Enhancing Software Quality Assurance with CMMI & ISO 9000

1. Software Quality Processes – Part II CSSE 376, Software Quality Assurance Rose-Hulman Institute of Technology March 19, 2007

2. Acknowledgments • Some material was taken from the August 2004 SW-CMM Maturity Profile http://www.sei.cmu.edu/appraisal-program/profile/pdf/SW-CMM/2004augSwCMM.pdf

3. Outline • CMMISM – continued • ISO 9000

4. 5 4 3 2 1 The CMMI Maturity Levels(from last time) Optimizing Optimizing Focus on processimprovement Quantitatively Managed Process measuredand controlled Defined Defined Process characterized for the organization and is proactive Managed Process characterized for projects and is often reactive Performed Process unpredictable, poorly controlled and reactive

5. CMMI Process Areas

6. Process Areas • Process Areas (PAs) are clusters of relatedpractices performed collectively to achieve a set of goals. • They are the major building blocks in establishing the process capability of an organization. • Each process area has been defined to reside at a given maturity level.

7. Process Areas at Level 2 • Requirements Management • Project Planning • Project Monitoring and Control • Supplier Agreement Management • Measurement and Analysis • Process and Product Quality Assurance • Configuration Management

8. Requirements Development Technical Solution Product Integration Verification Validation Organizational Process Focus Organizational Process Definition Organizational Training Integrated Project Management Integrated Supplier Management Risk Management Decision Analysis and Resolution Organizational Environment for Integration Integrated Teaming Process Areas at Level 3

9. Process Areas at Level 4 • Organizational Process Performance • Quantitative Project Management

10. Process Areas at Level 5 • Organizational Innovation and Deployment • Causal Analysis and Resolution

11. Standard CMMI Appraisal Method for Process Improvement (SCAMPI) • Led by authorized Lead Appraiser • Tailorable to organization and model scope • Source selection appraisals or process monitoring are tailoring options of SCAMPI

12. Interviews Instruments Presentations Documents Data Collection

13. Reported Maturity Profiles

14. Organization Categories

15. Organization Type

16. Organization Size

17. USA vs. Non-USA

18. Number of Reported Appraisals

19. Maturity Trends

20. For More Information on CMMI http://sei.cmu.edu/cmmi http://sei.cmu.edu/sema

21. ISO 9000

22. Background What is ISO? • International Organization for Standardization • Formed in 1946 to promote standards that would facilitate international communication and trade • Headquartered in Geneva, Switzerland • Has over 90 member countries • If a country adopts a standard, they may or may not legislate its use • The United States is represented by the American National Standards Institute

23. Background (continued) • What is ISO 9000? • A series of international quality standards (not just for software) • As of 2007, over 100 countries, including the U.S. and the European Community (EC), has adopted ISO 9000 • ISO 9000 is extremely popular in the EC, so companies wanting to do business in Europe need to strongly consider ISO 9000

24. Philosophy ISO 9000 standards place emphasis on • the customer's quality requirements and • applicable regulatory requirements while aiming to • enhance customer satisfaction and • achieve continual improvement of its performance in pursuit of these objectives.

25. Registration • ISO 9000 Registration Certificates • Obtained through third-party assessment • That is, ISO accredits third-parties as ISO 9000 registrars • Unlike CMMI, there are no maturity levels, only “certified” or “not certified” • Initial registration commonly takes a year to 18 months • The registrar conducts an initial on-site visit, and then (after registration) does a follow-up visit every six months

26. For More Information on ISO 9000 http://www.iso.org/iso/en/iso9000-14000/index.html