A Methodological Approach to Auditing Software Engineering Practices in the Energy Sector

Abstract

The growing complexity of software systems in the energy sector, particularly those involved in the management of distributed and renewable energy resources, requires the introduction of structured and domain-specific auditing methodologies. Ensuring the reliability, safety, and security of software products in this context is critical due to the increasing dependence of industrial and energy infrastructures on automated and software-driven solutions. This paper proposes a comprehensive methodological approach to auditing software engineering practices tailored to the needs of the energy sector. The developed methodology is based on an integrated audit model that defines Process, Product, and Safety and Security layers to enable a holistic and systematic evaluation. Furthermore, it incorporates a structured audit process aligned with quality management principles, covering all essential stages from planning to follow-up. A key feature of the approach is the mathematical formalization of audit activities, which includes models for estimating effort, measuring audit coverage, analysing nonconformities, and evaluating process maturity. These models enhance the objectivity and analytical rigor of audits, enabling organizations to quantify and compare results across projects and audit cycles. The proposed methodology was developed based on a thorough analysis of international standards, including ISO/IEC 12207, ISO/IEC 25010, IEC 61508, IEC 62443, and ISO 9001, and aims to bridge the gap between general software engineering requirements and domain-specific needs related to functional safety, cybersecurity, and operational reliability. The results of this research contribute to the advancement of audit methods in the field of software engineering and provide a scientifically substantiated and practically oriented tool for improving the quality, security, and compliance of software systems used in the energy sector.