Capability Maturity Model (CMM)

1
Capability Maturity Model (CMM)

• http//www.sei.cmu.edu/cmm/cmm.html

2
5 Levels of Maturity

• Level 1 Ad Hoc, unpredictable, high risk (70)
• Level 2 Repeatable from project to project
  (15)
• Level 3 Defined better performance (lt10)
• Level 4 Very predictable, sign.improvement
• in one dimension (lt5)
• Level 5 Significant improvement across all
  dimensions (lt1)

3
CMM Questionaire

• http//www.sei.cmu.edu/pub/documents/94.reports/pd
  f/sr07.94.pdf
• A set of questions to find out what level of
  maturity your company is at.

4
CMM

• At what level is most of the industry ?
• What is the minimum level where you see some kind
  of repeatable performance from project ot project
  ?
• At what level do you see significant improvement
  across all dimensions ?

5
Frequent Misconceptions

• Compliance with CMM standards doesnt guarantee a
  good product or vice-versa.
• A mature process does not cost more money

6
Specific CMM requirements

• Systems Security Engineer CMM
• http//www.sse-cmm.org/metric/metric.htm