--- title: "SEI CMM and quality; ISO versus CMM" subject: "Software Engineering" chapter: 9 key: "semester_5/software_engineering:cmm-vs-iso" source: https://www.bctengineer.com/q/semester_5/software_engineering/cmm-vs-iso site: BCT Engineering --- # SEI CMM and quality; ISO versus CMM Software Engineering · Chapter 9: Quality management - Asked in: year not given, 4+3 marks - Video: [ISO 9000 vs SEI CMM Model: Achieving Excellence in Software Quality and Process Improvement](https://www.youtube.com/watch?v=WKU4oCYNlZE) — Engineering in One Video - Answer checked by Claude Opus 5.5 (high effort) on 2026-10-14 - Page: https://www.bctengineer.com/q/semester_5/software_engineering/cmm-vs-iso - Whole chapter: https://www.bctengineer.com/md/semester_5/software_engineering/chapter-9 ## Question How does SEI CMM ensure quality of complex software? Differentiate ISO and CMM. ## Short answer CMM ensures quality by institutionalizing project control, peer reviews, quantitative quality goals, and defect prevention across maturity levels. ISO 9001 is a generic pass/fail certification standard requiring a documented quality system, while CMM is a software-specific model with five graded maturity levels that stresses quantitative process control and provides an explicit improvement path. ## Answer #### How SEI CMM ensures quality of complex software The **SEI Capability Maturity Model (CMM)** is based on the idea that the quality of software depends largely on the quality of the process used to build it. For large, complex systems, individual skill is not enough; a disciplined, measured process is needed. CMM ensures this as follows: 1. **Level 2 (Repeatable):** requirements management, project planning, tracking, SQA and configuration management keep large projects under control and changes traceable. 2. **Level 3 (Defined):** a standard organization-wide process, training and **peer reviews** catch defects early and ensure all teams work consistently, which is vital when many teams build parts of one complex system. 3. **Level 4 (Managed):** quality goals are set in numbers (defect density, reliability) and tracked with measurements, so quality is controlled quantitatively. 4. **Level 5 (Optimizing):** defect prevention and process change management remove root causes of defects, so quality keeps improving. 5. **Visibility and control:** because the process is defined and measured, managers can see problems (schedule slip, rising defect rates) early in a complex project and correct them before delivery. 6. **Assessment:** regular assessments show weak key process areas, so improvement is focused where it is needed. #### ISO 9001 vs. CMM | Point | ISO 9001 | SEI CMM | |---|---|---| | Developed by | International Organization for Standardization | Software Engineering Institute, Carnegie Mellon University | | Scope | Generic; any industry (manufacturing, services, software) | Specifically for software development | | Nature | Standard; pass or fail certification | Model with five graded maturity levels | | Focus | Customer-supplier relationship; documented quality system | Internal process improvement of the organization | | Improvement path | Sets minimum requirements; no step-by-step path | Gives an explicit staged path from level 1 to 5 | | Result | ISO 9001 certificate from an accredited body | Maturity level rating from an assessment | | Measurement | Little emphasis on quantitative process control | Levels 4 and 5 stress measurement and optimization | | Main use | Certification to assure customers in international trade | Assessing software contractors (first used by the US DoD) and guiding improvement | | Documents | Quality manual, documented procedures, records | KPAs with goals and practices for each level | An ISO 9001 certified software organization is roughly comparable to CMM level 2 or 3, so ISO certification and higher CMM levels are often pursued together. ## Check yourself The answer's key points as multiple-choice questions, with the correct option and why. 1. On what idea is SEI CMM based? A. Software quality depends largely on the quality of the process used to build it B. Quality depends only on individual programmers C. Quality depends on hardware D. Quality can only be tested at the end Answer: A. CMM holds that disciplined, measured process is needed for complex software. (Key point: Process quality idea) 2. How does the scope of ISO 9001 differ from CMM? A. ISO 9001 is only for software; CMM is generic B. Both are only for software C. ISO 9001 is generic for any industry; CMM is specifically for software development D. Both are only for manufacturing Answer: C. ISO 9001 applies to any industry; CMM is specific to software. (Key point: Scope difference) 3. Which describes the nature of each? A. ISO 9001 gives five graded levels; CMM is pass or fail B. ISO 9001 is pass or fail certification; CMM gives a maturity level rating C. Both give pass or fail only D. Both give five levels Answer: B. ISO 9001 yields a certificate; CMM yields one of five maturity levels. (Key point: Nature of result) 4. Which gives an explicit staged improvement path? A. ISO 9001 B. Neither C. Both equally D. CMM Answer: D. CMM provides a staged path from level 1 to 5, whereas ISO 9001 sets minimum requirements. (Key point: Improvement path) ## Related in Software Engineering - [Why software development is complex; man-month myth](https://www.bctengineer.com/question.md?key=semester_5%2Fsoftware_engineering%3Acomplex-development) — Software Engineering, chapter 1 - [Software quality assurance](https://www.bctengineer.com/question.md?key=semester_5%2Fsoftware_engineering%3Asqa-note) — Software Engineering, chapter 9 - [CMM key process areas and continuous improvement](https://www.bctengineer.com/question.md?key=semester_5%2Fsoftware_engineering%3Acmm-continuous-improvement) — Software Engineering, chapter 9 - [Levels of CMM](https://www.bctengineer.com/question.md?key=semester_5%2Fsoftware_engineering%3Acmm-levels) — Software Engineering, chapter 9 - [Real-time versus ordinary software and OS; data acquisition](https://www.bctengineer.com/question.md?key=semester_5%2Fsoftware_engineering%3Areal-time-vs-non-real-time) — Software Engineering, chapter 4 - [Formal technical review; Garvin’s quality dimensions](https://www.bctengineer.com/question.md?key=semester_5%2Fsoftware_engineering%3Aftr-garvin) — Software Engineering, chapter 9 ## Related in other subjects - [Differentiate quality control and assurance](https://www.bctengineer.com/question.md?key=semester_7%2Fproject_engineering%3Aqa-vs-qc-differentiate) — Project Engineering, chapter 4 - [Audio quality versus file size](https://www.bctengineer.com/question.md?key=semester_8%2Fmultimedia_system%3Aquality-vs-file-size) — Multimedia System, chapter 2 - [Quality versus productivity](https://www.bctengineer.com/question.md?key=semester_7%2Fict_project_management%3Aquality-vs-productivity) — ICT Project Management, chapter 10 - [Double salt vs complex salt; Werner's theory](https://www.bctengineer.com/question.md?key=semester_2%2Fengineering_chemistry%3Adouble-complex-werner) — Engineering Chemistry, chapter 6, asked 5×