ISO 9001 vs CMM

PRESENTED BY DEVAVRAT SINGH 10697210

Outline

Comparison between ISO 9000/9001 and CMM Relationship between Quality & Productivity and

Process History and Definition - CMM History and Definition ISO 9001 Accenture Company Overview Conclusion

Why process is important?

Three main characteristics of a project are its cost,

schedule and quality. Productivity determines the cost and schedule.

Productivity and Quality (Q&P) can be viewed as the

main goal of the project.

Q&P of an organization depends on three factors:

process, people and technology.

Quality Triangle

Process Q&P

Technology

People

CMMI History

Federal government cannot distinguish between competing bids for software development Early 1980s - Federal Government (Congress) awards a contract to establish the Software Engineering Institute (SEI) at Carnegie Mellon University (sponsored by the DOD) 1988 - SEI begins work on a Process Maturity Framework for judging a companys capability to produce software The Process Maturity Framework evolves into the Capability Maturity Model (CMM) August 1991 SW-CMM Version 1 released SE-CMM developed by the Enterprise Process Improvement Collaboration (EPIC) 1992 - CMM Version 1.1 released 1999 - Begin developing CMMI (CMM Integrated) 2002 CMMI SE/SW/IPPD/SS Version 1.1 introduced 200? - CMMI Version 1.2 Released

Capability Maturity Model

CMM defines five maturity levels.
Productivity and Quality
Change Management Defect Prevention
Product and Process Quality Engineering Process Project Management Heroes

5 Optimizing
4 Managed 3 Defined 2 Repeatable 1 Initial
Continuously Improving Predictable Standard, Consistent Disciplined

Project Risk

Level

Focus Area

Key Process Area Technology Change Management

5- Optimizing

Continuous Improvement

Process Change Management Defect Prevention

4- Managed

Product and Process quality

Quantitative process Management Software Quality Management Organizational Process Focus Organizational Process Definition Training Program Integrated Software Management

3- Defined

Engineering Process

Software Product Engineering

Inter-group Coordination Peer Reviews

Requirements Management
Software Project Planning Software Project Tracking 2- Repeatable Project Management Software Subcontractor Management Software Configuration Management Software Quality Assurance 1- Initial

ISO History
Began with British Military standards ISO organization was established in 1947 Headquartered in Geneva, Switzerland Currently composed of 148 National Standard Bodies and 2,981 technical bodies

As of 12/31/05 there are 15,649 International Standards

embodied in 573,494 pages of English text

What are standards?

Standards are documented agreements containing technical specifications or other precise criteria to be used consistently as rules, guidelines, or definitions of characteristics, to ensure that materials, products, processes and services are fit for their purpose.

For example, the format of the credit cards, phone cards, and "smart" cards that have become commonplace is derived from an ISO International Standard. Adhering to the standard, which defines such features as an optimal thickness (0,76 mm), means that the cards can be used worldwide.
International Standards thus contribute to making life simpler, and to increasing the reliability and effectiveness of the goods and services we use.

Which ISO Standards

The ISO family includes:

ISO 9000:2000 Quality Management Systems Fundamentals and vocabulary ISO 9001:2000 Quality Management Systems Requirements ISO 9004:2000 Quality Management Systems Guidelines for performance improvement ISO 19011 Guidelines on quality and/or environmental management systems auditing. ISO 10012 Measurement control system

Quality System Documentation

Level 1 Quality Manual

Defines Approach and Responsibility

Level 2 Procedures Work/Job Instructions

Defines Who, What, When

Level 3
Answers How Results: shows that the system is operating

Level 4

Records/Documentation

ISO 9001:2000 Structure

4. Quality Management System 4.1 General requirements 4.2 Document requirements 7. Product realization 7.1 Planning of product realization 7.2 Customer-related processes 7.3 Design and development 7.4 Purchasing 7.5 Production and service provision 7.6 Control of monitoring and measuring devices Measurement, Analysis & Improvement 8.1 General 8.2 Monitoring and measurement 8.3 Control of nonconforming product 8.4 Analysis of data 8.5 Improvement

5.

Management Responsibility 5.1 Management commitment 5.2 Customer focus 5.3 Quality policy 5.4 Planning 5.5 Responsibility, authority, communication 5.6 Management review

8. 6. Resource Management 6.1 Provision of resources 6.2 Human resources 6.3 Infrastructure 6.4 Work environment

Companies have ISO 9001 certification

AIR LIQUIDE ALLIED SIGNAL AEROSPACE AMERICAN PACIFIC CORPORATION AMERICAN TANK & FABRICATING CO. ACCENTURE SERVICES PVT. LTD. APPLIED MATERIALS, INC. ARCO CHEMICAL COMPANY ASHLAND CHEMICAL CO. ASME INTERNATIONAL ASQ AT&T BABCOCK & WILCOX BACARDI-MARTINI CANADA, INC BAKER HUGHES MINING TOOLS, INC. BARCLAYS BANK, PLC. BASF CORPORATION BAXTER DIAGNOSTICS, INC. BAYER CORPORATION BECKMAN INSTRUMENTS BELL SOUTH TELECOMMUNICATIONS, INC. BELL TECHNOLOGIES BOEING BOEING AEROSPACE OPERATIONS BOSE CORPORATION

Companies have ISO 9001 certification

BRISTOL- MYERS SQUIBB BRITISH STANDARDS INSTITUTION, INC. BURLINGTON PERFORMANCE WEAR CAMPBELL SOUP COMPANY CANADA GENERAL STANDARDS BOARD CARRIER CORPORATION CATERPILLAR, INC. CHRYSLER CORPORATION CIBA VISION CREATIVE LABS CUTLER & HAMMER DAIMLER CHRYSLER DIEBOLD, INC. DOW CHEMICAL DRAVO DUNLOP TIRE CORPORATION DURACELL E.I. DUPONT EASTMAN KODAK EATON CORPORATION ENTELA, INC., QSRD ERICSSON, INC. ESSILOR OF AMERICA, INC. ESTEE LAUDER COMPANIES EXXON CHEMICAL COMPANY

Companies have ISO 9001 certification

EXXON COMPANY, INC. FISERV FORD FUJITSU COMPUTER PRODUCTS GE AIRCRAFT ENGINES GILLETTE GOODYEAR TIRE GOODYEAR TIRE & RUBBER COMPANY HARBISON-WALKER REFRACTORIES HASBRO USA GAME MFG. HEWLETT PACKARD HYUNDAI ELECTRONICS AMERICA IBM INGERSOLL-RAND INTL. SALES INC KOHLER KRUPP WERNER & PFLEIDERER CORPORATION LOCKHEED MARTIN AIR TRAFFIC MANAGEMENT LOCKHEED MARTIN CANADA LOCKHEED MARTIN ENERGY SYSTEMS

The criteria for getting ISO 9000/9001 certification

Review the current operation and business structure of

your facility. Provide an introductory session in ISO 9000/9001 requirements and instruct in the preparation of job descriptions and work instruction style documentation. Audit the completed job descriptions and work instructions and prepare the structure for the policies and procedures manual. Write the first draft of the policy and procedures manual to meet ISO 9000/9001 standards incorporating the existing documented work instructions.

The criteria for getting ISO 9000/9001 certification

Submit first draft of manuals for review and approval. Prepare final

draft of documentation and audit manuals for compliance to ISO 9000/9001 requirements. Train staff on the policies, procedures and work instruction manuals and receive feedback as to the accuracy of the documentation. Conduct a simulated third party audit of the implemented Quality System utilizing qualified auditors. Make final adjustments to the Quality System to prepare for certified third party audit.

Similarities
Both require the organization be explicit about

what their processes and quality systems are Say what you do; do what you say The organization records and tracks data for objective analysis Require strong management support to succeed Provide a structured and measured approach to quality improvement Require an outside audit for certification Both are refined/improved over time

Differences - ISO 9000/9001 and CMM

ISO 9000
Outwardly focused Minimum requirements with implied continuous improvements Not specific to any one industry or service Registration Document

SW-CMMI
Inwardly focused Explicit continuous quality improvement Software focus No documentation

Continual Audits

No follow up audits

ISO 9000/9001 and CMM

ISO 9000/9001

CMM
The Capability Maturity Model describes the principles and practices underlying software process maturity and intended to help software organizations improve the maturity of their software process.

Definition

A set of documents dealing with quality systems that can be used for external quality assurance purposes.

ISO 9000/9001 and CMM

ISO 9000/9001

CMM
By The Software Engineering Institute

Development
Written for Documents

By The International Standards Organization

Wide range of industry

Software industry

Abstract

Detailed

ISO 9000/9001 and CMM

ISO 9000/9001 Pages long Concept
Only 5 pages To follow a set of standards to make success repeatable On the customer/supplier relationship to reduce a customers risk in choosing a supplier.

CMM
Over 500 pages To emphasize on achieving and improving its process continuously The supplier to improve the internal software process.

Documents

ISO 9000/9001 and CMM

ISO 9000/9001
Quality policy is defined, documented, understood, implemented, and maintained; that responsibilities and authorities for all personnel specifying, achieving, and monitoring quality be defined.

CMM

Management Responsibility

Quality policy is primarily addressed in Software Quality Assurance.

ISO 9000/9001 and CMM

ISO 9000/9001

CMM

Quality System

Procedures are addresses and assured in Software Requires documented Quality Assurance. quality system, included Software product procedures and Engineering tasks should instructions, be be defined, integrated, established. and consistently performed.

ISO 9000/9001 and CMM

ISO 9000/9001

CMM

Contract Review

Contracts are reviewed to determine whether the Documented and requirements are reviewed and the adequately defined, agree with the bid, and missing requirements are clarified. can be implemented.

ISO 9000/9001 and CMM

ISO 9000/9001

CMM

Design Control

Requires that procedures to control and verify the The life cycle activities design be established. on requirements This includes planning analysis, design, code, design activities, and test are described in identifying inputs and Software Product outputs, verifying the Engineering. design, and controlling design changes.

ISO 9000/9001 and CMM

ISO 9000/9001

CMM

Document Control

The configuration Requires that the management practices distribution and characterizing document modification of control are described in documents be controlled. Software Configuration Management.

ISO 9000/9001 and CMM

ISO 9000/9001
Requires that purchased products conform to their specified requirements. This includes the assessment of potential subcontractors and verification of purchased products.

CMM

Purchasing

This is addressed in Software Subcontract Management.

ISO 9000/9001 and CMM

ISO 9000/9001

CMM
Describing the use of purchased software. It does so in the context of identifying off-the-shelf or reusable software as part of planning.

PurchaserSupplied Product

Requires that any purchaser-supplied material be verified and maintained.

ISO 9000/9001 and CMM

ISO 9000/9001 Product Identification and Trace ability

CMM

Software Product Requires that the product Engineering states the be identified and specific need for traceable during all consistency and trace stages of production, ability between software delivery, and installation. work products.

ISO 9000/9001 and CMM

ISO 9000/9001

CMM

Process Control

Requires that production The procedures defining processes be defined and the software production planned. This includes process are distributed carrying out production throughout the key under controlled process areas in the conditions, according to various Activities documented instructions. Performed practices. Requires that servicing activities be performed as specified. Intended to be applied in both the software development and maintenance environments.

Servicing

ISO 9000/9001 and CMM

ISO 9000/9001
Requires that training needs be identified and that training be provided, since selected tasks may require qualified personnel. Records of training are maintained.

CMM

Training

Identified in the training and orientation practices in the Ability to Perform common feature.

ISO 9000/9001 and CMM

ISO 9000/9001
Requires that quality records be collected, maintained, and dispositioned.

CMM
Specifically pertinent to this clause are the testing and peer review practices in Software Product Engineering.

Quality Records

Accenture
In this presentation Accenture is used as the model

company to study CMM in practice. Accenture subscribes to a number of industry standards to guide quality initiatives, such as Capability Maturity Model Integration (CMMI), People Capability Maturity Model (People CMM), Information Technology Infrastructure Library (ITIL), ISO 9001, ISO 14001, ISO 20000, ISO 27001, eSourcing Capability Model for Service Providers (eSCM-SP), and Lean Six Sigma.

Accenture
Accenture has been an active user of the Capability Maturity Model (CMM) family of models since the early 1990s. We maintain CMMI Level 5, the highest level, in our largest Global Delivery Network locations. Approximately 90 percent of delivery center employees currently work in Level 5 centers, which include the Accenture Delivery Centers in India, China, Philippines, Spain, and Brazil. In addition, we have implemented CMMI across our entire US Public Services Operating Unit and achieved the first Level 4 for an organization of that size and scope. Accenture is also one of the few organizations in the world to have achieved People Capability Maturity Model (People CMM) Level 5. We are pursuing People CMM across our Global Delivery Network and have been independently appraised at Level 5 in our centers in India, China, and the Philippines. Accenture has an active role assisting the Software Engineering Institute (SEI) in building and improving the CMM's. Accenture was one of the first Transition Partners with SEI, has provided input into CMM development and continues to be a licensed SEI Partner.

Accenture

ISO Standards Accenture is an active user of ISO standards, including ISO 9001, ISO 14001, and ISO 27001. Note: see the section on ITIL for our use of ISO 20000 ISO 9001 specifies requirements for a quality management system. Accenture has been ISO 9001 certified since 1991. Accenture currently has ISO 9001 certification covering services delivered in Europe, Africa, and Japan. ISO 14001 is an environment standard that is based on having good environment management practices, such as recycling and power management. Accenture has multiple global initiatives geared towards an effort to green our business operations, and has used ISO 14001 to assist with those initiatives. Accenture has achieved global ISO 14001 certification. ISO 27001, which specifies requirements applicable to information security management and the related ISO 27002, are subscribed to by Accenture as part of its security management activities globally. Certification is achieved where appropriate. Accenture has certified Delivery Centers in India, China, the Philippines, Warwick (UK), Prague (Czech Republic), Hof and Kronberg (Germany), Bucharest (Romania), and Warsaw (Poland). CMM, CMMI and P-CMM are registered trademarks of Carnegie Mellon University. ISO is a registered trademark of the International Organization for Standardization. ITIL is a registered trademark of the U.K. Office of Government Commerce. Six Sigma is a registered trademark of Motorola Inc.

Questions