Navigating ASPICE Audits: Evidence Collection, Work Product Baselines & Tool Qualification

Abstract: A tactical guide for engineering organizations preparing for official VDA QMC ASPICE audits, focusing on artifact baseline management, reviewer independence, and tool chain validation.

1. The Assessment Protocol Official Automotive SPICE assessments evaluate selected projects against specific process attributes. Assessors conduct structured interviews with system architects, software developers, test leads, and configuration managers, cross-referencing verbal claims against immutable repository artifacts.

2. Baseline Management (SUP.8) A common non-conformance is uncontrolled artifact modification. Engineering baselines must be established at each project milestone (Gate Releases). Once a baseline is frozen, changes require formal Engineering Change Requests (SUP.10) with impact analyses evaluating safety, schedule, and architectural implications.

3. Tool Qualification (ISO 26262 / ASPICE SUP.1) Compilers, static analyzers, and test execution harnesses must undergo tool qualification (TCL1 to TCL3) to verify that tool faults cannot introduce undetected defects into safety-critical automotive binary code.