CMMI in Software - Capability Maturity Model Integration

[Marc]

Subject: Re: Q: CMMI in Software/Sheehan/Pfrang
Date: Mon, 24 Aug 1998 10:43:46 -0600
From: ISO Standards Discussion

From: (Doug Pfrang)
Subject: Re: Q: CMMI in Software/Sheehan/Pfrang

The CMMI can be found at: SEI Home

As the name suggests, Capability Maturity Model deals with the "maturity," or the level of control, of the software development processes of a firm; i.e., a greater level of "maturity" means (roughly) a greater level of control.

This relates to ISO-9000 in that the Model provides a possible framework for implementing process improvement: first you determine which level of "maturity" your firm currently fits into (according to the detailed descriptions of each level), and then you look at the description of the next higher level to see what you must improve in your existing processes to bring your firm up to the standards of the higher level. This analysis helps you plan and prioritize a series of logically sequenced process improvements related to your software development activities. Accordingly, you can use the CMMI as a tool to:
- provide guidance for quality planning,
- improve design control procedures,
- identify potential corrective and preventive actions,
- develop agenda items for management review meetings,
- etc.

Thus, ISO-9000 tells you "what" you have to do in your quality system, CMMI gives you a tool to help you figure out "how" to do it.

-- Doug Pfrang


Subject: Re: Q: CMMI in Software/Sheehan/Lessman
Date: Mon, 24 Aug 1998 11:02:30 -0600
From: ISO Standards Discussion
From: Robert Lessman
Subject: Re: Q: CMMI in Software/Sheehan/Lessman

For an excellent comparision of the requirements of CMMI and the requirements of ISO 9000 in the area of software deveolopment, I would urge you to read this well-written site:

MKS Web Site - Link was: /solution/si/2134.htm - CMMI Information

Although SEI and ISO have no direct affiliation, they are both seeking very similar goals. The ISO 9000-3 Guidlines for Software Development can be viewed as a subset of CMMI requirements. The objectives are strikingly similar. ISO 9000 has more to do with supplier review criteria, as its perspective. The CMMI perspective is to define good project managment in-house and is not really intended as a supplier review model.

The owners of the CMMI model - See the SEI Home Page
tele: 703 818-5137
--
Robert Lessman, (ASQ) CQA #16411

[Marc]

One more:

From: Pat Dey
Subject: Re: Q: CMM in Software/Sheehan/Dey

The CMM is a model of the maturity of a software development organization. Its development was sponsored by the US Department of Defense, to promote process improvement, to give organizations a strategy for doing so, and to provide a measure of organizational maturity.

Using the CMM to define software process improvement strategy is an excellent way of building an ISO 9001 software development organization, because it gives a rationale for prioritizing the action plan. Each level defines a set of practices, and you mature by addressing the levels in numeric order. For example, it places Reviews at level 3 because most organizations starve reviews of the necessary reviewing time until they understand planning and tracking (time) properly, practices they introduce in level 2.

There have been one or two papers comparing CMM and ISO 9001. Very broadly and crudely, the CMM includes more guidance on software development detail, whilst ISO 9001 has a broader business basis. ISO 9001 certification slews across CMM levels 2 and 3.

The European SPICE initiative is working on merging these standards in order to get the best from both.

Hope this helps.
Pat

EDIT NOTE: Site has undergone major revision.

[This message has been edited by Marc Smith (edited 29 December 1999).]

[Marc]

Here's another source for CMM info:

Subject: Re: CMM/ISO in Software/Sheehan/Deibler
Date: Thu, 10 Sep 1998 11:44:16 -0600
From: ISO Standards Discussion

From: Bill Deibler <ssqc@concentric.net> Subject: RE: CMM/ISO in Software/Sheehan/Deibler

> From: "John Sheehan"

Can anyone on the list please give me some information regarding to "CMM" in software development and how (if at all), it relates / compares to ISO9000. I understand that CMM stands for Capability Maturity Model. I am looking for as much info. as I can get on the subject, and as usual with any plea for help I am in a mad rush for it.

> Thanks > John Sheehan --------------------

Hi John,

Bob Bamford and I recently had an article published that directly relates to your inquiry. The topic is hybrid multi-model software process assessments (CMM/ISO) and was published in CrossTALK - The Journal of Defense Software Engineering magazine. The article and other software process improvement articles are freely available online from the publishers of CrossTALK.

An abstract on the paper and links to the article follow:

Abstract --------

Hybrid Multi-Model Assessment (HM2) - When the CMM Meets ISO 9001 Robert C. Bamford and William J. Deibler II

Faced with governments transitioning to commercial standards and with business pressures to expand into new lines of business, many software engineering organizations are faced with adapting CMM - and ISO 9001-based systems for compliance with the other model. At the same time, many small and medium-sized software engineering organizations are exploring methods to exploit these models - ISO 9001 and the CMM - for process definition and improvement. While significant work has been done in defining methods for implementing each model, there is a lack of cost-effective tools and methods to evaluate and compare the models for selecting the most appropriate model or for planning the transition between the models.

This article outlines a strategy and methods for employing formal appraisals to determine which model - or which elements from either model - offer the most value for a particular software engineering organization. The article is illustrated with examples from the authors experiences in guiding software engineering organizations in examining and selecting the most appropriate model for software development.

Keywords ISO 9001, CMM, Assessment, Process Assessment, Process Improvement, Comparison, Process, Standards, Software, Software Development

CrossTalk Magazine
The main page listing the articles for September.

Dead link: http://www.stsc.hill.af.mil/crosstalk/1998/sep/bamford.pdf - The PDF URL for the article

Dead link: http://www.stsc.hill.af.mil/crosstalk/1998/sep/bamford.html - The HTML URL for the article

Hope you find the article useful. You might also want to check out an article we published in IEEE COMPUTER in October 1993 on comparing and contrasting the CMM and ISO 9001 for software. It's in the standards section of the magazine.

Sincerely, Bill
Bill Deibler <ssqc@concentric.net>

[Marc]

I've been reading thru a number of these CMM articles. They have some good thoughts for manufacturing, as well. Anyone else out there look thru any of the articles?

Does anyone have articles or documents regarding companies' journey through the levels of SW-CMM (Capability Maturity Model for Software)? Articles or docus which include the costs, the people directly invloved, and the time it took could help immensely. HELP!

WHICH ARE THE AGENCIES WHO CALIBRATE THE SOFTWARE ONE HAS DEVELOPED? WHAT CERTIFICATE THEY PROVIDE? WHAT ARE COMMERCIALS INVOLVED?

[Marc]

Originally posted by tong:

Does anyone have articles or documents regarding companies' journey through the levels of SW-CMM (Capability Maturity Model for Software)? Articles or docus which include the costs, the people directly invloved, and the time it took could help immensely. HELP!

I found a few back a year or more ago - but can't recall them. Have youy been to the CMM site? Go to www.sei.cmu.edu/cmm/cmms/cmms.html

[Marc]

Originally posted by PRASHANT:

WHICH ARE THE AGENCIES WHO CALIBRATE THE SOFTWARE ONE HAS DEVELOPED? WHAT CERTIFICATE THEY PROVIDE? WHAT ARE COMMERCIALS INVOLVED?

Please, don't 'shout' with all capitals. Hurts my eyes!

As far as I understand it, your company 'calibrates' its own software. There is no agency I am aware of which provides 'certificates'.