Top Banner
PRESENTED BY DEVAVRAT SINGH 10697210 ISO 9001 vs CMM
56
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: CMMi

PRESENTED BY

DEVAVRAT SINGH10697210

ISO 9001 vs CMM

Page 2: CMMi

Outline

Comparison between ISO 9000/9001 and CMM

Relationship between Quality & Productivity and Process

History and Definition - CMMHistory and Definition – ISO 9001Accenture Company OverviewConclusion

Page 3: CMMi

Why process is important?

Three main characteristics of a project are its cost, schedule and quality. Productivity determines the cost and schedule.

Productivity and Quality (Q&P) can be viewed as the main goal of the project.

Q&P of an organization depends on three factors: process, people and technology.

Page 4: CMMi

Quality Triangle

People

Process Technology

Q & P

Page 5: CMMi

CMMI History

Federal government cannot distinguish between competing bids for software development

Early 1980’s - Federal Government (Congress) awards a contract to establish the Software Engineering Institute (SEI) at Carnegie Mellon University (sponsored by the DOD)

1988 - SEI begins work on a Process Maturity Framework for judging a company’s capability to produce software

The Process Maturity Framework evolves into the Capability Maturity Model (CMM)

August 1991 – SW-CMM Version 1 released SE-CMM developed by the Enterprise Process Improvement Collaboration

(EPIC) 1992 - CMM Version 1.1 released 1999 - Begin developing CMMI (CMM Integrated) 2002 – CMMI SE/SW/IPPD/SS Version 1.1 introduced 200? - CMMI Version 1.2 Released

Page 6: CMMi
Page 7: CMMi
Page 8: CMMi
Page 9: CMMi
Page 10: CMMi
Page 11: CMMi
Page 12: CMMi
Page 13: CMMi
Page 14: CMMi
Page 15: CMMi
Page 16: CMMi
Page 17: CMMi
Page 18: CMMi
Page 19: CMMi
Page 20: CMMi
Page 21: CMMi

Capability Maturity Model

CMM defines five maturity levels.

Project Risk

Productivity and Quality

1 Initial

2 Repeatable

3 Defined

4 Managed

5 Optimizing

Heroes

ProjectManagement

EngineeringProcess

Product and Process Quality

Change ManagementDefect Prevention

Disciplined

Standard,Consistent

Predictable

ContinuouslyImproving

Page 22: CMMi

1- Initial

2- Repeatable

3- Defined

4- Managed

5- Optimizing

Project Management

Engineering Process

Product and Process quality

Continuous Improvement

Requirements Management

Software Project Planning

Software Project Tracking

Software Subcontractor Management

Software Configuration Management

Software Quality Assurance

Organizational Process Focus

Organizational Process Definition

Training Program

Integrated Software Management

Software Product Engineering

Inter-group Coordination

Peer Reviews

Quantitative process Management

Software Quality Management

Technology Change Management

Process Change Management

Defect Prevention

Level Focus Area Key Process Area

Page 23: CMMi
Page 24: CMMi
Page 25: CMMi
Page 26: CMMi

Began with British Military standards

ISO organization was established in 1947

Headquartered in Geneva, Switzerland

Currently composed of 148 National Standard

Bodies and 2,981 technical bodies

As of 12/31/05 there are 15,649 International

Standards embodied in 573,494 pages of

English text

ISO History

Page 27: CMMi

What are standards?

Standards are documented agreements containing technical specifications or other precise criteria to be used consistently as rules, guidelines, or definitions of characteristics, to ensure that materials, products, processes and services are fit for their purpose.

For example, the format of the credit cards, phone cards, and "smart" cards that have become commonplace is derived from an ISO International Standard. Adhering to the standard, which defines such features as an optimal thickness (0,76 mm), means that the cards can be used worldwide.

International Standards thus contribute to making life simpler, and to increasing the reliability and effectiveness of the goods and services we use.

Page 28: CMMi

The ISO family includes: ISO 9000:2000 – Quality Management Systems –

Fundamentals and vocabulary ISO 9001:2000 – Quality Management Systems -

Requirements ISO 9004:2000 – Quality Management Systems –

Guidelines for performance improvement ISO 19011 – Guidelines on quality and/or

environmental management systems auditing. ISO 10012 Measurement control system

Which ISO Standards

Page 29: CMMi

Quality System Documentation

ProceduresProcedures

Records/DocumentationRecords/Documentation

QualityQualityManualManual

Work/JobWork/JobInstructionsInstructions

Level 1Level 1DefinesDefines

Approach andApproach andResponsibilityResponsibility

Level 2Level 2DefinesDefines

Who, What, WhenWho, What, When

Level 3Level 3Answers Answers

HowHow

Level 4Level 4Results: shows that Results: shows that

the system is the system is operatingoperating

Page 30: CMMi

ISO 9001:2000 Structure

4. Quality Management System4.1 General requirements4.2 Document requirements

5. Management Responsibility5.1 Management commitment5.2 Customer focus5.3 Quality policy5.4 Planning5.5 Responsibility, authority,

communication5.6 Management review

6. Resource Management6.1 Provision of resources6.2 Human resources6.3 Infrastructure6.4 Work environment

7. Product realization7.1 Planning of product realization7.2 Customer-related processes7.3 Design and development7.4 Purchasing7.5 Production and service provision7.6 Control of monitoring and

measuring devices

8. Measurement, Analysis & Improvement8.1 General8.2 Monitoring and measurement8.3 Control of nonconforming product8.4 Analysis of data8.5 Improvement

Page 31: CMMi

Companies have ISO 9001 certification

AIR LIQUIDEALLIED SIGNAL AEROSPACEAMERICAN PACIFIC CORPORATIONAMERICAN TANK & FABRICATING CO.

ACCENTURE SERVICES PVT. LTD.APPLIED MATERIALS, INC.ARCO CHEMICAL COMPANYASHLAND CHEMICAL CO.ASME INTERNATIONALASQAT&TBABCOCK & WILCOXBACARDI-MARTINI CANADA, INC

BAKER HUGHES MINING TOOLS, INC.BARCLAYS BANK, PLC.BASF CORPORATIONBAXTER DIAGNOSTICS, INC.BAYER CORPORATIONBECKMAN INSTRUMENTSBELL SOUTH TELECOMMUNICATIONS, INC.BELL TECHNOLOGIESBOEINGBOEING AEROSPACE OPERATIONSBOSE CORPORATION

Page 32: CMMi

Companies have ISO 9001 certification

BRISTOL- MYERS SQUIBBBRITISH STANDARDS INSTITUTION, INC.BURLINGTON PERFORMANCE WEARCAMPBELL SOUP COMPANYCANADA GENERAL STANDARDS BOARDCARRIER CORPORATION CATERPILLAR, INC.CHRYSLER CORPORATIONCIBA VISIONCREATIVE LABSCUTLER & HAMMER

DAIMLER CHRYSLERDIEBOLD, INC.DOW CHEMICAL DRAVODUNLOP TIRE CORPORATIONDURACELLE.I. DUPONTEASTMAN KODAKEATON CORPORATIONENTELA, INC., QSRDERICSSON, INC.ESSILOR OF AMERICA, INC.ESTEE LAUDER COMPANIESEXXON CHEMICAL COMPANY

Page 33: CMMi

Companies have ISO 9001 certification

EXXON COMPANY, INC.FISERVFORDFUJITSU COMPUTER PRODUCTS

GE AIRCRAFT ENGINESGILLETTE GOODYEAR TIREGOODYEAR TIRE & RUBBER COMPANYHARBISON-WALKER REFRACTORIESHASBRO USA GAME MFG.HEWLETT PACKARD

HYUNDAI ELECTRONICS AMERICAIBMINGERSOLL-RAND INTL. SALES INC

KOHLERKRUPP WERNER & PFLEIDERER CORPORATIONLOCKHEED MARTIN AIR TRAFFIC MANAGEMENTLOCKHEED MARTIN CANADALOCKHEED MARTIN ENERGY SYSTEMS

Page 34: CMMi

The criteria for getting ISO 9000/9001 certification

Review the current operation and business structure of your facility.

Provide an introductory session in ISO 9000/9001 requirements and instruct in the preparation of job descriptions and work instruction style documentation.

Audit the completed job descriptions and work instructions and prepare the structure for the policies and procedures manual.

Write the first draft of the policy and procedures manual to meet ISO 9000/9001 standards incorporating the existing documented work instructions.

Page 35: CMMi

The criteria for getting ISO 9000/9001 certification

Submit first draft of manuals for review and approval. Prepare final draft of documentation and audit manuals for compliance to ISO 9000/9001 requirements.

Train staff on the policies, procedures and work instruction manuals and receive feedback as to the accuracy of the documentation.

Conduct a simulated third party audit of the implemented Quality System utilizing qualified auditors.

Make final adjustments to the Quality System to prepare for certified third party audit.

Page 36: CMMi

Both require the organization be explicit about what their processes and quality systems are

Say what you do; do what you say The organization records and tracks data for

objective analysis Require strong management support to

succeed Provide a structured and measured approach

to quality improvement Require an outside audit for “certification” Both are refined/improved over time

Similarities

Page 37: CMMi

Differences - ISO 9000/9001 and CMM

ISO 9000 SW-CMMI

Outwardly focused Inwardly focused

Minimum requirements with implied continuous improvements

Explicit continuous quality improvement

Not specific to any one industry or service

Software focus

Registration Document No documentation

Continual Audits No follow up audits

Page 38: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Definition

A set of documents dealing with quality

systems that can be used for external quality

assurance purposes.

The Capability Maturity Model describes the

principles and practices underlying software process maturity and

intended to help software organizations improve the maturity of their software process.

Page 39: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Development By The International Standards Organization

By The Software Engineering Institute

Written for Wide range of industry Software industry

Documents Abstract Detailed

Page 40: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Pages long Only 5 pages Over 500 pages

Concept To follow a set of standards to make success repeatable

To emphasize on achieving and improving its process continuously

Documents

On the customer/supplier

relationship to reduce a customer’s risk in

choosing a supplier.

The supplier to improve the internal software

process.

Page 41: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Management

Responsibility

Quality policy is defined, documented,

understood, implemented, and maintained; that

responsibilities and authorities for all

personnel specifying, achieving, and

monitoring quality be defined.

Quality policy is primarily addressed in

Software Quality Assurance.

Page 42: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Quality System

Requires documented quality system, included

procedures and instructions, be

established.

Procedures are addresses and assured in Software

Quality Assurance. Software product Engineering tasks should be defined,

integrated, and consistently performed.

Page 43: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Contract Review

Contracts are reviewed to determine whether the

requirements are adequately defined,

agree with the bid, and can be implemented.

Documented and reviewed and the

missing requirements are clarified.

Page 44: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Design Control

Requires that procedures to control and verify the design be established. This includes planning

design activities, identifying inputs and outputs, verifying the

design, and controlling design changes.

The life cycle activities on requirements

analysis, design, code, and test are described in

Software Product Engineering.

Page 45: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Document Control

Requires that the distribution and modification of documents be controlled.

The configuration management practices

characterizing document control are described in Software Configuration

Management.

Page 46: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Purchasing

Requires that purchased products conform to

their specified requirements. This

includes the assessment of potential

subcontractors and verification of purchased

products.

This is addressed in Software Subcontract

Management.

Page 47: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Purchaser-Supplied Product

Requires that any purchaser-supplied

material be verified and maintained.

Describing the use of purchased software. It does so in the context of identifying off-the-shelf or

reusable software as part of planning.

Page 48: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Product Identification

and Trace ability

Requires that the product be identified and

traceable during all stages of production,

delivery, and installation.

Software Product Engineering states the

specific need for consistency and trace

ability between software work products.

Page 49: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Process Control

Requires that production processes be defined and planned. This includes carrying out production

under controlled conditions, according to documented instructions.

The procedures defining the software production process are distributed

throughout the key process areas in the various Activities

Performed practices.

Servicing Requires that servicing activities be performed

as specified.

Intended to be applied in both the software development and

maintenance environments.

Page 50: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Training

Requires that training needs be identified and

that training be provided, since selected

tasks may require qualified personnel.

Records of training are maintained.

Identified in the training and orientation practices in the Ability to Perform

common feature.

Page 51: CMMi

ISO 9000/9001 and CMM

ISO 9000/9001 CMM

Quality Records

Requires that quality records be collected,

maintained, and dispositioned.

Specifically pertinent to this clause are the testing and peer review practices in Software Product

Engineering.

Page 52: CMMi

Accenture

In this presentation Accenture is used as the model company to study CMM in practice.

Accenture subscribes to a number of industry standards to guide quality initiatives, such as Capability Maturity Model Integration (CMMI®), People Capability Maturity Model (People CMM®), Information Technology Infrastructure Library (ITIL®), ISO® 9001, ISO® 14001, ISO® 20000, ISO® 27001, eSourcing Capability Model for Service Providers (eSCM-SP), and Lean Six Sigma®.

Page 53: CMMi

Accenture has been an active user of the Capability Maturity Model (CMM®) family of models since the early 1990s. We maintain CMMI® Level 5, the highest level, in our largest Global Delivery Network locations. Approximately 90 percent of delivery center employees currently work in Level 5 centers, which include the Accenture Delivery Centers in India, China, Philippines, Spain, and Brazil. In addition, we have implemented CMMI across our entire US Public Services Operating Unit and achieved the first Level 4 for an organization of that size and scope.

Accenture is also one of the few organizations in the world to have achieved People Capability Maturity Model (People CMM®) Level 5. We are pursuing People CMM® across our Global Delivery Network and have been independently appraised at Level 5 in our centers in India, China, and the Philippines.

Accenture has an active role assisting the Software Engineering Institute (SEI) in building and improving the CMM's. Accenture was one of the first Transition Partners with SEI, has provided input into CMM development and continues to be a licensed SEI Partner.

Accenture

Page 54: CMMi

ISO StandardsAccenture is an active user of ISO® standards, including ISO® 9001, ISO® 14001, and ISO® 27001. Note: see the section on ITIL® for our use of ISO® 20000

ISO 9001® specifies requirements for a quality management system. Accenture has been ISO® 9001 certified since 1991. Accenture currently has ISO 9001 certification covering services delivered in Europe, Africa, and Japan.

ISO® 14001 is an environment standard that is based on having good environment management practices, such as recycling and power management. Accenture has multiple global initiatives geared towards an effort to “green” our business operations, and has used ISO® 14001 to assist with those initiatives. Accenture has achieved global ISO® 14001 certification.

ISO® 27001, which specifies requirements applicable to information security management and the related ISO® 27002, are subscribed to by Accenture as part of its security management activities globally. Certification is achieved where appropriate. Accenture has certified Delivery Centers in India, China, the Philippines, Warwick (UK), Prague (Czech Republic), Hof and Kronberg (Germany), Bucharest (Romania), and Warsaw (Poland).

CMM®, CMMI® and P-CMM® are registered trademarks of Carnegie Mellon University.ISO® is a registered trademark of the International Organization for Standardization.ITIL® is a registered trademark of the U.K. Office of Government Commerce.Six Sigma® is a registered trademark of Motorola Inc.

Accenture

Page 55: CMMi
Page 56: CMMi

Questions