- Year not given · 4+3 marks
SEI CMM and quality; ISO versus CMM
Short answer
CMM ensures quality by institutionalizing project control, peer reviews, quantitative quality goals, and defect prevention across maturity levels. ISO 9001 is a generic pass/fail certification standard requiring a documented quality system, while CMM is a software-specific model with five graded maturity levels that stresses quantitative process control and provides an explicit improvement path.
How does SEI CMM ensure quality of complex software? Differentiate ISO and CMM.
How SEI CMM ensures quality of complex software
The SEI Capability Maturity Model (CMM) is based on the idea that the quality of software depends largely on the quality of the process used to build it. For large, complex systems, individual skill is not enough; a disciplined, measured process is needed. CMM ensures this as follows:
- Level 2 (Repeatable): requirements management, project planning, tracking, SQA and configuration management keep large projects under control and changes traceable.
- Level 3 (Defined): a standard organization-wide process, training and peer reviews catch defects early and ensure all teams work consistently, which is vital when many teams build parts of one complex system.
- Level 4 (Managed): quality goals are set in numbers (defect density, reliability) and tracked with measurements, so quality is controlled quantitatively.
- Level 5 (Optimizing): defect prevention and process change management remove root causes of defects, so quality keeps improving.
- Visibility and control: because the process is defined and measured, managers can see problems (schedule slip, rising defect rates) early in a complex project and correct them before delivery.
- Assessment: regular assessments show weak key process areas, so improvement is focused where it is needed.
ISO 9001 vs. CMM
| Point | ISO 9001 | SEI CMM |
|---|---|---|
| Developed by | International Organization for Standardization | Software Engineering Institute, Carnegie Mellon University |
| Scope | Generic; any industry (manufacturing, services, software) | Specifically for software development |
| Nature | Standard; pass or fail certification | Model with five graded maturity levels |
| Focus | Customer-supplier relationship; documented quality system | Internal process improvement of the organization |
| Improvement path | Sets minimum requirements; no step-by-step path | Gives an explicit staged path from level 1 to 5 |
| Result | ISO 9001 certificate from an accredited body | Maturity level rating from an assessment |
| Measurement | Little emphasis on quantitative process control | Levels 4 and 5 stress measurement and optimization |
| Main use | Certification to assure customers in international trade | Assessing software contractors (first used by the US DoD) and guiding improvement |
| Documents | Quality manual, documented procedures, records | KPAs with goals and practices for each level |
An ISO 9001 certified software organization is roughly comparable to CMM level 2 or 3, so ISO certification and higher CMM levels are often pursued together.
✓ Answer checked by Claude Opus 5.5 (high effort)
Related questions
- Why software development is complex; man-month myth · Software Engineering, chapter 1
- Software quality assurance · Software Engineering, chapter 9
- CMM key process areas and continuous improvement · Software Engineering, chapter 9
- Levels of CMM · Software Engineering, chapter 9
- Real-time versus ordinary software and OS; data acquisition · Software Engineering, chapter 4
- Formal technical review; Garvin’s quality dimensions · Software Engineering, chapter 9
- Differentiate quality control and assurance · Project Engineering, chapter 4
- Audio quality versus file size · Multimedia System, chapter 2
- Quality versus productivity · ICT Project Management, chapter 10
- Double salt vs complex salt; Werner's theory · Engineering Chemistry, chapter 6 · asked 5×