrepresented, duplicated, or should not be included in the project.
Entry操作页 14 · 范围与资料 → 证据行操作PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the destination file name, import source, and possible associated records/ratings.
- 02Use the delete action to the right of the file line and read the confirmation prompt.
- 03After confirmation, check that the associated metrics, retrospective relationships, and audit logs are as expected.
- 04When a record needs to be retained, save the replacement file and the reason for the change before deleting the old entry.
ASPICE assessment impactMaintain the accuracy of the evidence set; deletion may affect the existing traceability and evaluation basis.
Completion checksCheck backup against baseline requirements before deleting to avoid breaking the interpretability of historical versions.
操作页 15Helix 与整体表格工作流Helix and whole-table workflows
Helix Bridge 配置
Helix Bridge 配置
功能入口操作页 15 · 顶部 Helix 配置 / Settings用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在具备授权的情况下启动本机 Helix Bridge。
- 02填写或确认 Bridge URL、Helix REST API URL、用户名和密码。
- 03按组织 TLS 策略设置证书选项;自签证书只在获批环境使用。
- 04保存或读取快照前确认当前项目、账户权限和资料范围。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Configure the Helix Bridge
Prepare the local Bridge to connect to the Helix rest API without writing credentials to the project workspace.
Entry操作页 15 · 顶部 Helix 配置 / SettingsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Start the native Helix Bridge with authorization.
- 02Complete or confirm the Bridge URL, Helix rest API URL, username, and password.
- 03Set certificate options by organization TLS policy; self-signed certificates are only used in approved environments.
- 04Confirm the current project, account permissions, and data scope before saving or reading the snapshot.
ASPICE assessment impactImport Helix objects to form locatable project work item evidence; do not alter Helix source data.
Completion checksThe password should remain only within the current session; check the host, project, TLS, and read-only permissions.
操作页 16Helix 与整体表格工作流Helix and whole-table workflows
Helix 项目发现与快照读取
Helix 项目发现与快照读取
功能入口操作页 16 · 范围与资料 → Live Helix ALM用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01检查 Bridge URL 已可访问,填写 REST API URL 与授权账号。
- 02点击 Find projects 并选定准确项目;填写搜索词和读取上限。
- 03按需求、文档、Issue、测试用例、测试运行、文件夹勾选对象类型。
- 04点击 Read snapshot 后先检查项目名、返回数量、字段和状态统计,再选取项目对象。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Discover Helix projects and read snapshots
Read requirements, documents, issues, tests, and folder objects in the Helix project.
Entry操作页 16 · 范围与资料 → Live Helix ALMPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Check that the Bridge URL is accessible, and fill in the rest API URL and authorized account.
- 02Tap Find projects and select the exact items; fill in the search terms and read caps.
- 03Check the object type by requirement, document, issue, test case, test run, folder.
- 04After clicking Read snapshot, first check the project name, number of returns, fields and status statistics, and then select the project object.
ASPICE assessment impactForms a local read-only snapshot of the source system object and row-level positioning for subsequent association and evaluator sampling.
Completion checksSnapshot read times, source items, return caps, and permissions affect integrity; data cutoffs are recorded in the report.
操作页 17Helix 与整体表格工作流Helix and whole-table workflows
Helix 对象选择与导入
Helix 对象选择与导入
功能入口操作页 17 · Live Helix ALM → Select visible / Import selected用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01按对象类别或搜索筛选快照对象。
- 02使用 Select visible 或逐项勾选需要导入的对象。
- 03检查重复项提示及所选对象 ID、标题、状态和关系字段。
- 04点击 Import selected,回到证据列表核对记录数量和来源信息。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Select and import Helix objects
Add the selected Helix record to the current project evidence list.
Entry操作页 17 · Live Helix ALM → Select visible / Import selectedPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Filter snapshot objects by object category or search.
- 02Use Select visible or itemize the objects you want to import.
- 03Check the duplicate hint and the selected object ID, title, status, and relationship fields.
- 04Click Import selected to return to the evidence list and check the number of records and source information.
ASPICE assessment impactMap Helix work items to AuditFlow traceability evidence; imports do not automatically establish confirmed formal rating relationships.
Completion checksThe deduplication basis and source ID should be preserved; the association must check both ends of the object and its version.
操作页 18Helix 与整体表格工作流Helix and whole-table workflows
Helix HTML 报告导入
Helix HTML 报告导入
功能入口操作页 18 · 范围与资料 → Upload HTML用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01从 Helix 导出原始 HTML,不要先经过邮件或富文本编辑器重新保存。
- 02上传 HTML,检查识别类型、表格数、行数、字段和状态统计。
- 03验证 ID、标题、状态、责任人、上下游、版本/基线、影响与关闭字段是否对齐。
- 04抽样对照原 HTML 的表头和多行记录;不匹配时停止使用该批数据并改用原生快照/其他导出。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Import Helix HTML reports
Resolve a user-provided Helix Issue Register or Review Evidence Register HTML.
Entry操作页 18 · 范围与资料 → Upload HTMLPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Export the original HTML from Helix without first re-saving it via email or a rich-text editor.
- 02Upload HTML and check the recognition type, number of tables, number of rows, fields, and status statistics.
- 03Verify that the ID, title, status, owner, upstream and downstream, version/baseline, impact and close fields are aligned.
- 04Sampling against the header and multiline records of the original HTML; discontinuing use of the batch data in case of mismatch and using native snapshots/other exports instead.
ASPICE assessment impactTurn the HTML form into retrievable Helix row-level evidence; erroneous column mappings can result in erroneous retrospective or closed-loop judgments.
Completion checksDifferent report template columns may be in different order; importing counts does not equate to correct field semantics.
操作页 19Helix 与整体表格工作流Helix and whole-table workflows
整体表格配置与编辑
整体表格配置与编辑
功能入口操作页 19 · 逐条评审 → Item Directory / Whole-table用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在 Item Directory 检查 whole-table configurations 计数。
- 02选中整体表格后打开表格配置,核对列名、字段类型及源列映射。
- 03编辑必要的标题、字段映射或整体表格元数据并保存。
- 04抽查首行、中间行、末行及缺失值,确认行列未错位且原来源定位仍可用。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Configure and edit whole tables
The overall table structure of Helix or the work product is maintained and can be edited at the table level.
Entry操作页 19 · 逐条评审 → Item Directory / Whole-tablePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Check the whole-table configurations count in Item Direct ory.
- 02After selecting the overall table, open the table configuration and check the column name, field type and source column mapping.
- 03Edit the necessary title, field mapping, or overall table metadata and save.
- 04Randomly check the first row, middle row, last row and missing values to confirm that the rows and columns are not misaligned and that the original source positioning is still available.
ASPICE assessment impactThe overall table can be used to view the complete record set, supporting line-by-line review of status and relationship fields; the overall display does not automatically represent each line confirmed.
Completion checksAvoid disrupting the original line order, unique IDs, and column semantics; keep the original HTML/XLSX before saving.
操作页 20Helix 与整体表格工作流Helix and whole-table workflows
导入条目候选与关系确认
导入条目候选与关系确认
功能入口操作页 20 · 树状视图 → Candidates用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01选择过程和 BP/GP,查看匹配的候选条目。
- 02核对候选标题、来源文件、定位、过程映射及内容。
- 03逐条选择目标关系和 Direct/Corroborating/Index-only 角色。
- 04确认后回到 Item Directory 检查其是否进入 confirmed item directory。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Import item candidates and confirm relationships
Review the entry candidates formed by file parsing or Helix import and confirm to the target practice.
Entry操作页 20 · 树状视图 → CandidatesPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select the process and BP/GP to see matching candidate entries.
- 02Check candidate titles, source files, positioning, process mapping, and content.
- 03Select target relationships and Direct/Corroborating/Index-only roles item by item.
- 04After confirming, go back to Item Direct ory and check if it is in the confirmed item directory.
ASPICE assessment impactOnly entries confirming the relationship are entered into the formal chain of evidence directory; candidates retain their pending status to avoid mistaking them for reviewed.
Completion checksIncorrect process mappings or improper roles should be corrected before confirmation.
操作页 21树状视图与逐条评审Tree view and item review
树状视图导航与双向追溯
树状视图导航与双向追溯
功能入口操作页 21 · 树状视图 / Trace relations用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在左侧过程轨道选择正式范围过程与指标。
- 02在中间关系列表定位已确认的关联项,使用搜索/过滤缩小范围。
- 03检查关系两端对象、源/目标过程、证据定位和确认状态。
- 04补充缺失的反向关系或记录风险,并验证关系链能回到原始证据。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Tree View navigation and bidirectional traceability
Navigate evidentiary relationships along parent-child, upstream/downstream, or process interfaces.
Entry操作页 21 · 树状视图 / Trace relationsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select the formal range process and metrics on the left process track.
- 02Locate confirmed associations in the intermediate relationships list and narrow them using search/filtering.
- 03Examine objects at both ends of the relationship, source/target processes, evidence positioning and confirmation status.
- 04Supplement the missing reverse relationship or document the risk and verify that the chain of relationships returns to the original evidence.
ASPICE assessment impactShows links and interfaces such as requirements-design-implementation-validation; the existence of relationships does not in itself prove consistency or validity.
Completion checksVerify two-way traceability, same version, approval status, change impact and closure results.
操作页 22树状视图与逐条评审Tree view and item review
逐条评审 Grid View 总览
逐条评审 Grid View 总览
功能入口操作页 22 · 逐条评审 / Board用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开 Grid view,选择 Instance、Workspace 和记录类型过滤器。
- 02先检查警示区中的 linkage rate、direct-evidence coverage、assessor-review rate 和不足证据数。
- 03通过过程、指标和说明列定位要评审的实践。
- 04点选条目进入详情;保存人工评分、理由、引用、评审备注及 O/W/R。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Item-by-item review: Grid View overview
Check BP/GP, ratings, findings, evidence, and review status on a tabular basis.
Entry操作页 22 · 逐条评审 / BoardPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the Grid view and select the Instance, Workspace, and Record Type filters.
- 02First, check the linkage rate, direct-evidence coverage, assessor-review rate and insufficient evidence number in the warning area.
- 03Position the practices to be reviewed through process, metrics, and descriptive columns.
- 04Tap the entry to enter the details; save the manual score, justification, citations, review notes, and O/W/R.
ASPICE assessment impactPlace the chain of evidence and manual conclusions in the same review path; any ratios are only overrides, not scores.
Completion checksCL should not be directly determined based on AI score, correlation rate or total average score.
操作页 23树状视图与逐条评审Tree view and item review
Grid:Instance 与 Workspace 过滤
Grid:Instance 与 Workspace 过滤
功能入口操作页 23 · 逐条评审 → 顶部下拉用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01从 Instance 选择正确评估实例。
- 02从 Workspace 选择 Lead Assessor 或获授权的评估师工作区。
- 03确认切换后行数、指标范围与当前负责人相符。
- 04评审完成后重置过滤器,确保没有被隐藏的项目条目遗漏。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: filter by instance and workspace
Limit review instance and current workspace context.
Entry操作页 23 · 逐条评审 → 顶部下拉PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select the correct evaluation instance from Instance.
- 02Select Lead Assessor or Authorized Assessor workspace from Workspace.
- 03Confirm that the number of rows and the range of indicators after switching are consistent with the current person in charge.
- 04Reset filters after review to ensure no hidden item entries are missing.
ASPICE assessment impactSupport the organization of conclusions by evaluation examples and responsibilities to facilitate the consolidation of review records.
Completion checksThe filtered number of rows is not the total number of items in the project; multiplayer collaboration permissions are based on the server-side ACL.
操作页 24树状视图与逐条评审Tree view and item review
Grid:Record type 筛选
Grid:Record type 筛选
功能入口操作页 24 · 逐条评审 → All record types用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开 All record types 下拉。
- 02选择需要查看的记录/发现类型,观察列表和计数变化。
- 03检查结果类型是否与目标问题一致。
- 04清除筛选或恢复 All record types 后检查其它类型和未处理项。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: filter by record type
Focus on a specific record type or discovery category.
Entry操作页 24 · 逐条评审 → All record typesPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the All record types drop-down.
- 02Select the type of records/discoveries you want to view, watch lists and count changes.
- 03Check that the result type is consistent with the target issue.
- 04Check for other types and unprocessed items after clearing the filter or restoring All record types.
ASPICE assessment impactSeparate records of weaknesses, suggestions, observations, questions, or comments to avoid confusion about the purpose of the record.
Completion checksThe record type is not a rating level; the filter does not delete other types of data.
操作页 25树状视图与逐条评审Tree view and item review
Grid:Filter rows
Grid:Filter rows
功能入口操作页 25 · 逐条评审 → Filter rows用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01点击 Filter rows。
- 02选择字段/条件并输入过程 ID、评分、发现号或责任人。
- 03应用筛选后核对结果计数和首尾记录。
- 04结束后清除所有过滤条件并确认完整列表恢复。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: filter rows
Filter the review grid by column value, process, or keyword.
Entry操作页 25 · 逐条评审 → Filter rowsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Click Filter rows.
- 02Select the field/condition and enter the process ID, rating, discovery number, or responsible person.
- 03The count of results and the end-to-end record are checked after the filter is applied.
- 04Clear all filters and confirm full list recovery when finished.
ASPICE assessment impactApplies to Bulk Discovery Pending Review, No Evidence, Specific Ratings, or Specific Process Records.
Completion checksMultiple conditions may cross-shrink the result; confirm that the target item is not hidden before operation.
操作页 26树状视图与逐条评审Tree view and item review
Grid:Column visibility
Grid:Column visibility
功能入口操作页 26 · 逐条评审 → Column visibility用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01点击 Column visibility。
- 02勾选或取消过程、BP/GP、工作区、发现编号/类型、GP、证据说明、不符合项、修改人等列。
- 03关闭菜单并检查关键字段是否可见。
- 04评审结论前恢复必要列,至少能核对指标、评分、证据依据和人工复核状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: column visibility
Adjust the columns displayed in the grid to view the critical review context.
Entry操作页 26 · 逐条评审 → Column visibilityPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Click Column visibility.
- 02Check or uncheck process, BP/GP, workspace, discovery number/type, GP, description of evidence, nonconformities, modifiers, etc.
- 03Close the menu and check if the key fields are visible.
- 04Restore the necessary columns before the review conclusion, at least check the indicators, scores, evidence basis and manual review status.
ASPICE assessment impactImprove the readability of high-density meshes without altering the underlying evaluation records.
Completion checksHiding a column only affects the display and does not mean that the field value is empty or deleted.
操作页 27树状视图与逐条评审Tree view and item review
Grid:Process / Indicator / BP/GP 列
Grid:Process / Indicator / BP/GP 列
功能入口操作页 27 · 逐条评审 → 指标字段用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01检查 Process 与 Indicator 列中的过程 ID 和 BP/GP 编号。
- 02使用标题/说明确认评估意图与所选 PAM 版本一致。
- 03核实当前项处于正式范围还是仅作为关联观察。
- 04发现映射不正确时先修正范围/关系,不要带错映射评分。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: Process / Indicator / BP/GP columns
Identify review subjects for processes, competency attributes, basic practices, and common practices.
Entry操作页 27 · 逐条评审 → 指标字段PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Check the process ID and BP/GP number in the Process and Indicator columns.
- 02Use the title/description to confirm that the assessment intent is consistent with the selected version of PAM.
- 03Verify that the current item is in the formal range or only as a correlation observation.
- 04Correct the range/relationship first if the mapping is found to be incorrect, and do not mis-map the score.
ASPICE assessment impactAnchor evaluation decisions to specific practices or attributes that apply to PAM, rather than general process impressions.
Completion checksAssociated observations outside the scope of the process must not be entered into a formal rating summary.
操作页 28树状视图与逐条评审Tree view and item review
Grid:Finding number 与 Finding type
Grid:Finding number 与 Finding type
功能入口操作页 28 · 逐条评审 → Finding columns用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01显示 Finding number 与 Finding type 列。
- 02检查记录是否有唯一编号及 S/W/R/O/C/Q 类型。
- 03在详情中补全记录文本、关联指标和证据引用。
- 04保存后在记录合并或记录表单页再次检查编号和分类。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: finding number and finding type
View and manage traceable discovery numbers and categories.
Entry操作页 28 · 逐条评审 → Finding columnsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Displays the Finding number and Finding type columns.
- 02Check if the record has a unique number and S/W/R/O/C/Q type.
- 03Complete documented text, associated metrics, and evidence citations in details.
- 04After saving, check the numbering and classification again on the record merge or record form page.
ASPICE assessment impactTurn assessment conclusions into assignable, reviewable, closed-loop discovery entries.
Completion checksDo not repeat numbers for the same finding; severity and category are managed by organizational method.
操作页 29树状视图与逐条评审Tree view and item review
Grid:Evidence description 与引用
Grid:Evidence description 与引用
功能入口操作页 29 · 逐条评审 → Evidence fields用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01显示 Evidence description 列或打开评审详情。
- 02逐条核实证据代码、文件、页/表/行/列定位与摘录。
- 03确认该证据直接支持当前目标过程,或清晰标为跨过程佐证。
- 04记录证据缺口、版本、批准或代表性限制,并保存。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: evidence description and references
Examine evidence descriptions, sources, and positioning to support current practice.
Entry操作页 29 · 逐条评审 → Evidence fieldsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Show the Evidence description column or open the review details.
- 02Article-by-article verification of evidence codes, documents, page/table/row/column positioning and excerpts.
- 03Confirm that the evidence directly supports the current target process or is clearly marked as cross-process.
- 04Document and save evidentiary gaps, versions, approvals or representative restrictions.
ASPICE assessment impactImprove the auditability of returning to the original evidence from the conclusions of the report.
Completion checksA positive rating cannot be based solely on a document title, link, index, or status field.
操作页 30树状视图与逐条评审Tree view and item review
Grid:Generic Practice
Grid:Generic Practice
功能入口操作页 30 · 逐条评审 → Generic practice用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01显示 Generic practice 列。
- 02确认 BP 结论与适用 PA/GP 的映射。
- 03分别评估资源、责任、计划、监控、控制、工作产品管理等要求。
- 04对能力等级结论核查所有适用属性和级别否决规则。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: Generic Practice
Compare BP execution with GP/Competency Attribute Hierarchy requirements.
Entry操作页 30 · 逐条评审 → Generic practicePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Displays the Generic practice column.
- 02Confirm the mapping of BP conclusions to the applicable PA/GP.
- 03Evaluate resource, responsibility, planning, monitoring, control, work product management and other requirements separately.
- 04Check all applicable attribute and level rejection rules against the ability level conclusion.
ASPICE assessment impactConnect process practice implementation with process capability attribute evidence to avoid inferring CL only after evaluating BP.
Completion checksLocal Competency Range/Algorithmic Constraints should be checked in Settings or Knowledge Base Instructions.
操作页 31树状视图与逐条评审Tree view and item review
Grid:Nonconformance
Grid:Nonconformance
功能入口操作页 31 · 逐条评审 → Nonconformance用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01显示 Nonconformance 列或在评审详情中打开发现编辑区。
- 02明确不符合项对应的过程实践、证据缺口和影响范围。
- 03记录根因、纠正措施、责任人、期限和最小关闭证据。
- 04完成措施后补入复测/有效性验证证据,再更新关闭状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: Nonconformance
View the association and closed-loop status of the found nonconformities.
Entry操作页 31 · 逐条评审 → NonconformancePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Displays the Nonconformance column or opens the Discovery edit area in the review details.
- 02Clarify the process practices, evidence gaps and scope of impact corresponding to the nonconformities.
- 03Document root causes, corrective actions, responsible persons, deadlines, and minimum closing evidence.
- 04After completing the action, supplement the retest/validation evidence, and then update the closing status.
ASPICE assessment impactTurn evaluation gaps into verifiable improvement loops to keep open questions from disappearing from the report.
Completion checksCompletion of the action does not equate to validity; closure requires confirmation of verification results and authorization.
操作页 32树状视图与逐条评审Tree view and item review
Grid:Modified by 与协作修订
Grid:Modified by 与协作修订
功能入口操作页 32 · 逐条评审 → Modified by用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01显示 Modified by 列并核对操作人。
- 02确认编辑者拥有该项目及过程域权限。
- 03多人协作时等待记录锁释放或处理冲突提示。
- 04提交修改后检查修订号、评审日志和受影响的上下游记录。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: Modified by and collaborative revisions
Track the status of recent modifiers, workspaces, revisions, and edits.
Entry操作页 32 · 逐条评审 → Modified byPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Show the Modified by column and check the operator.
- 02Verify that the editor has permissions for the project and process area.
- 03Wait for record lock release or handle conflict prompts while multiple people collaborate.
- 04Check revision numbers, review logs, and affected upstream and downstream records after submitting modifications.
ASPICE assessment impactImprove accountability tracking and collaboration consistency for concluding changes.
Completion checksConcurrent edits cannot bypass locks and permissions; if there is a conflict, check the latest revision first.
操作页 33树状视图与逐条评审Tree view and item review
Grid:新增评估师备注
Grid:新增评估师备注
功能入口操作页 33 · 逐条评审 → Add assessor note用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01选择目标行并确认指标。
- 02点击 Add assessor note,填写事实、理由、限制或待核对事项。
- 03引用证据来源和定位;避免只写结论性短语。
- 04保存后检查备注是否出现在对应指标和历史记录。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: add an assessor note
Keeping a review description for an indicator that does not directly constitute an S/W/R.
Entry操作页 33 · 逐条评审 → Add assessor notePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select the target row and confirm the metric.
- 02Click Add assessor note to fill in the facts, reasons, restrictions, or items to be checked.
- 03Cite sources and positioning of evidence; avoid writing only concluding phrases.
- 04After saving, check whether the note appears in the corresponding indicator and history.
ASPICE assessment impactPreserve evaluation reasoning and context to support subsequent review and merging of results.
Completion checksNotes do not automatically change ratings; distinguish between facts, inferences, and to-dos.
操作页 34树状视图与逐条评审Tree view and item review
Grid:快捷键与记录类型工具栏
Grid:快捷键与记录类型工具栏
功能入口操作页 34 · 逐条评审 → Register new finding用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认焦点不在文本输入框,选中正确过程/BP。
- 02使用工具栏类型或应用标示的快捷键打开记录表单。
- 03填写发现、指标、证据、责任人和期限等字段。
- 04保存后检查记录类型、编号和评估工作区。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Grid: shortcuts and finding-type toolbar
Quickly add S/W/R/O/C/Q evaluation records from the grid.
Entry操作页 34 · 逐条评审 → Register new findingPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm that the focus is not on the text input box, check the correct process/BP.
- 02Use the shortcut keys indicated by the toolbar type or app to open the record form.
- 03Fill in the Discovery, Indicator, Evidence, Responsibility and Term fields.
- 04Check the record type, number and evaluation workspace after saving.
ASPICE assessment impactReduce documenting disconnections from the current subject of evaluation.
Completion checksThe shortcut keys are subject to the current interface description; confirm the selection line before saving.
操作页 35树状视图与逐条评审Tree view and item review
逐条评审详情:人工评分
逐条评审详情:人工评分
功能入口操作页 35 · Grid → 打开评审详情用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01选中待复核 BP/GP 并打开详情。
- 02查看 AI 候选、置信度、证据充分性和限制。
- 03在 Human final rating 选择审核员判断;无足够证据时保留保守结论。
- 04填写人工复核意见,保存并确认复核人/时间已更新。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Item review details: assessor rating
Maintain AI candidates separately from final reviewer scores.
Entry操作页 35 · Grid → 打开评审详情PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select Pending Review BP/GP and open the details.
- 02Review AI Candidates, Confidence, Sufficiency of Evidence, and Limitations.
- 03Select auditor judgment in the Human final rating; retain conservative conclusions when there is insufficient evidence.
- 04Fill in the manual review comments to confirm and confirm that the reviewer/time has been updated.
ASPICE assessment impactClear evaluator responsibilities; manual final scores are not automatically overridden by subsequent AI candidates.
Completion checksExplain the reasons for consent or reversal; AI confidence is not equal to the strength of evidence.
操作页 36树状视图与逐条评审Tree view and item review
逐条评审详情:理由与证据引用
逐条评审详情:理由与证据引用
功能入口操作页 36 · 评审详情 → Reason / References用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01核对评审意图与评分规则。
- 02编辑评分理由,说明实施情况、覆盖、结果、偏差和局限。
- 03在 Evidence references 中每行填写一个可定位引用。
- 04保存后逐条打开引用验证来源文件和定位仍有效。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Item review details: rationale and evidence references
Maintain scoring arguments and locatable evidence references.
Entry操作页 36 · 评审详情 → Reason / ReferencesPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the review intent and scoring rules.
- 02Edit the rationale for the rating, explaining implementation, coverage, results, deviations, and limitations.
- 03Fill in one locatable reference per line in Evidence references.
- 04After saving, open the reference verification source file one by one and the positioning is still valid.
ASPICE assessment impactWrite the basis of the conclusion as an argument that can be independently reviewed, rather than just retaining the grade code.
Completion checksEvidentiary sufficiency judgments should be reduced when references are invalid, generalized, or metadata only.
操作页 37树状视图与逐条评审Tree view and item review
逐条评审详情:S/W/R/O 发现编辑
逐条评审详情:S/W/R/O 发现编辑
功能入口操作页 37 · 评审详情 → Finding editor用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01点击 Add finding,选择记录类别。
- 02填写具体事实、目标实践、影响及来源,不写无法证实的推断。
- 03对于弱项补充最小关闭证据、责任人和期望日期。
- 04保存后确认该发现与正确指标、过程和证据引用绑定。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Item review details: edit S/W/R/O findings
Add or edit strengths, weaknesses, suggestions, observations, notes, and interview questions.
Entry操作页 37 · 评审详情 → Finding editorPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Click Add finding and select the record category.
- 02Fill in specific facts, target practices, impacts, and sources, without unsubstantiated inferences.
- 03Supplement Minimum Closing Evidence, Responsible and Desired Dates for Weaknesses.
- 04After saving, confirm that the discovery is bound to the correct metrics, process, and evidence references.
ASPICE assessment impactThe results of the process evaluation are formed into a unified record language and entered into the consolidation, rectification and reporting process.
Completion checksSeverity/status should be in accordance with organizational procedures; closure requires validation of evidence.
操作页 38树状视图与逐条评审Tree view and item review
Helix-style Item Directory 搜索与筛选
Helix-style Item Directory 搜索与筛选
功能入口操作页 38 · 逐条评审 → Item Directory用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01定位 Item Directory 的搜索框,输入 ID、标题、描述、源文件或 locator。
- 02使用 All items 下拉选择需要的对象类别/视图。
- 03检查可见数与总数,清空搜索后确认完整目录可恢复。
- 04只对已确认关系的项目检查右侧详情和证据内容。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Helix-style Item Directory search and filtering
Find the confirmed Helix/import entry in the overall project workbook.
Entry操作页 38 · 逐条评审 → Item DirectoryPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Locate the search box for Item Direct ory and enter the ID, title, description, source file, or locator.
- 02Use the All items drop-down to select the desired object category/view.
- 03Check the number of visible and total, and confirm that the complete directory can be recovered after clearing the search.
- 04Check the details and evidence content on the right side only for items with confirmed relationships.
ASPICE assessment impactCentrally browse confirmed entries, descriptions, and sources; candidates do not become confirmed because of search hits.
Completion checksConfirmation status, source version, and filter conditions are all checked.
操作页 39Reference item 与追溯Reference items and traceability
Helix-style Item Directory 条目编辑
Helix-style Item Directory 条目编辑
功能入口操作页 39 · Item Directory → 选中条目用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01从左侧 Confirmed item directory 选择目标条目。
- 02在右侧查看标题、来源、定位、关联过程与当前角色。
- 03修改被允许编辑的字段,保持原始 Helix ID、来源和定位不被覆盖。
- 04保存并重新打开条目验证内容;记录必要的理由和修改者。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Helix-style Item Directory item editing
Edit maintainable entry fields, source descriptions, evidence roles, or notes.
Entry操作页 39 · Item Directory → 选中条目PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select the target entry from the Confirmed item directory on the left.
- 02On the right side, view the title, source, positioning, association process, and current role.
- 03Modify the fields that are allowed to be edited, leaving the original Helix ID, source, and location unoverwritten.
- 04Save and reopen the entry validation content; record the necessary justification and modifiers.
ASPICE assessment impactCorrect the mapping or supplemental audit context while maintaining the distinction between source system objects and local evaluation content.
Completion checksEdits should not be disguised as modifications to the original Helix; keep source values distinguishable from manual modifications.
操作页 40Reference item 与追溯Reference items and traceability
Reference item 创建
Reference item 创建
功能入口操作页 40 · Item Directory → Create reference用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01点击 Create reference。
- 02输入稳定标识、标题、对象类型、源系统/URL 或定位信息。
- 03选择适当过程上下文与证据角色,并说明它支持的关系。
- 04保存后在目录中搜索新引用并验证链接/标识可用。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Create a reference item
Create references to external/related objects for tracing or correlating descriptions.
Entry操作页 40 · Item Directory → Create referencePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Click Create reference.
- 02Enter the stable identity, title, object type, source system/URL, or positioning information.
- 03Select the appropriate process context and evidence role and describe the relationship it supports.
- 04After saving, search the directory for new references and verify that links/logos are available.
ASPICE assessment impactBuild a lightweight reference index across tools to support relational analysis; referenced items are not automatic substitutes for originals or direct evidence.
Completion checksCheck the target access, version freeze point, and link stability.
操作页 41Reference item 与追溯Reference items and traceability
Reference item 编辑
Reference item 编辑
功能入口操作页 41 · Item Directory → 选择 Reference用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01搜索并选中已有 reference item。
- 02确认对象 ID 与外部链接指向正确记录。
- 03更新标题、locator、描述或关系说明,保留源系统标识。
- 04保存后重新搜索并打开引用,核查过滤状态与关联计数。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Edit a reference item
Correct the reference object title, positioning, relationship description, or status.
Entry操作页 41 · Item Directory → 选择 ReferencePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Search for and select an existing reference item.
- 02Confirm that the object ID and external link point to the correct record.
- 03Update the title, locator, description, or relationship description to preserve the source system identity.
- 04After saving, search again and open the reference to check the filter status and correlation count.
ASPICE assessment impactMaintain citation accuracy and locatability, and reduce the impact of invalid links on assessment traceability.
Completion checksDo not assume that invalid references are still valid; record versions and access restrictions.
操作页 42Reference item 与追溯Reference items and traceability
Reference item 类型筛选
Reference item 类型筛选
功能入口操作页 42 · Item Directory → item type 下拉用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01点击 All items 下拉。
- 02切换到 Reference 或目标类别,确认结果计数。
- 03从列表抽查 ID、来源和定位。
- 04清除过滤,复核其他类型是否仍存在并需处理。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Filter reference items by type
Filter the catalog by all entries or Reference types.
Entry操作页 42 · Item Directory → item type 下拉PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Click the All items drop-down.
- 02Switch to the Reference or Destination category to confirm the result count.
- 03Randomly check the ID, source, and location from the list.
- 04Clear filters and review if other types still exist and need to be addressed.
ASPICE assessment impactCheck references separately from requirements, tests, questions, or task entries.
Completion checksThe filter only changes the view, not the number of referenced objects or the confirmation state.
操作页 43Reference item 与追溯Reference items and traceability
Reference item 删除/解除关联
Reference item 删除/解除关联
功能入口操作页 43 · Item Directory → reference 操作用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01先确认目标 reference ID、关联指标和引用关系。
- 02按界面提供的编辑/移除操作处理;如无直接删除入口,使用解除关系或登记失效状态流程。
- 03检查关联指标、记录和溯源列表是否按预期更新。
- 04在操作日志或评估师备注中记录移除原因和替代来源。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Delete or unlink a reference item
Handle duplicate, incorrect, or invalid references.
Entry操作页 43 · Item Directory → reference 操作PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the target reference ID, the associated metric, and the reference relationship first.
- 02Follow the edit/remove action provided in the interface; if there is no direct deletion of the entrance, use the disengagement or registration invalid status process.
- 03Check that the associated metrics, records, and traceability lists are updated as expected.
- 04Record the reason for removal and alternate source in the action log or in the evaluator notes.
ASPICE assessment impactMaintain evidence link data quality and reduce duplication and failure of referrals.
Completion checksDeletion/deletion may affect historical conclusions; first check the baseline or project audit strategy.
操作页 44Reference item 与追溯Reference items and traceability
创建 Trace 关系
创建 Trace 关系
功能入口操作页 44 · 树状视图 / Trace Relations用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01选中源对象与目标对象,核对各自 ID、类型和版本。
- 02指定关系方向/关系类型并输入理由。
- 03检查目标对象是否处于正式范围;范围外关系标为关联观察。
- 04保存后从两端分别导航,验证双向追溯和 locator。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Create a trace relationship
Establish interpretable relationships between work products, requirements, implementations, or validation objects.
Entry操作页 44 · 树状视图 / Trace RelationsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select the source and target objects to check their IDs, types, and versions.
- 02Specify the relationship direction/relationship type and enter the reason.
- 03Check whether the target object is in the formal range; the out-of-scope relationship is marked as correlated observation.
- 04After saving, navigate separately from both ends to verify the two-way traceability and locator.
ASPICE assessment impactEnable requirements decomposition, work product relationships, and validation coverage to be analyzed.
Completion checksThe relationship type must be consistent with the actual semantics and cannot replace the consistency check with the presence of a link.
操作页 45Reference item 与追溯Reference items and traceability
证据链与关系互动反馈
证据链与关系互动反馈
功能入口操作页 45 · Trace card actions用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在关系卡片核对对象、过程、locator 和关系类型。
- 02使用 Note、Question、Like/Dislike 或 Browsing 等操作记录互动。
- 03在 Finding 可编辑入口补充正式发现,而非把反馈当成正式评分。
- 04回到记录/版本页确认操作已持久化且作用于正确关系。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Evidence-chain and relationship feedback
Record preferences/questions/browse feedback and review context for associated cards.
Entry操作页 45 · Trace card actionsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Check the object, process, locator, and relationship type on the relationship card.
- 02Record interactions using actions such as Note, Question, Like/Dislike, or Browsing.
- 03In Finding, add formal discovery to the editable portal, rather than treating feedback as a formal rating.
- 04Return to the Records/Versions page to confirm that the action has been persisted and is working on the correct relationship.
ASPICE assessment impactRetain collaborative discussion and relationship review leads to easily locate links that require manual re-examination.
Completion checksLightweight feedback is not a substitute for controlled records or manual scoring.
操作页 46合并、版本、关闭与报告Consolidation, versions, closure and reports
记录合并:评估师意见
记录合并:评估师意见
功能入口操作页 46 · 记录合并 / Consolidation用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入记录合并并按过程、指标或工作区过滤。
- 02逐条比较参与者评分、理由、引用和记录类型。
- 03解决冲突,保留不同观点及最终决定理由。
- 04由授权负责人确认合并稿并检查开放议题未被静默丢弃。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Record consolidation: assessor comments
Integrate the opinions of multiple evaluators on the same process practice.
Entry操作页 46 · 记录合并 / ConsolidationPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Enter the record merge and filter by process, metric, or workspace.
- 02Compare participant ratings, justifications, citations, and record types one by one.
- 03Resolve conflicts, retaining differing perspectives and the rationale for the final decision.
- 04The authorized person in charge confirms the merged draft and checks that the open topic has not been silently discarded.
ASPICE assessment impactForm consistent, traceable assessment results while preserving disagreement handling.
Completion checksScores cannot be averaged alone; key disagreements need to go back to the evidence and assessment methodology.
操作页 47合并、版本、关闭与报告Consolidation, versions, closure and reports
记录表单模板
记录表单模板
功能入口操作页 47 · 记录表单 / Forms用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Record forms,选择适用记录类型。
- 02阅读表单必填项和模板提示。
- 03填写事实描述、影响、证据、目标指标和跟进安排。
- 04保存草稿后检查编号、项目、过程和状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Record form templates
Select and complete the unified S/W/R/O/C/Q record form.
Entry操作页 47 · 记录表单 / FormsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Go to Record forms and select the applicable record type.
- 02Read the form's required fields and template tips.
- 03Fill in the factual description, impact, evidence, target metrics, and follow-up arrangements.
- 04After saving the draft, check the number, item, process, and status.
ASPICE assessment impactImprove record consistency and provide structured fields for subsequent review, rectification, and reporting.
Completion checksThe template does not automatically prove that the records are adequate; the original facts and sources are retained.
操作页 48合并、版本、关闭与报告Consolidation, versions, closure and reports
弱项关闭证据
弱项关闭证据
功能入口操作页 48 · 记录表单 / Weakness closure用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开目标 Weakness 记录,复核问题事实和关联指标。
- 02填写根因/风险、纠正措施、责任人和计划日期。
- 03执行后上传实施证据、复测结果和适用范围样本。
- 04由适当复核人确认有效性,再更新关闭状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Weakness closure evidence
Measures to define weaknesses, responsibilities, expiry time and evidence of effectiveness.
Entry操作页 48 · 记录表单 / Weakness closurePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the target Weakness record and review the issue facts and associated metrics.
- 02Fill in the Root Cause/Risk, Corrective Action, Responsible Person and Planned Date.
- 03After execution, upload the implementation evidence, retest results, and sample scope of application.
- 04Confirm the validity by the appropriate reviewer, and then update the closing status.
ASPICE assessment impactConnect the assessment findings to a verifiable corrective closed loop, supporting close access and follow-up audits.
Completion checksSimply filling in “Done” or submitting a screenshot of the action is not enough to prove that the issue was effectively closed.
操作页 49合并、版本、关闭与报告Consolidation, versions, closure and reports
版本历史与差异
版本历史与差异
功能入口操作页 49 · 版本 → Version history用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Version history 查看版本号、日期、来源和状态。
- 02选择需要比较的版本,重点看评级、证据关系、记录及人工复核变化。
- 03确认变化对应新增/移除证据、范围变更或评估师重新判断。
- 04必要时恢复或创建新版本,不覆盖不可变历史。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Version history and differences
Compare historical evaluation candidates, manual revisions, and evidence changes.
Entry操作页 49 · 版本 → Version historyPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Go to Version history to see the version number, date, source, and status.
- 02Select the version you want to compare, focusing on ratings, evidentiary relationships, records, and manual review changes.
- 03Confirm that the change corresponds to adding/removing evidence, changing scope, or rejudging by the evaluator.
- 04Restore or create new versions, if necessary, without overriding immutable history.
ASPICE assessment impactPreserve evaluation evolution and decision context to support change impact analysis.
Completion checksRestoring historical versions requires confirmation that the scope, evidence, and logs remain consistent.
操作页 50合并、版本、关闭与报告Consolidation, versions, closure and reports
创建评估版本
创建评估版本
功能入口操作页 50 · 版本 → 新建版本用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在执行新一轮评估前检查当前项目和正式范围。
- 02运行前确认输入指纹、证据集、PAM 版本和主要设置。
- 03生成新版本并为版本填写目的、来源或评审说明。
- 04打开版本详情核对所含评定和状态,确认旧版本仍可查阅。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Create an assessment version
Freeze a set of evaluation data to a comparable project version.
Entry操作页 50 · 版本 → 新建版本PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Check the current project and formal scope before performing a new round of assessments.
- 02Confirm input fingerprint, evidence set, PAM version and main settings before running.
- 03Generate a new version and fill in the purpose, source, or review description for the version.
- 04Open the version details and check the included ratings and status to confirm that the old version is still available.
ASPICE assessment impactAssociate conclusions with a snapshot of the scope and evidence at the time to support reproduction and discrepancy review.
Completion checksA version snapshot cannot replace an organization-approved configuration management baseline.
操作页 51合并、版本、关闭与报告Consolidation, versions, closure and reports
受控基线与多角色批准
受控基线与多角色批准
功能入口操作页 51 · 版本与基线 / Baseline用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认基线候选包含范围、证据、评定、记录、版本信息和清单摘要。
- 02由独立复核者完成复核并记录意见。
- 03由 Lead Assessor 或 Configuration Manager 按角色批准。
- 04核对批准状态、批准人、时间、基线摘要和任务轨迹。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Controlled baselines and multi-role approval
A controlled assessment baseline is formed by draft, independent review, and authorization approval.
Entry操作页 51 · 版本与基线 / BaselinePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm that the baseline candidate contains scope, evidence, ratings, records, version information, and a summary of the inventory.
- 02The independent reviewer completes the review and records the comments.
- 03Approved by Lead Assessor or Configuration Manager by role.
- 04Review the approval status, approver, time, baseline summary, and task trajectory.
ASPICE assessment impactLock the inputs and outputs of the evaluations being reviewed, and support configuration integrity and approval traceability.
Completion checksThe native mode and server mode capabilities are different; it must not be claimed that the native digest equals a digital signature.
操作页 52合并、版本、关闭与报告Consolidation, versions, closure and reports
关闭评估:证据和复核门禁
关闭评估:证据和复核门禁
功能入口操作页 52 · 总览 / 报告就绪与关闭门禁用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01从评审进度总览查看未复核、证据不足、开放弱项及当前阻断数。
- 02若当前构建提供 Close Assessment 面板,打开后逐项检查正式范围、评定复核、PA 门禁、映射校准、SUP 闭环和基线要求。
- 03按阻断项返回计划、范围、逐条评审、记录合并或版本阶段补齐证据。
- 04重新检查门禁并确认每项状态与证明材料;若当前构建未显示关闭入口,不要猜测深链接或强行改状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Close the assessment: evidence and review gates
Identify evidentiary gaps, unreviewed entries, and process scope issues before closing.
Entry操作页 52 · 总览 / 报告就绪与关闭门禁PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01From the review progress overview, check the number of unreviewed, insufficient evidence, open weaknesses, and current blocks.
- 02If the current build provides a Close Assessment panel, open it and check the formal scope, assessment review, PA access control, mapping calibration, SUP closed loop and baseline requirements one by one.
- 03Return to plan, scope, item-by-item review, record merge, or version stage to complete evidence by block.
- 04Re-check the access control and confirm each status and supporting materials; if the current construction does not show the closed entrance, do not guess the deep link or force the status change.
ASPICE assessment impactPrevent unreviewed or insufficiently substantiated conclusions from being erroneously marked as closed.
Completion checksThe ten stages of the current project sidebar do not include the independent Close stage; the close renderer exists, but the visible navigation entrance has not been verified this time.
操作页 53合并、版本、关闭与报告Consolidation, versions, closure and reports
关闭评估:授权与不可变日志
关闭评估:授权与不可变日志
功能入口操作页 53 · Close Assessment 面板(若当前构建暴露)用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认当前构建中可见的关闭入口、项目版本和当前操作人角色。
- 02阅读门禁清单,填写最终评估说明、限制和未解决事项处置。
- 03门禁通过且授权后才启用关闭按钮;点击前核对冻结当前正式结论的影响。
- 04关闭后检查状态、操作人、时间和日志;重新打开须按受控流程并保留原因。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Close the assessment: authorization and immutable log
The evaluation is closed by the authorizing role and the critical operational trajectory is preserved.
Entry操作页 53 · Close Assessment 面板(若当前构建暴露)PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the closing portal, project version, and current operator role visible in the current build.
- 02Read the access checklist and fill in the final assessment instructions, restrictions and unresolved matters for disposal.
- 03The close button is enabled only after the access control is approved and authorized; check the impact of freezing the current formal conclusion before clicking.
- 04Check status, operator, time and logs after closing; reopen must follow controlled process and keep reason.
ASPICE assessment impactForm the controlled assessment status and operation trajectory to provide input for the report readiness judgment.
Completion checksAt present, the visible navigation does not provide a separate Close stage; if the closed portal is not visible, the deployment administrator needs to confirm the version and permissions.
操作页 54合并、版本、关闭与报告Consolidation, versions, closure and reports
报告工作区与状态
报告工作区与状态
功能入口操作页 54 · 报告 / Reports用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开 Reports,确认项目编号、PAM 版本、范围和当前版本。
- 02查看模板列表、格式、版本和可用动作。
- 03先 Preview selected 或 Default Report 检查内容、候选标签和范围过滤。
- 04只有符合内部发布流程时才执行 Download 或 PDF 导出。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Report workspace and status
Select the template, preview the current data, and confirm the Draft/Formal output status.
Entry操作页 54 · 报告 / ReportsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open Reports and confirm the project number, PAM version, scope, and current version.
- 02View a list of templates, formats, versions, and available actions.
- 03Preview selected or Default Report first checks content, candidate tags, and scope filtering.
- 04Perform a Download or PDF export only if it complies with the internal publishing process.
ASPICE assessment impactOrganize verified scopes, ratings, evidence indexes, records, findings, and limitations into a deliverable view.
Completion checksThe sample status in the screenshot is Draft; the draft should not be presented externally as an approved official report.
操作页 55合并、版本、关闭与报告Consolidation, versions, closure and reports
报告模板类型与适用场景
报告模板类型与适用场景
功能入口操作页 55 · Reports → Report Templates用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01检查每个模板名称、文件类型与版本。
- 02选择详细评估、Trace 报告、Excel 追溯、TUV Issue Record 或 MBEAL Findings 等适用模板。
- 03展开模板内容目录,确认章节和数据集适合受众。
- 04预览并对照当前正式范围,确认语言、候选附录等设置。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Report template types and use cases
Select the DOCX, XLSX, PPTX macro and the management/detail scenario.
Entry操作页 55 · Reports → Report TemplatesPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Check each template name, file type, and version.
- 02Select the applicable template such as Detailed Assessment, Trace Report, Excel Traceability, TUV Issue Record or MBEAL Findings.
- 03Expand the template content catalog to confirm that chapters and datasets are appropriate for your audience.
- 04Preview and confirm the language, candidate appendix and other settings against the current official scope.
ASPICE assessment impactOrganize evidence and results by reporting purpose; different templates are not equivalent reports.
Completion checksReview the template controlled version and organization approval format before use.
操作页 56合并、版本、关闭与报告Consolidation, versions, closure and reports
报告模板语言与 AI 候选附录
报告模板语言与 AI 候选附录
功能入口操作页 56 · Reports → Template settings用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开模板行的设置图标。
- 02选择中文或英文。
- 03根据受众和透明度要求勾选/取消 AI candidates appendix。
- 04预览候选标记是否清楚区别于人工定稿,并检查中文术语与过程 ID。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Report template language and AI candidate appendix
Control the output language and whether an AI candidate record is attached.
Entry操作页 56 · Reports → Template settingsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Opens the Settings icon for the template row.
- 02Select Chinese or English.
- 03Check/uncheck AI candidates appendix based on audience and transparency requirements.
- 04Preview whether the candidate marker is clearly distinguished from manual finalization, and check the Chinese terminology and process ID.
ASPICE assessment impactLet the report distinguish between AI pre-assessment and manual confirmation.
Completion checksAI candidates shall not be written in the formal conclusion column without annotating the status and authorization.
操作页 57合并、版本、关闭与报告Consolidation, versions, closure and reports
预览所选模板
预览所选模板
功能入口操作页 57 · Reports → Preview selected用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01选择一个模板并点击 Preview selected。
- 02检查封面、范围、评级矩阵、详细结果、证据索引、发现与最终说明。
- 03重点检查待人工复核、关联过程不评级、未关闭弱项和报告 Draft 状态。
- 04发现问题后返回项目阶段修正,不通过手工改报告文本掩盖源数据问题。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Preview the selected template
Check report content, page order, tables, and conclusion boundaries before exporting.
Entry操作页 57 · Reports → Preview selectedPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Select a template and click Preview selected.
- 02Review the Cover, Scope, Rating Matrix, Detailed Results, Evidence Index, Findings, and Final Description.
- 03Focus on checking the pending manual review, not rating the correlation process, not closing weaknesses, and reporting Draft status.
- 04After finding the problem, return to the project stage for correction, and do not manually change the report text to mask the source data problem.
ASPICE assessment impactIdentify source data and template mapping discrepancies early to ensure reporting is traceable to project records.
Completion checksPreviews are not approvals; they are subject to document integrity and content spot checks after export.
操作页 58合并、版本、关闭与报告Consolidation, versions, closure and reports
DOCX / PPTX / XLSX 导出
DOCX / PPTX / XLSX 导出
功能入口操作页 58 · Reports → Download selected用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认选中的模板 radio 按钮和文件类型。
- 02点击 Download selected 或该模板下载图标。
- 03在本机下载目录检查文件名、格式、大小和打开结果。
- 04抽查表格、图片、页码、语言、候选标签及范围内过程列表。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
DOCX / PPTX / XLSX export
Generates an editable report file based on the selected template.
Entry操作页 58 · Reports → Download selectedPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the selected template radio button and file type.
- 02Click the Download selected or the template download icon.
- 03Locally download the directory to check the file name, format, size, and opening results.
- 04Randomly check tables, images, page numbers, languages, candidate tags, and list of processes in scope.
ASPICE assessment impactForm editable deliverables; local build success separated from server collaboration state.
Completion checksYou should not rely solely on download prompts to determine that a document has been rendered by Office or approved by a customer.
操作页 59合并、版本、关闭与报告Consolidation, versions, closure and reports
PDF 打印 / 保存
PDF 打印 / 保存
功能入口操作页 59 · Reports → PDF (print / Save as PDF)用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认预览为当前项目和正确版本。
- 02点击 PDF (print / Save as PDF)。
- 03在打印对话框选择 Save as PDF,检查纸张、方向、页眉页脚和比例。
- 04保存后查看 PDF 页数,并抽查首页、中间页、表格末页及免责声明。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Print / save as PDF
Print from the report preview or save as a fixed tab PDF.
Entry操作页 59 · Reports → PDF (print / Save as PDF)PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Make sure the preview is the current project and the correct version.
- 02Click PDF (print/Save as PDF).
- 03Select Save as PDF in the print dialog to check the paper, orientation, header footer, and scale.
- 04Once saved, review the PDF pages and spot-check the front page, middle page, end of form, and disclaimer.
ASPICE assessment impactFixed output layout for easy archiving and reading; PDF content remains subject to source data and current approval status.
Completion checksCheck pagination, truncation, fonts, and privacy information to not formally approve draft PDF.
操作页 60合并、版本、关闭与报告Consolidation, versions, closure and reports
评估结论与能力等级边界
评估结论与能力等级边界
功能入口操作页 60 · ASPICE 总览 / 知识库用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01核对当前 PAM 版本、评估元素集、评分规则和项目正式范围。
- 02逐个检查 BP/GP 人工结论及证据链,再按适用方法评估 PA。
- 03检查能力等级必要属性、否决规则和未满足项。
- 04在报告中说明样本范围、限制、复核人和最终审批状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Assessment conclusions and capability-level boundaries
Explain the relationship between the BP/GP score, PA summary, and CL conclusion.
Entry操作页 60 · ASPICE 总览 / 知识库PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the current PAM version, evaluation element set, scoring rules, and official scope of the project.
- 02Examine each BP/GP manual conclusion and chain of evidence, and evaluate the PA as applicable.
- 03Check the ability level required attributes, rejection rules, and unmet items.
- 04State the sample scope, limitations, reviewer and final approval status in the report.
ASPICE assessment impactAvoid confusing individual Practice scores, averages, or UI metrics with competency levels.
Completion checksApps are assessment support tools; formal ratings are determined by applicable methodology and authorized assessors.
操作页 61设置、专业工作台与附录Settings, specialist workspaces and appendices
设置:账户与本机权限
设置:账户与本机权限
功能入口操作页 61 · 设置 → Account用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开设置中的 Account 区。
- 02核对当前姓名、邮箱、角色和单机/服务器模式。
- 03本机单机模式使用本地档案;退出或切换前先确认工作区保存。
- 04服务器协作环境核对账号与项目角色,并用组织身份管理流程处理权限。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Settings: account and local permissions
View your current account, switch accounts, and understand local access.
Entry操作页 61 · 设置 → AccountPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the Account section in Settings.
- 02Check the current name, mailbox, role, and stand-alone/server mode.
- 03The local file is used in the stand-alone mode of the machine; confirm the workspace saving before exiting or switching.
- 04The server collaboration environment reconciles the account and project roles, and uses the organizational identity management process to process permissions.
ASPICE assessment impactDocument operator context; native mailbox keys do not prove organization identity or project authorization.
Completion checksShared workspace should not mistake account switching for project permission switching.
操作页 62设置、专业工作台与附录Settings, specialist workspaces and appendices
设置:AI 与本地解析
设置:AI 与本地解析
功能入口操作页 62 · 设置 → AI and local parsing用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开 AI and local parsing 设置。
- 02确认本机 Codex 复核状态及本地 bridge 地址。
- 03在未启用模型时使用内置规则;若启用,按组织政策核查实际发送内容。
- 04保存后使用 Check local bridge 或等效检测并检查返回状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Settings: AI and local parsing
View local parse and model review switches, run paths, and data boundaries.
Entry操作页 62 · 设置 → AI and local parsingPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the AI and local parsing settings.
- 02Confirm the status of the native Codex review and the local bridge address.
- 03Use built-in rules when the model is not enabled; if enabled, verify that the content is actually sent according to the organization's policy.
- 04After saving, use Check local bridge or equivalent detection and check the return status.
ASPICE assessment impactDocument parsing, scoring calculations, reporting, and exporting can be performed locally; AI output is still just a candidate.
Completion checksIdentify sensitive data transfer policies, model services, and log boundaries.
操作页 63设置、专业工作台与附录Settings, specialist workspaces and appendices
设置:多人协作与角色
设置:多人协作与角色
功能入口操作页 63 · 设置 → Collaboration用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在 Collaboration 配置模式、API endpoint 与工作区 ID。
- 02选择成员并分配 Lead Assessor、Assessor 或 Viewer 角色。
- 03给 Assessor 配置获授权的正式过程域范围,保存后检查 ACL。
- 04检查在线编辑状态、修订号、锁和服务健康;冲突时以服务器最新修订为准。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Settings: collaboration and roles
Configure collaboration endpoints, members, roles, process area permissions, and edit locks.
Entry操作页 63 · 设置 → CollaborationPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01In Collaboration configuration mode, API endpoint, and workspace ID.
- 02Select the relevant option and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 64设置、专业工作台与附录Settings, specialist workspaces and appendices
设置:Helix 证据护栏
设置:Helix 证据护栏
功能入口操作页 64 · 设置 → Helix / Evidence safeguards用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开 Helix 设置或顶部 Helix configuration。
- 02确认读取字段组涵盖身份、内容、状态、责任、追溯、版本和影响闭环。
- 03测试本地解析器,检查示例对象的字段及行定位。
- 04对每条记录保留目标过程直接性判断和评估师确认。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Settings: Helix evidence safeguards
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 64 · 设置 → Helix / Evidence safeguardsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant page and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Confirm the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04For each relevant record, preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 65设置、专业工作台与附录Settings, specialist workspaces and appendices
设置:PAM 与标准知识库
设置:PAM 与标准知识库
功能入口操作页 65 · ASPICE → Standard library用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开 Standard library。
- 02检查当前生产基线与适用 PAM/Assessment Elements。
- 03搜索目标过程,核对 BP 和 GP 文本与审核规则。
- 04发现版本差异时先确认配置权限和变更程序,不要直接编辑生产基线。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Settings: PAM and standards knowledge base
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 65 · ASPICE → Standard libraryPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant page and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 66设置、专业工作台与附录Settings, specialist workspaces and appendices
项目追踪工作台
项目追踪工作台
功能入口操作页 66 · 顶部 Track / 追踪用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Track / 追踪。
- 02选择项目或追踪视图并使用对象 ID/关系筛选。
- 03查看上游、下游及关系状态,打开源对象核对定位。
- 04对断链建立跟进记录,再返回项目逐项评审确认影响。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Project tracking workspace
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 66 · 顶部 Track / 追踪PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Select the relevant option and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04For each relevant record, preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 67设置、专业工作台与附录Settings, specialist workspaces and appendices
技术审查工作台
技术审查工作台
功能入口操作页 67 · 顶部 Review / 审查用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Review / 审查。
- 02按项目、审查状态或负责人筛选活动。
- 03核对审查对象、评审意见、缺陷和证据定位。
- 04将相关结论链接回正式项目过程与评估记录。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Technical review workspace
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 67 · 顶部 Review / 审查PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Filter the relevant records by preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Verify the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Map the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 68设置、专业工作台与附录Settings, specialist workspaces and appendices
缺陷与实践工作台
缺陷与实践工作台
功能入口操作页 68 · 顶部 Defects / Practice用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Defects 或 Practice。
- 02筛选项目、过程、状态和责任人。
- 03核对缺陷现象、根因、措施、验证和关闭证据。
- 04把可用于评估的受控条目引用到正式范围的 BP/GP。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Defects and practices workspace
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 68 · 顶部 Defects / PracticePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Verify the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 69设置、专业工作台与附录Settings, specialist workspaces and appendices
变更请求工作台
变更请求工作台
功能入口操作页 69 · 顶部 Change用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Changes / 变更。
- 02按状态、项目和影响范围筛选请求。
- 03核对请求 ID、原因、受影响配置项、批准和实施状态。
- 04检查复测和关闭证据,并把双向关系映射到 SUP.10/目标过程。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Change request workspace
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 69 · 顶部 ChangePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Filter the relevant records by preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Verify the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 70设置、专业工作台与附录Settings, specialist workspaces and appendices
最近项目与活动
最近项目与活动
功能入口操作页 70 · 顶部 Recent / 最近用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Recent。
- 02按更新时间找到目标项目或活动。
- 03核对对象类型和项目编号后打开。
- 04对重要决策仍从正式项目阶段和日志验证,不只依赖最近活动。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Recent projects and activity
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 70 · 顶部 Recent / 最近PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Filter the relevant records by preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Verify the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04For each relevant record, preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 71设置、专业工作台与附录Settings, specialist workspaces and appendices
计划中心
计划中心
功能入口操作页 71 · 顶部 Plans / 计划用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Plans。
- 02筛选当前项目或负责人。
- 03比较计划活动、截止时间、进度和阻塞原因。
- 04返回项目计划页更新正式活动和偏差记录。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Plans center
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 71 · 顶部 Plans / 计划PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Return to the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 72设置、专业工作台与附录Settings, specialist workspaces and appendices
空间与知识资料
空间与知识资料
功能入口操作页 72 · 顶部 Spaces / 空间用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01进入 Spaces。
- 02定位目标空间、资料或工作产品类别。
- 03核对版本、所有者、状态和权限。
- 04将适用资料以稳定链接或受控副本登记为项目证据。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Spaces and knowledge resources
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 72 · 顶部 Spaces / 空间PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Verify the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Map the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 73设置、专业工作台与附录Settings, specialist workspaces and appendices
Helix Issue 导出模板
Helix Issue 导出模板
功能入口操作页 73 · Item Directory → Export Issue Excel用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认目录记录过滤条件和可导出条目范围。
- 02点击 Export Issue Excel 并检查导出数量。
- 03打开导出文件,核对 Issue ID、标题、状态、责任、版本、关系和关闭字段。
- 04保留导出时间、项目、筛选条件及模板版本。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Helix Issue export template
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 73 · Item Directory → Export Issue ExcelPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Click the relevant control and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Open the relevant page and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 74设置、专业工作台与附录Settings, specialist workspaces and appendices
导出前质量检查
导出前质量检查
功能入口操作页 74 · 关闭门禁 + Reports用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认项目范围、PAM、实例和评估日期。
- 02检查所有正式评级人工确认、证据引用可定位、开放弱项如实呈现。
- 03检查报告批准人、版本/基线、草稿/正式状态与免责声明。
- 04导出后用相应 Office/PDF 阅读器抽查关键页和模板字段。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Pre-export quality checks
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 74 · 关闭门禁 + ReportsPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 75设置、专业工作台与附录Settings, specialist workspaces and appendices
数据边界与备份
数据边界与备份
功能入口操作页 75 · Settings / Local workspace用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01查看本机模式/服务器模式及当前服务 endpoint。
- 02核对原始证据是否留在审核终端,以及服务器同步哪些元数据。
- 03在重大评估活动前按组织策略导出或备份工作区。
- 04检查备份可读取性、访问控制、保存期限和恢复责任人。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Data boundaries and backup
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 75 · Settings / Local workspacePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Verify the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 76设置、专业工作台与附录Settings, specialist workspaces and appendices
常见问题:文件已上传但无条目
常见问题:文件已上传但无条目
功能入口操作页 76 · 范围与资料 / Troubleshooting用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01查看文件类型、解析状态、错误提示和文件大小。
- 02检查是否为扫描图、受密码保护、损坏或旧式二进制文件。
- 03尝试以原生格式重新导出,或通过 Paste text 补足受控内容。
- 04保留原始文件、人工定位和抽样结果;不以空解析结果作为无证据结论。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Troubleshooting: file uploaded but no items
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 76 · 范围与资料 / TroubleshootingPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 77设置、专业工作台与附录Settings, specialist workspaces and appendices
常见问题:追溯率低或门禁阻断
常见问题:追溯率低或门禁阻断
功能入口操作页 77 · 评审进度 / Quality gates用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01打开总览 Current blockers,查看具体阻断类别与数量。
- 02选择代表项进入树状视图或逐条评审。
- 03区分缺少证据、关系未确认、跨过程佐证不足和人工未复核。
- 04逐项处理后刷新总览并验证计数下降确由实际数据变化造成。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Troubleshooting: low traceability or blocked gates
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 77 · 评审进度 / Quality gatesPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Open the relevant page and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Select the relevant option and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksDo not treat a file name, link, status, AI suggestion, or coverage metric as a substitute for locatable direct evidence and an authorised assessor decision.
操作页 78设置、专业工作台与附录Settings, specialist workspaces and appendices
常见问题:报告与项目数据不一致
常见问题:报告与项目数据不一致
功能入口操作页 78 · Reports / Troubleshooting用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01核对报告预览所选项目和版本。
- 02清除报告或目录过滤,确认数据源范围。
- 03返回记录表单/评审详情确认保存状态与人工复核状态。
- 04重新预览并比较项目源字段、矩阵和报告附录。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Troubleshooting: report differs from project data
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 78 · Reports / TroubleshootingPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Verify the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Clear the current filter and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Return to the relevant area and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksDo not treat a file name, link, status, AI suggestion, or coverage metric as a substitute for locatable direct evidence and an authorised assessor decision.
操作页 79设置、专业工作台与附录Settings, specialist workspaces and appendices
审计活动与证据抽样复核
审计活动与证据抽样复核
功能入口操作页 79 · 项目日志 / Evidence review用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01从报告或评定记录选取代表样本。
- 02由未参与原始映射的复核者打开 source locator。
- 03检查文件版本、日期、批准、上下文、行级含义和被评实践相关性。
- 04记录抽查结果、偏差、补救动作和独立复核责任。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Audit activity and evidence sampling review
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 79 · 项目日志 / Evidence reviewPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Record the relevant facts and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 80设置、专业工作台与附录Settings, specialist workspaces and appendices
知识库与评分配置变更
知识库与评分配置变更
功能入口操作页 80 · ASPICE → Standard library / Admin用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认当前生产基线和变更请求。
- 02评估变更对已有项目、评分、报告与历史版本的影响。
- 03在测试项目中验证映射、评级护栏和导出模板。
- 04经授权批准后发布配置版本并保留变更说明和回退方案。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Knowledge-base and rating configuration changes
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 80 · ASPICE → Standard library / AdminPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 81设置、专业工作台与附录Settings, specialist workspaces and appendices
审核结束后的交接
审核结束后的交接
功能入口操作页 81 · Reports / Project closure用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01确认报告版本、审批状态、最终说明和证据索引。
- 02为每条开放弱项分配责任人、截止时间和验收证据。
- 03归档项目基线、原始证据索引、操作日志和报告。
- 04向项目团队说明工具输出边界、未解决限制及后续复核计划。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Handover after assessment completion
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 81 · Reports / Project closurePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 82设置、专业工作台与附录Settings, specialist workspaces and appendices
功能入口速查:项目和评估阶段
功能入口速查:项目和评估阶段
功能入口操作页 82 · 项目侧栏 / Lifecycle用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01Review progress:总览指标与阻断。
- 02Plan assessment:活动、参与者、访谈和样本。
- 03Scope & evidence:正式范围、上传、解析和角色。
- 04Tree view / Grid view:追溯关系与逐条评分;Consolidation、AI review、Forms、Version history、Reports 依次用于合并、候选复核、记录、版本和输出。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Quick reference: project and assessment stages
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 82 · 项目侧栏 / LifecyclePurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksDeployment-specific labels, permissions, configuration, and source-data boundaries must be checked against the current build before use.
操作页 83设置、专业工作台与附录Settings, specialist workspaces and appendices
功能入口速查:全局工作区
功能入口速查:全局工作区
功能入口操作页 83 · 主导航用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01Audit / ASPICE:评估项目列表与标准过程评估。
- 02Custom:安全或组织自定义审核方案。
- 03Recent / Apps / Plans / Spaces:快速访问与跨项目资源。
- 04Track / Review / Defects / Practice / Change:专业追踪、审查、缺陷、实践与变更工作台;Settings 管理本机/协作配置。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Quick reference: global workspaces
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 83 · 主导航PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 84设置、专业工作台与附录Settings, specialist workspaces and appendices
术语表:BP / GP / PA / CL
术语表:BP / GP / PA / CL
功能入口操作页 84 · 附录 / 术语用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01BP:特定过程的基本实践,检查过程特定实施。
- 02GP:通用实践,检查过程管理和制度化相关要求。
- 03PA:能力属性及其对应通用实践集合。
- 04CL:能力等级;需按适用模型的要求综合判断,不由单个 BP 分数推算。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Glossary: BP / GP / PA / CL
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 84 · 附录 / 术语PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
操作页 85设置、专业工作台与附录Settings, specialist workspaces and appendices
术语表:证据链与记录类型
术语表:证据链与记录类型
功能入口操作页 85 · 附录 / 术语用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01Direct:目标过程直接实施证据;Corroborating:关系或治理佐证;Index-only:仅定位/索引。
- 02S/W/R/O/C/Q:优势、弱项、建议、观察、备注、问题/访谈问题。
- 03Candidate:候选映射或 AI 意见;Confirmed/Reviewed:经审核员确认。
- 04Baseline:按角色复核批准的受控项目快照;Draft:未通过发布/关闭状态。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Glossary: evidence chains and record types
Review the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Entry操作页 85 · 附录 / 术语PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactReview the relevant project context, source locator, evidence role, assessor decision, and saved status before continuing.
Completion checksDeployment-specific labels, permissions, configuration, and source-data boundaries must be checked against the current build before use.
操作页 86设置、专业工作台与附录Settings, specialist workspaces and appendices
安全与隐私操作检查
安全与隐私操作检查
功能入口操作页 86 · 所有模块 / 安全检查用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01上传前按项目授权审查文件内容和个人/客户敏感信息。
- 02确认当前本机或远程模式及网络端点。
- 03检查证据是否会被发送到已配置的模型或协作后端。
- 04导出/共享前检查文件属性、隐藏数据、报告范围和收件人。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Security and privacy checklist
Supports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Entry操作页 86 · 所有模块 / 安全检查PurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 02Confirm the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 03Check the relevant records and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
- 04Review the relevant workflow and preserve the source locator, version, evidence role, assessor rationale, and resulting status.
ASPICE assessment impactSupports a controlled and traceable assessment workflow while keeping source evidence, candidate mappings, and assessor-confirmed conclusions distinguishable.
Completion checksDeployment-specific labels, permissions, configuration, and source-data boundaries must be checked against the current build before use.
操作页 87设置、专业工作台与附录Settings, specialist workspaces and appendices
发布版本与本手册适用范围
确认当前 JEAuditFlow 6.8.0 构建、能力版本、角色权限、功能开关和组织程序,再按本手册执行正式操作。
功能入口操作页 87 · 关于 / Version用途按项目上下文完成该功能,并保留评估证据和审计记录。
操作步骤
- 01在应用帮助、设置或构建信息中确认 JEAuditFlow 6.8.0 和 AuditFlow capability 12.3.0。
- 02核对当前部署的角色权限、PAM、模板、服务端连接和功能开关是否与本手册的适用范围一致。
- 03发现界面、服务或流程差异时记录版本、配置和差异原因,不要强行套用旧截图或旧门禁。
- 04正式评估前确认组织程序、评估师职责与独立性要求,并将差异纳入项目记录。
对 ASPICE 评估的影响本页只改变项目工作流数据、候选关系或记录状态,不自动扩大正式范围、不自动提升评级,也不替代评估师对直接证据的确认。
完成核对项目和正式范围正确;来源定位、版本和责任信息可回溯;结果已保存且遗留问题没有被隐藏
Release version and manual applicability
Confirm the current JEAuditFlow 6.8.0 build, capability version, role permissions, feature flags and organisational procedure before operating.
Entry操作页 87 · 关于 / VersionPurposeComplete the operation while preserving assessor evidence and audit records.
Steps
- 01Confirm JEAuditFlow 6.8.0 and AuditFlow capability 12.3.0 in Help, Settings or build information.
- 02Check that deployment roles, PAM, templates, service connections and feature flags match this manual's applicability.
- 03Record release, configuration and reason when the interface or workflow differs; do not force an old screenshot or gate onto the current build.
- 04Before a formal assessment, confirm organisational procedures, assessor responsibility and independence, and record any deviation.
ASPICE assessment impactKeeps the operating procedure, evidence interpretation and closure gates tied to the actual release and organisational controls.
Completion checksRelease, capability, role, deployment configuration and applicability have been recorded and reviewed.