ISO 9001 as a cornerstone for CMMI DEV - Eduardo Espinheira (MOG Technologies)

1. Portugal
ISO 9001 as a cornerstone for CMMI DEV
Eduardo Espinheira
Director of Quality & Operations
MOG Technologies
2012-07-06, Coimbra

2. ISO 9001 as a cornerstone for CMMI DEV
Agenda
• Introduction
• ISO 9001 Key Concepts
• Ongoing Implementation Strategy
• Relation between ISO 9001 and CMMI DEV
• CMMI Implementation Roadmap Suggestion
• Conclusions
• Bibliography
2
2

3. ISO 9001 as a cornerstone for CMMI DEV
Introduction
This case study presents the ongoing implementation of the ISO 9001
standard within MOG Technologies.
The aim of the study is three fold.
First, define and present a ISO 9001 implementation strategy.
Second, evaluate to what extent that strategy serves as a cornerstone to
the CMMI DEV best practices.
Third, and last, suggest an implementation roadmap for CMMI based upon
ISO 9001.
Additional notes:
The quality standard version used was the ISO 9001:2008.
The CMMI DEV version studied was the v1.3.
3
3

4. ISO 9001 as a cornerstone for CMMI DEV
Introduction
The fundamental difference between CMMI vs ISO is conceptual. CMMI is
a process model and ISO is an audit standard.
CMMI is a set of related "best practices" derived from industry leaders and
relates to product engineering and software development. Businesses
receive CMMI ratings from Level 1 to Level 5 depending upon the extent of
compliance to key performance areas specified in the selected CMMI
process area.
ISO is a certification tool that certifies businesses whose processes
conform to the laid down standards.
4
4

5. ISO 9001 as a cornerstone for CMMI DEV
ISO 9001 Key Concepts
Quality
Management
System
5
5

6. ISO 9001 as a cornerstone for CMMI DEV
ISO 9001 Key Concepts
Quality
Management
System
Management
Responsibility
6
6

7. ISO 9001 as a cornerstone for CMMI DEV
ISO 9001 Key Concepts
Quality
Management
System
Management
Responsibility
Resource
Management
7
7

8. ISO 9001 as a cornerstone for CMMI DEV
ISO 9001 Key Concepts
Quality
Management
System
Product Management
Realization Responsibility
Resource
Management
8
8

9. ISO 9001 as a cornerstone for CMMI DEV
ISO 9001 Key Concepts
Measurement Quality
Analysis and Management
Improvement System
Product Management
Realization Responsibility
Resource
Management
9
9

10. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Measurement Quality
Surveys Analysis and Management
Improvement System
Product Management Process
Realization Responsibility Owner
External Definition
Customer
Internal Resource
Customer Satisfaction Management
texto Surveys
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
PIstextoRIs
and Definition
KSAs
Lessons definition
texto
Learned
per Process
10
10

11. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Quality
Surveys Management
System
Product Management Process
Realization Responsibility Owner
External Definition
Customer
Internal Satisfaction
Resource
Management
Customer
texto Surveys
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
11
11

12. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Measurement Quality
Surveys Analysis and Management
Improvement System
Product Management Process
Realization Responsibility Owner
External Definition
Customer
Internal Satisfaction
Resource
Management
Customer
texto Surveys
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
12
12

13. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Measurement Quality
Surveys Analysis and Management
Improvement System
Product Management Process
Realization Responsibility Owner
External Definition
Customer
Internal Satisfaction
Resource
Management
Customer
texto Surveys
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
13
13

14. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Measurement Quality
Surveys Analysis and Management
Improvement System
Product Management Process
Realization Responsibility Owner
External Definition
Customer
Internal Satisfaction
Resource
Management
Customer
texto Surveys
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
14
14

15. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Measurement Quality
Surveys Analysis and Management
Improvement System
Product Management Process
Realization Responsibility Owner
External Definition
Customer
Internal Satisfaction
Resource
Management
Customer
texto Surveys
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
15
15

16. ISO 9001 as a cornerstone for CMMI DEV
CMMI Maturity Levels / Process Areas
Maturity Maturity
Level 5 Level 1
CAR; OPM
Maturity
Maturity Level 2
Level 4 PPQA; MA; CM;
QPM; OPP SAM; REQM; PP;
PMC;
Maturity
Level 3
DAR; OT; OPD;
OPF; VER; VAL;
TS; RD; PI;
IPM;RSKM
16
16

17. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Surveys ML 5 ML 1
CAR; OPM
ML 2 Process
ML 4 PPQA; MA; CM;
QPM; OPP SAM; REQM; PP; Owner
PMC;
External Definition
Internal
Customer ML 3
Satisfaction DAR; OT; OPD;
Customer
texto Surveys
OPF; VER; VAL; TS;
RD; PI; RSKM
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
17
17

18. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Surveys ML 5 ML 1
CAR; OPM
ML 2 Process
ML 4 PPQA; MA; CM;
QPM; OPP SAM; REQM; PP; Owner
PMC;
External Definition
Internal
Customer ML 3
Satisfaction DAR; OT; OPD;
Customer
texto Surveys
OPF; VER; VAL; TS;
RD; PI; RSKM
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
18
18

19. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Surveys ML 5 ML 1
CAR; OPM
ML 2 Process
ML 4 PPQA; MA; CM;
QPM; OPP SAM; REQM; PP; Owner
PMC;
External Definition
Internal
Customer ML 3
Satisfaction DAR; OT; OPD;
Customer
texto Surveys
OPF; VER; VAL; TS;
RD; PI; RSKM
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
19
19

20. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Surveys ML 5 ML 1
CAR; OPM
ML 2 Process
ML 4 PPQA; MA; CM;
QPM; OPP SAM; REQM; PP; Owner
PMC;
External Definition
Internal
Customer ML 3
Satisfaction DAR; OT; OPD;
Customer
texto Surveys
OPF; VER; VAL; TS;
RD; PI; RSKM; IPM
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
20
20

21. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Tools Operationa
texto
l Goals
Employee
Tactical
texto
Satisfaction Goals
Surveys ML 5 ML 1
CAR; OPM
ML 2 Process
ML 4 PPQA; MA; CM;
QPM; OPP SAM; REQM; PP; Owner
PMC;
External Definition
Internal
Customer ML 3
Satisfaction DAR; OT; OPD;
Customer
texto Surveys
OPF; VER; VAL; TS;
RD; PI; RSKM
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
21
21

22. ISO 9001 as a cornerstone for CMMI DEV
Ongoing Implementation Strategy
Work
Strategic
Planning
Goals
Tools
Process
Internal Network
texto
Audits Per
Process
Work
texto
Logging
Operationa
texto
Tools
l Goals
Employee
Tactical
texto
Satisfaction Goals
Surveys ML 5 ML 1
CAR; OPM
ML 2 Process
ML 4 PPQA; MA; CM;
QPM; OPP SAM; REQM; PP; Owner
PMC;
External Definition
Internal
Customer ML 3
Satisfaction DAR; OT; OPD;
Customer
texto Surveys
OPF; VER; VAL; TS;
RD; PI; RSKM
Satisfaction
Surveys KPIs and
texto
KRIs
definition
Process
KSAs PIstextoRIs
and Definition
Lessons definition
texto
Learned
per Process
22
22

23. ISO 9001 as a cornerstone for CMMI DEV
CMMI DEV vs ISO 9001 Suggested Implementation
23
23

24. ISO 9001 as a cornerstone for CMMI DEV
CMMI Implementation Roadmap Suggestion
• The suggested CMMI implementation roadmap preaches the
advantages of following the maturity levels.
Maturity Level 2 Maturity Level 3
Maturity Level 4 Maturity Level 5
Maturity Level 1 PPQA; MA; CM; SAM; REQM; DAR; OT; OPD; OPF; VER; VAL;
QPM; OPP CAR; OPM
PP; PMC; TS; RD; PI; RSKM
• Nevertheless a ISO 9001 before a CMMI implementation will take care
of all the Process and Engineering process areas.
Leaving the remaining, process areas and lacking specific practices and
specific goals, as process improvement to achieve each maturity level.
ISO 9001 Maturity Level 2 Maturity Level 3
Maturity Level 4 Maturity Level 5
OPD; OPF; OT; MA; PI; RD; TS; PPQA; MA; CM; SAM; REQM; DAR; OT; OPD; OPF; VER; VAL;
QPM; OPP CAR; OPM
VAL; VER; PPQA; OPP; OPM PP; PMC; TS; RD; PI; RSKM
24
24

25. ISO 9001 as a cornerstone for CMMI DEV
Conclusions
• The fundamental difference between CMMI vs ISO is conceptual. CMMI
is a process model and ISO is an audit standard. But they share
commonalities.
• The actions defined are independent of the CMMI Maturity Levels.
• The suggested implementation implements a lot of the best practices
required for CMMI DEV.
• The approach selected also suggests that the process areas can be
reordered in a different way than the maturity levels organize them.
Maintaining the consistence and dependencies, between the
PA, needed to be successful in a CMMI Dev Implementation Roadmap.
25
25

26. ISO 9001 as a cornerstone for CMMI DEV
Bibliography
CMMI for Development v1.3, 2010
Software Engineering Institute (SEI)
Developing, Implementing and Using Winning KPIs 2nd Edition, 2010
David Parmenter; John Willey & Sons, Inc
Mapping ISO Standards to CMMI-DEV v1.2, 2009
Boris Mutafelija; Harvey Stromberg
An Initial Comparative Analysis of the CMMI Version 1.2 Development Constellation and
the ISO 9000 Family, 2009
David Kitson; Robert Vickroy; John Walz; Dave Wynn
ISO 9001:2008 Standard, 2008
Internaltional Standards Organization
Observations of the Relationships Between CMMI and ISO 9001:2000, 2005
American Society for Quality
26
26