CMM vs. ISOCMM vs. ISO

David S. CraftDavid S. Craft

AgendaAgenda

• Who Am I

• EDS

• CMM

• ISO

• Similarities And Differences

Who Am I

VISTA Volunteer

Industrial Engineer

Chief Industrial EngineerManager Production Planning & Control

Inventory Control Manager

Shift SupervisorMaterials Manager

Consultant

Project Manager

Information Specialist, Senior

Team Leader

Managing Consultant Solutions Consulting Engineering and Manufacturing Services

Our Vision

EDS … the recognized global leader in ensuring clients achieve

superior value in the Digital Economy

Our Vision

EDS … the recognized global leader in ensuring clients achieve

superior value in the Digital Economy

•By delivering the right strategies, solutions and services

•Through superior execution on a sustained basis

•By delivering the right strategies, solutions and services

•Through superior execution on a sustained basis

Some of Our MilestonesSome of Our Milestones

1962: EDS founds the IT services industry.

1967: EDS opens its first data center.

1987: EDS completes EDSNET, one of the world’s largest privately owned digital networks.

1995: The Government of South Australia awards EDS the world’s first whole-of-government IT outsourcing contract.

1997: The Commonwealth Bank Group and EDS sign the world’s largest financial sector outsourcing contract.

2000: EDS wins landmark Navy/Marine Corps Intranet project – the largest federal IT contract in history.

2001: EDS becomes the No. 1 provider of global IT infrastructure services to the airline industry.

2002: EDS celebrates its 40th anniversary.

SEI & CMM

SEI

CMM

Software Engineering Institute

Capability Maturity Model

• Federal government cannot distinguish between competing bids for software development

• Early 1980’s - Federal Government (Congress) awards a contract to establish the Software Engineering Institute (SEI) at Carnegie Mellon University (sponsored by the DOD)

• 1988 - SEI begins work on a Process Maturity Framework for judging a company’s capability to produce software

• The Process Maturity Framework evolves into the Capability Maturity Model

• August 1991 – SW-CMM Version 1 released

• SE-CMM developed by the Enterprise Process Improvement Collaboration (EPIC)

• 1992 - CMM Version 1.1 released

• 1999 - Begin developing CMMI

SEI History

The SEI's goals in developing CMMs includeThe SEI's goals in developing CMMs include

• Addressing software and disciplines that have an impact on software

• Providing integrated process improvement reference models

• Building broad community consensus

• Harmonizing with standards

• Enabling efficient improvement across disciplines

Copyright 2002 by Carnegie Mellon UniversityURL: http://www.sei.cmu.edu/cmm/cmms/cmms.html Last Modified: 24 July 2002

The Software Engineering Institute (SEI) is a federally funded research and development center sponsored by the U.S. Department of Defense and operated by Carnegie Mellon University.

Optimizing (5)Process Change Management

Technology InnovationDefect Prevention

ContinuousProcess

Improvement

Defined (3) Peer Reviews

Intergroup Coordination Software Product Engineering

Integrated Software Management Training Program

Organization Process DefinitionOrganization Process Focus

EngineeringProcess

Repeatable (2)Software Configuration Management

Software Quality AssuranceSoftware Subcontract Management

Software Project Tracking & OversightSoftware Project Planning

Requirements Management

ProjectManagement

Initial (1)Heroes

Managed (4)Quality Management

Process Measurement and Analysis

Productand Process

Quality

Software processes are characterized as chaotic

Basic project management processes are established

Software processes for management and engineering

are integrated

Detailed measures are used to control the process

Continual process improvement is

enabled

CMM Structure

Common Features

ProcessCapability

Infrastructureor Activities

Key Practices

Goals

Implementation orInstitutionalization

Maturity Levels

Key Process Areas

Organized by

Contain

Contain

Indicate

Achieve

Address

Describe

Common FeatureCommitment to Perform

Repeatable

Maturity LevelLevel 2 - Repeatable

Key Process AreaRequirements Management

Process Capability

Goals

Requirements allocated to software are controlled to establish a baseline for

software engineering and management use

Project follows a written organizational policy for managing the system

requirements allocated to software

Use of Automated Tracking Tool

Address

Contains

Organized by

Contain

CMM Structure ExampleCMM Structure Example

Key PracticeAllocated Requirements

Are Documented

• SW-CMM CMM for Software

• P-CMM People CMM

• SA-CMM Software Acquisition CMM

• SE-CMM Systems Engineering CMM

• IPD-CMM Integrated Product Development

• CMMI Capability Maturity Model Integrated

Different CMM’s

CMMI (CMM IntegrationCMMI (CMM Integration

• CMMI is a combination of :

1. Capability Maturity Model for Software (SW-CMM v2.0 draft C

2. Electronic Industries alliance Interim Standard (EIA/IS) 731

3. Integrated Product Development Capability Maturity Model (IPP-CMM) v 0.98

ISO

ISO

International Organization For Standardization

Why ISO instead of IOS?

X Began with British Military standards

X ISO organization was established in 1947

X Headquartered in Geneva, Switzerland

X Currently composed of 133 National Standard Bodies

X As of 12/31/00 there are 13,544 International Standards

embodied in 430,608 pages of English text

ISO History

What are standards?What are standards?

Standards are documented agreements containing technical specifications or other precise criteria to be used consistently as rules, guidelines, or definitions of characteristics, to ensure that materials, products, processes and services are fit for their purpose.

For example, the format of the credit cards, phone cards, and "smart" cards that have become commonplace is derived from an ISO International Standard. Adhering to the standard, which defines such features as an optimal thickness (0,76 mm), means that the cards can be used worldwide.

International Standards thus contribute to making life simpler, and to increasing the reliability and effectiveness of the goods and services we use.

Last modified 2002-07-17

Where are the StandardsWhere are the Standards

Sector Standards Pages

Generalities, infrastructure and sciences 1,269 39,007

Health, safety and environment 577 16,511

Engineering technologies 3,330 126,724

Electronics, information technology and telecommunications

2,168 135,264

Transport and distribution of goods 1,494 35,057

Agriculture and food technology 877 17,293

Materials technology 3,617 78,266

Construction 286 8,123

Special technologies 118 2,790

Total 13,736 459,035

• The ISO family includes:

– 9000:1994 – Guidelines for selection and use

– 9001:1994 – Quality assurance in design/development, production, installation and servicing

– 9002:1994 – Quality assurance in production, installation, and servicing

– 9003:1994 – Quality assurance in final inspection and test

– 9004:1994 – Quality management and quality system elements

• Which Standards Are We Dealing With

– Specifically 9001 & 9002:

Which ISO Standards

Quality System Documentation

ProceduresProcedures

Records/DocumentationRecords/Documentation

QualityQualityManualManual

Work/JobWork/JobInstructionsInstructions

Level 1Level 1DefinesDefines

Approach andApproach andResponsibilityResponsibility

Level 2Level 2DefinesDefines

Who, What, WhenWho, What, When

Level 3Level 3Answers HowAnswers How

Level 4Level 4Results: shows that the Results: shows that the

system is operatingsystem is operating

ISO 9001:2000 StructureISO 9001:2000 Structure

4. Quality Management System4.1 General requirements4.2 Document requirements

5. Management Responsibility5.1 Management commitment5.2 Customer focus5.3 Quality policy5.4 Planning5.5 Responsibility, authority,

communication5.6 Management review

6. Resource Management6.1 Provision of resources6.2 Human resources6.3 Infrastructure6.4 Work environment

7. Product realization7.1 Planning of product realization7.2 Customer-related processes7.3 Design and development7.4 Purchasing7.5 Production and service provision7.6 Control of monitoring and

measuring devices

8. Measurement, Analysis & Improvement8.1 General8.2 Monitoring and measurement8.3 Control of nonconforming product8.4 Analysis of data8.5 Improvement

• Both are based on processes

• Say what you do; do what you say

• Record information for later use and analysis

• Require strong management support to succeed

• Provide a structured approach to improvement

• Require an outside audit for “certification”

• Both are refined/improved over time

Similarities

Differences

• Outwardly focused

• Minimum requirements with required continuous improvement

• Manufacturing, Software, Services, etc.

• Registration Document

• Continual Audits

• Inwardly focused

• Explicit Continuous Improvement

• Software

• No Documentation

• No follow up audits

ISO 9000 SW - CMM

X CMM - Continued revisions to basic model and move to more

integrated models

X ISO - ISO 2000 replaces the 9000 series

X Companies are demanding ISO registration

X More companies are demanding CMM certification,

especially the government

What’s The Future

So What!!So What!!

Why should you care about CMM or ISO?

Why is it important?

How might it impact your personally?

Status ReportsStatus Reports

CMM 2002aug.pdf

ISO survey10thcycle.pdf

Additional InformationAdditional Information

• For CMMwww.sei.cmu.edu/cmm/cmms/cmms.html

• For ISOwww.iso.ch/iso/en/isoonline.frontpage

eds.comeds.com