๐ŸŽฏ
CMMI v2.0 โ€” Capability Maturity Model Integration
CMMI Institute (ISACA) ยท Version 2.0 ยท Process Improvement Framework
Interactive study manual covering maturity levels, capability levels, 20 practice areas, two views, appraisal methods, and 38 flash cards.
5 Maturity Levels 3 Capability Levels 20 Practice Areas 4 Categories 2 Views 38 Flash Cards
CMMI v2.0 is a process improvement framework used by organisations to build and improve their capabilities in software development, services, and supply chain management. It provides a structured approach to improving performance by defining what good processes look like โ€” not prescribing exactly how to implement them.
5
Maturity Levels
3
Capability Levels
20
Practice Areas
4
Categories
2
Views (Staged/Cont.)
๐Ÿ— CMMI v2.0 โ€” The 4 Categories
๐Ÿ”จ Doing
Processes that directly produce value โ€” requirements, design, development, testing, and delivery.
๐Ÿ“Š Managing
Planning, monitoring, and controlling work โ€” project management, risk, and supplier management.
โš™๏ธ Enabling
Infrastructure that supports doing and managing โ€” process management, measurement, and decision making.
๐Ÿ“ˆ Improving
Continuous improvement of performance โ€” process and performance management, causal analysis.
CMMI v2.0 key changes from v1.3: Simplified language, removed process area groupings, introduced Practice Groups, added Performance Factor concept, stronger focus on business value, and clearer connection between capability and performance outcomes.
Maturity Levels describe the Staged View of CMMI โ€” the overall organisational maturity based on which practice areas have been implemented. Each level builds on the previous. Maturity Level applies to the organisation, not individual processes.
5
Optimising
Optimising โ€” Continuous Improvement
The organisation continuously improves its processes based on quantitative understanding of business objectives and performance data. Innovations are identified and deployed systematically.
Causal Analysis Innovation Continuous improvement ~Top 5% of orgs
4
Quantitatively Managed
Quantitatively Managed โ€” Predictable
Processes are controlled using statistical and quantitative methods. Performance is predictable. Sub-processes are identified and managed to achieve specific quality and performance objectives.
Statistical control Quantitative objectives Predictable performance
3
Defined
Defined โ€” Standardised Organisation-Wide
Processes are well-characterised, understood, and described in standards, procedures, tools, and methods. The organisation has a standard set of processes tailored for each project.
Organisational standards Tailoring guidelines Process assets
2
Managed
Managed โ€” Project Level
Projects are planned, monitored, and controlled. Requirements are managed. Processes are planned and performed according to policy. Work products are controlled and maintained.
Project planning Requirements mgmt Configuration mgmt
1
Initial
Initial โ€” Ad Hoc
Processes are unpredictable, poorly controlled, and reactive. Success depends on individual heroics. Commitments are often not met. Common starting point for most organisations.
Ad hoc Unpredictable Hero-dependent
๐Ÿ“Š Industry reality: Most organisations benchmark at Maturity Level 2โ€“3. Level 4 and 5 organisations are rare โ€” primarily found in aerospace, defence, and high-reliability software sectors where process predictability is mission-critical.
CMMI v2.0 defines 20 Practice Areas organised into 4 categories. Each Practice Area contains a set of practices that represent good process behaviour. Use the filter to browse by category.
๐Ÿ”จ Doing
Requirements Development & Management (RDM)
Elicit, develop, analyse, and manage stakeholder and product requirements throughout the lifecycle
Goal: Requirements are defined, agreed, and maintained
๐Ÿ”จ Doing
Process Quality Assurance (PQA)
Provide objective insight into processes and their associated work products through evaluations and audits
Goal: Non-compliances are identified and addressed
๐Ÿ”จ Doing
Verification & Validation (VV)
Ensure selected work products meet requirements (verification) and that the product meets user needs in its intended environment (validation)
Goal: Defects identified early, product meets purpose
๐Ÿ”จ Doing
Technical Solution (TS)
Design, develop, and implement solutions to requirements โ€” covering architecture, detailed design, and product component implementation
Goal: Solutions are designed and built to requirements
๐Ÿ”จ Doing
Product Integration (PI)
Assemble product components, ensure they function together, and deliver the integrated product
Goal: Components integrate successfully into the product
๐Ÿ”จ Doing
Peer Reviews (PR)
Identify and eliminate defects in work products early using structured peer examination of artifacts
Goal: Defects found before testing โ€” lower rework cost
๐Ÿ“Š Managing
Estimating (EST)
Develop and maintain estimates for planning purposes โ€” size, effort, cost, and schedule
Goal: Realistic estimates based on data
๐Ÿ“Š Managing
Planning (PLAN)
Establish and maintain plans that define project activities โ€” work breakdown, schedule, resources, risk
Goal: Realistic plans agreed with stakeholders
๐Ÿ“Š Managing
Monitor & Control (MC)
Understand project progress and performance against plans โ€” take corrective action when needed
Goal: Deviations identified and managed promptly
๐Ÿ“Š Managing
Risk & Opportunity Management (RSK)
Identify and manage risks that threaten project performance โ€” and opportunities that could improve it
Goal: Risks mitigated, opportunities exploited
๐Ÿ“Š Managing
Supplier Agreement Management (SAM)
Manage the acquisition of products and services from suppliers โ€” contracts, performance, and acceptance
Goal: Suppliers deliver as agreed
โš™๏ธ Enabling
Configuration Management (CM)
Establish and maintain integrity of work products using configuration identification, control, status accounting, and audits
Goal: Work products are controlled and traceable
โš™๏ธ Enabling
Decision Analysis & Resolution (DAR)
Analyse possible decisions using formal evaluation processes with documented criteria
Goal: Decisions based on structured analysis
โš™๏ธ Enabling
Measurement & Analysis (MA)
Develop and sustain a measurement capability used to support management information needs
Goal: Data-driven decision making
โš™๏ธ Enabling
Organisational Training (OT)
Develop skills and knowledge to perform roles effectively โ€” training needs analysis, delivery, effectiveness
Goal: People have the skills required
โš™๏ธ Enabling
Governance (GOV)
Establish and maintain process governance including senior management sponsorship and accountability
Goal: Leadership drives process improvement
โš™๏ธ Enabling
Implementation Infrastructure (II)
Establish and maintain the infrastructure needed to plan, implement, and sustain process improvement
Goal: Improvement is supported and sustainable
๐Ÿ“ˆ Improving
Process Management (PCM)
Establish and maintain organisational process assets and deploy standard processes across the organisation
Goal: Standard processes tailored and deployed
๐Ÿ“ˆ Improving
Process Asset Development (PAD)
Define, develop, and improve process assets โ€” standard process definitions, guidelines, and templates
Goal: Process assets drive consistent execution
๐Ÿ“ˆ Improving
Managing Performance & Measurement (MPM)
Maintain a quantitative understanding of the performance of selected processes to achieve quality and performance objectives
Goal: Quantitative performance targets achieved
๐Ÿ“ˆ Improving
Causal Analysis & Resolution (CAR)
Identify causes of defects and other problems โ€” and take action to prevent them from recurring
Goal: Root causes eliminated, not just symptoms
In CMMI v2.0, Capability Levels apply to individual Practice Areas in the Continuous View. Unlike Maturity Levels (which are organisational), Capability Levels let you assess and improve one practice area at a time โ€” useful for targeted improvement.
0
Incomplete
The practice area is not performed or does not achieve its purpose. Practices are missing or only partially done.
1
Initial
Practices in the practice area are performed, but not consistently. Success depends on individual skill โ€” not repeatable process.
2
Managed
Practices are planned, monitored, and adjusted. Work products are controlled. Results are repeatable within the project or team.
3
Defined
Practices are tailored from organisational standards. They are well understood, documented, and consistently applied across the organisation.
4
Quantitatively Managed
Statistical methods are used to understand process variation. Performance is predicted within quantitative bounds.
5
Optimising
Continuous improvement is built into the process. Innovations are proactively sought and deployed. Root causes of variation are eliminated.
โšก Staged vs Continuous: Use Maturity Levels (Staged) for benchmarking and appraisals against the whole organisation. Use Capability Levels (Continuous) for targeted process improvement in specific areas โ€” more flexible and practical for most organisations.
CMMI v2.0 provides two representations โ€” two different ways to look at the same framework. Both cover the same 20 practice areas and practices, but they organise and measure improvement differently.
๐Ÿ›
Staged View โ€” Maturity Levels
Organises practice areas into 5 predefined levels. All practice areas in a level must be achieved to claim that maturity level.
โ†’ Used for organisational benchmarking
โ†’ Supports CMMI appraisals (SCAMPI)
โ†’ Provides a clear roadmap with milestones
โ†’ Better for executive communication
โ†’ "We are a CMMI Level 3 organisation"
โ†’ Required for government / DoD contracts
๐ŸŽฏ
Continuous View โ€” Capability Levels
Allows each practice area to be rated independently on a 0โ€“5 capability scale. Organisations choose which areas to improve.
โ†’ Used for targeted improvement
โ†’ Flexibly focus on highest-value areas
โ†’ Permits different levels per practice area
โ†’ Better for internal improvement programmes
โ†’ "Our RDM is CL3, our SAM is CL2"
โ†’ More common in commercial organisations
Which to use? If your goal is certification, contract eligibility, or external benchmark โ€” use the Staged View and pursue a formal SCAMPI appraisal. If your goal is internal improvement โ€” use the Continuous View to focus investment where it matters most.
๐Ÿ“‹ SCAMPI Appraisal Methods
SCAMPI A Most rigorous โ€” official appraisal that produces a maturity/capability rating. Required for DoD certification. Led by CMMI Institute-authorised Lead Appraiser.
SCAMPI B Less formal โ€” identifies areas of strength and weakness. Does not produce an official rating. Used for gap analysis and improvement planning.
SCAMPI C Lightest weight โ€” quick assessment for readiness check. Reviews documentation and interviews. Useful early in improvement journey.
CMMI is often compared to ISO 15504 (SPICE), ISO 33000, and other process improvement frameworks. Understanding the differences helps organisations decide which framework โ€” or combination โ€” best fits their context.
DimensionCMMI v2.0ISO 15504 / 33000COBIT 2019ISO 9001
FocusProcess capability & maturity for software/systems/servicesProcess assessment standard (aligned with CMMI)IT governance & managementQuality management system
Levels5 Maturity Levels or 0โ€“5 Capability Levels0โ€“5 Capability Levels (similar to CMMI)0โ€“5 Capability LevelsCertified / Not certified
ScopeSoftware, systems engineering, services, supply chainSoftware and systems processesAll enterprise IT governanceAny industry quality system
CertificationSCAMPI appraisal โ€” organisational ratingISO assessmentCOBIT Foundation / Design certISO 9001 certification (audit)
Best forSoftware/systems orgs seeking process maturityInternational process assessmentIT governance, risk, complianceGeneral quality management
Industry useDefence, aerospace, software, IT servicesAutomotive (ASPICE), safety-criticalEnterprise IT, regulated industriesManufacturing, services, ISO-regulated
Relationshipโ€”ISO 15504 was influenced by CMMIComplementary โ€” CMMI for processes, COBIT for governanceCMMI can co-exist with ISO 9001
CMMI + COBIT: The two frameworks are highly complementary. COBIT defines governance and management objectives (what needs to be achieved). CMMI defines how to improve the processes that achieve them (how mature is the execution). Many large enterprises apply both.
38 flash cards covering CMMI v2.0 key concepts, practice areas, and exam-relevant knowledge. Click a card to flip it.
Card 1 of 38
Question
Tap to reveal answer
Answer