Upload
devavrat-singh
View
41
Download
2
Tags:
Embed Size (px)
Citation preview
PRESENTED BY
DEVAVRAT SINGH10697210
ISO 9001 vs CMM
Outline
Comparison between ISO 9000/9001 and CMM
Relationship between Quality & Productivity and Process
History and Definition - CMMHistory and Definition – ISO 9001Accenture Company OverviewConclusion
Why process is important?
Three main characteristics of a project are its cost, schedule and quality. Productivity determines the cost and schedule.
Productivity and Quality (Q&P) can be viewed as the main goal of the project.
Q&P of an organization depends on three factors: process, people and technology.
Quality Triangle
People
Process Technology
Q & P
CMMI History
Federal government cannot distinguish between competing bids for software development
Early 1980’s - Federal Government (Congress) awards a contract to establish the Software Engineering Institute (SEI) at Carnegie Mellon University (sponsored by the DOD)
1988 - SEI begins work on a Process Maturity Framework for judging a company’s capability to produce software
The Process Maturity Framework evolves into the Capability Maturity Model (CMM)
August 1991 – SW-CMM Version 1 released SE-CMM developed by the Enterprise Process Improvement Collaboration
(EPIC) 1992 - CMM Version 1.1 released 1999 - Begin developing CMMI (CMM Integrated) 2002 – CMMI SE/SW/IPPD/SS Version 1.1 introduced 200? - CMMI Version 1.2 Released
Capability Maturity Model
CMM defines five maturity levels.
Project Risk
Productivity and Quality
1 Initial
2 Repeatable
3 Defined
4 Managed
5 Optimizing
Heroes
ProjectManagement
EngineeringProcess
Product and Process Quality
Change ManagementDefect Prevention
Disciplined
Standard,Consistent
Predictable
ContinuouslyImproving
1- Initial
2- Repeatable
3- Defined
4- Managed
5- Optimizing
Project Management
Engineering Process
Product and Process quality
Continuous Improvement
Requirements Management
Software Project Planning
Software Project Tracking
Software Subcontractor Management
Software Configuration Management
Software Quality Assurance
Organizational Process Focus
Organizational Process Definition
Training Program
Integrated Software Management
Software Product Engineering
Inter-group Coordination
Peer Reviews
Quantitative process Management
Software Quality Management
Technology Change Management
Process Change Management
Defect Prevention
Level Focus Area Key Process Area
Began with British Military standards
ISO organization was established in 1947
Headquartered in Geneva, Switzerland
Currently composed of 148 National Standard
Bodies and 2,981 technical bodies
As of 12/31/05 there are 15,649 International
Standards embodied in 573,494 pages of
English text
ISO History
What are standards?
Standards are documented agreements containing technical specifications or other precise criteria to be used consistently as rules, guidelines, or definitions of characteristics, to ensure that materials, products, processes and services are fit for their purpose.
For example, the format of the credit cards, phone cards, and "smart" cards that have become commonplace is derived from an ISO International Standard. Adhering to the standard, which defines such features as an optimal thickness (0,76 mm), means that the cards can be used worldwide.
International Standards thus contribute to making life simpler, and to increasing the reliability and effectiveness of the goods and services we use.
The ISO family includes: ISO 9000:2000 – Quality Management Systems –
Fundamentals and vocabulary ISO 9001:2000 – Quality Management Systems -
Requirements ISO 9004:2000 – Quality Management Systems –
Guidelines for performance improvement ISO 19011 – Guidelines on quality and/or
environmental management systems auditing. ISO 10012 Measurement control system
Which ISO Standards
Quality System Documentation
ProceduresProcedures
Records/DocumentationRecords/Documentation
QualityQualityManualManual
Work/JobWork/JobInstructionsInstructions
Level 1Level 1DefinesDefines
Approach andApproach andResponsibilityResponsibility
Level 2Level 2DefinesDefines
Who, What, WhenWho, What, When
Level 3Level 3Answers Answers
HowHow
Level 4Level 4Results: shows that Results: shows that
the system is the system is operatingoperating
ISO 9001:2000 Structure
4. Quality Management System4.1 General requirements4.2 Document requirements
5. Management Responsibility5.1 Management commitment5.2 Customer focus5.3 Quality policy5.4 Planning5.5 Responsibility, authority,
communication5.6 Management review
6. Resource Management6.1 Provision of resources6.2 Human resources6.3 Infrastructure6.4 Work environment
7. Product realization7.1 Planning of product realization7.2 Customer-related processes7.3 Design and development7.4 Purchasing7.5 Production and service provision7.6 Control of monitoring and
measuring devices
8. Measurement, Analysis & Improvement8.1 General8.2 Monitoring and measurement8.3 Control of nonconforming product8.4 Analysis of data8.5 Improvement
Companies have ISO 9001 certification
AIR LIQUIDEALLIED SIGNAL AEROSPACEAMERICAN PACIFIC CORPORATIONAMERICAN TANK & FABRICATING CO.
ACCENTURE SERVICES PVT. LTD.APPLIED MATERIALS, INC.ARCO CHEMICAL COMPANYASHLAND CHEMICAL CO.ASME INTERNATIONALASQAT&TBABCOCK & WILCOXBACARDI-MARTINI CANADA, INC
BAKER HUGHES MINING TOOLS, INC.BARCLAYS BANK, PLC.BASF CORPORATIONBAXTER DIAGNOSTICS, INC.BAYER CORPORATIONBECKMAN INSTRUMENTSBELL SOUTH TELECOMMUNICATIONS, INC.BELL TECHNOLOGIESBOEINGBOEING AEROSPACE OPERATIONSBOSE CORPORATION
Companies have ISO 9001 certification
BRISTOL- MYERS SQUIBBBRITISH STANDARDS INSTITUTION, INC.BURLINGTON PERFORMANCE WEARCAMPBELL SOUP COMPANYCANADA GENERAL STANDARDS BOARDCARRIER CORPORATION CATERPILLAR, INC.CHRYSLER CORPORATIONCIBA VISIONCREATIVE LABSCUTLER & HAMMER
DAIMLER CHRYSLERDIEBOLD, INC.DOW CHEMICAL DRAVODUNLOP TIRE CORPORATIONDURACELLE.I. DUPONTEASTMAN KODAKEATON CORPORATIONENTELA, INC., QSRDERICSSON, INC.ESSILOR OF AMERICA, INC.ESTEE LAUDER COMPANIESEXXON CHEMICAL COMPANY
Companies have ISO 9001 certification
EXXON COMPANY, INC.FISERVFORDFUJITSU COMPUTER PRODUCTS
GE AIRCRAFT ENGINESGILLETTE GOODYEAR TIREGOODYEAR TIRE & RUBBER COMPANYHARBISON-WALKER REFRACTORIESHASBRO USA GAME MFG.HEWLETT PACKARD
HYUNDAI ELECTRONICS AMERICAIBMINGERSOLL-RAND INTL. SALES INC
KOHLERKRUPP WERNER & PFLEIDERER CORPORATIONLOCKHEED MARTIN AIR TRAFFIC MANAGEMENTLOCKHEED MARTIN CANADALOCKHEED MARTIN ENERGY SYSTEMS
The criteria for getting ISO 9000/9001 certification
Review the current operation and business structure of your facility.
Provide an introductory session in ISO 9000/9001 requirements and instruct in the preparation of job descriptions and work instruction style documentation.
Audit the completed job descriptions and work instructions and prepare the structure for the policies and procedures manual.
Write the first draft of the policy and procedures manual to meet ISO 9000/9001 standards incorporating the existing documented work instructions.
The criteria for getting ISO 9000/9001 certification
Submit first draft of manuals for review and approval. Prepare final draft of documentation and audit manuals for compliance to ISO 9000/9001 requirements.
Train staff on the policies, procedures and work instruction manuals and receive feedback as to the accuracy of the documentation.
Conduct a simulated third party audit of the implemented Quality System utilizing qualified auditors.
Make final adjustments to the Quality System to prepare for certified third party audit.
Both require the organization be explicit about what their processes and quality systems are
Say what you do; do what you say The organization records and tracks data for
objective analysis Require strong management support to
succeed Provide a structured and measured approach
to quality improvement Require an outside audit for “certification” Both are refined/improved over time
Similarities
Differences - ISO 9000/9001 and CMM
ISO 9000 SW-CMMI
Outwardly focused Inwardly focused
Minimum requirements with implied continuous improvements
Explicit continuous quality improvement
Not specific to any one industry or service
Software focus
Registration Document No documentation
Continual Audits No follow up audits
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Definition
A set of documents dealing with quality
systems that can be used for external quality
assurance purposes.
The Capability Maturity Model describes the
principles and practices underlying software process maturity and
intended to help software organizations improve the maturity of their software process.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Development By The International Standards Organization
By The Software Engineering Institute
Written for Wide range of industry Software industry
Documents Abstract Detailed
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Pages long Only 5 pages Over 500 pages
Concept To follow a set of standards to make success repeatable
To emphasize on achieving and improving its process continuously
Documents
On the customer/supplier
relationship to reduce a customer’s risk in
choosing a supplier.
The supplier to improve the internal software
process.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Management
Responsibility
Quality policy is defined, documented,
understood, implemented, and maintained; that
responsibilities and authorities for all
personnel specifying, achieving, and
monitoring quality be defined.
Quality policy is primarily addressed in
Software Quality Assurance.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Quality System
Requires documented quality system, included
procedures and instructions, be
established.
Procedures are addresses and assured in Software
Quality Assurance. Software product Engineering tasks should be defined,
integrated, and consistently performed.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Contract Review
Contracts are reviewed to determine whether the
requirements are adequately defined,
agree with the bid, and can be implemented.
Documented and reviewed and the
missing requirements are clarified.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Design Control
Requires that procedures to control and verify the design be established. This includes planning
design activities, identifying inputs and outputs, verifying the
design, and controlling design changes.
The life cycle activities on requirements
analysis, design, code, and test are described in
Software Product Engineering.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Document Control
Requires that the distribution and modification of documents be controlled.
The configuration management practices
characterizing document control are described in Software Configuration
Management.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Purchasing
Requires that purchased products conform to
their specified requirements. This
includes the assessment of potential
subcontractors and verification of purchased
products.
This is addressed in Software Subcontract
Management.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Purchaser-Supplied Product
Requires that any purchaser-supplied
material be verified and maintained.
Describing the use of purchased software. It does so in the context of identifying off-the-shelf or
reusable software as part of planning.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Product Identification
and Trace ability
Requires that the product be identified and
traceable during all stages of production,
delivery, and installation.
Software Product Engineering states the
specific need for consistency and trace
ability between software work products.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Process Control
Requires that production processes be defined and planned. This includes carrying out production
under controlled conditions, according to documented instructions.
The procedures defining the software production process are distributed
throughout the key process areas in the various Activities
Performed practices.
Servicing Requires that servicing activities be performed
as specified.
Intended to be applied in both the software development and
maintenance environments.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Training
Requires that training needs be identified and
that training be provided, since selected
tasks may require qualified personnel.
Records of training are maintained.
Identified in the training and orientation practices in the Ability to Perform
common feature.
ISO 9000/9001 and CMM
ISO 9000/9001 CMM
Quality Records
Requires that quality records be collected,
maintained, and dispositioned.
Specifically pertinent to this clause are the testing and peer review practices in Software Product
Engineering.
Accenture
In this presentation Accenture is used as the model company to study CMM in practice.
Accenture subscribes to a number of industry standards to guide quality initiatives, such as Capability Maturity Model Integration (CMMI®), People Capability Maturity Model (People CMM®), Information Technology Infrastructure Library (ITIL®), ISO® 9001, ISO® 14001, ISO® 20000, ISO® 27001, eSourcing Capability Model for Service Providers (eSCM-SP), and Lean Six Sigma®.
Accenture has been an active user of the Capability Maturity Model (CMM®) family of models since the early 1990s. We maintain CMMI® Level 5, the highest level, in our largest Global Delivery Network locations. Approximately 90 percent of delivery center employees currently work in Level 5 centers, which include the Accenture Delivery Centers in India, China, Philippines, Spain, and Brazil. In addition, we have implemented CMMI across our entire US Public Services Operating Unit and achieved the first Level 4 for an organization of that size and scope.
Accenture is also one of the few organizations in the world to have achieved People Capability Maturity Model (People CMM®) Level 5. We are pursuing People CMM® across our Global Delivery Network and have been independently appraised at Level 5 in our centers in India, China, and the Philippines.
Accenture has an active role assisting the Software Engineering Institute (SEI) in building and improving the CMM's. Accenture was one of the first Transition Partners with SEI, has provided input into CMM development and continues to be a licensed SEI Partner.
Accenture
ISO StandardsAccenture is an active user of ISO® standards, including ISO® 9001, ISO® 14001, and ISO® 27001. Note: see the section on ITIL® for our use of ISO® 20000
ISO 9001® specifies requirements for a quality management system. Accenture has been ISO® 9001 certified since 1991. Accenture currently has ISO 9001 certification covering services delivered in Europe, Africa, and Japan.
ISO® 14001 is an environment standard that is based on having good environment management practices, such as recycling and power management. Accenture has multiple global initiatives geared towards an effort to “green” our business operations, and has used ISO® 14001 to assist with those initiatives. Accenture has achieved global ISO® 14001 certification.
ISO® 27001, which specifies requirements applicable to information security management and the related ISO® 27002, are subscribed to by Accenture as part of its security management activities globally. Certification is achieved where appropriate. Accenture has certified Delivery Centers in India, China, the Philippines, Warwick (UK), Prague (Czech Republic), Hof and Kronberg (Germany), Bucharest (Romania), and Warsaw (Poland).
CMM®, CMMI® and P-CMM® are registered trademarks of Carnegie Mellon University.ISO® is a registered trademark of the International Organization for Standardization.ITIL® is a registered trademark of the U.K. Office of Government Commerce.Six Sigma® is a registered trademark of Motorola Inc.
Accenture
Questions