Capability Maturity Model (CMM) Software Engineering (original) (raw)

Last Updated : 29 Sep, 2025

The Capability Maturity Model (CMM) is a tool used to improve and refine software development processes. It provides a structured way for organizations to assess their current practices and identify areas for improvement. CMM consists of five maturity levels: initial, repeatable, defined, managed, and optimizing. By following the CMM, organizations can systematically improve their software development processes, leading to higher-quality products and more efficient project management.

What is the Capability Maturity Model (CMM)

**Capability Maturity Model (CMM) was developed by the Software Engineering Institute (SEI) at Carnegie Mellon University in 1987. It is not a software process model. It is a framework that is used to analyze the approach and techniques followed by any organization to develop software products. It also provides guidelines to enhance further the maturity of the process used to develop those software products.

It is based on profound feedback and development practices adopted by the most successful organizations worldwide. This model describes a strategy for software process improvement that should be followed by moving through 5 different levels. Each level of maturity shows a process capability level. All the levels except level 1 are further described by Key Process Areas (KPA).

Importance of Capability Maturity Model

• **Optimization of Resources: CMM helps businesses make the best use of all of their resources, including money, labor, and time. Organizations can improve the effectiveness of resource allocation by recognizing and getting rid of unproductive practices.
• **Comparing and Evaluating: A formal framework for benchmarking and self-evaluation is offered by CMM. Businesses can assess their maturity levels, pinpoint their advantages and disadvantages, and compare their performance to industry best practices.
• **Management of Quality: CMM emphasizes quality management heavily. The framework helps businesses apply best practices for quality assurance and control, which raises the quality of their goods and services.
• **Enhancement of Process: CMM gives businesses a methodical approach to evaluate and enhance their operations. It provides a road map for gradually improving processes, which raises productivity and usefulness.
• **Increased Output: CMM seeks to boost productivity by simplifying and optimizing processes. Organizations can increase output and efficiency without compromising quality as they go through the CMM levels.

Principles of Capability Maturity Model (CMM)

• People's capability is a competitive issue. Competition arises when different organizations are performing the same task (such as software development). In such a case, the people of an organization are sources of strategy and skills, which in turn results in better performance of the organization.
• The people's capability should be defined by the business objectives of the organization.
• An organization should invest in improving the capabilities and skills of the people as they are important for its success.
• The management should be responsible for enhancing the capability of the people in the organization.
• The improvement in the capability of people should be done as a process. This process should incorporate appropriate practices and procedures.
• The organization should be responsible for providing improvement opportunities so that people can take advantage of them.
• Since new technologies and organizational practices emerge rapidly, organizations should continually improve their practices and develop the abilities of people.

**Shortcomings of the Capability Maturity Model (CMM)

• It encourages the achievement of a higher maturity level in some cases by displacing the true mission, which is improving the process and overall software quality.
• It only helps if it is put into place early in the software development process.
• It has no formal theoretical basis and in fact, is based on the experience of very knowledgeable people.
• It does not have good empirical support and this same empirical support could also be constructed to support other models.
• Difficulty in measuring process improvement: The SEI/CMM model may not provide an accurate measure of process improvement, as it relies on self-assessment by the organization and may not capture all aspects of the development process.
• Focus on documentation rather than outcomes: The SEI/CMM model may focus too much on documentation and adherence to procedures, rather than on actual outcomes such as software quality and customer satisfaction.
• May not be suitable for all types of organizations: The SEI/CMM model may not be suitable for all kinds of organizations, particularly those with smaller development teams or those with less structured development processes.
• May not keep up with rapidly evolving technologies: The SEI/CMM model may not be able to keep up with rapidly evolving technologies and development methodologies, which could limit its usefulness in certain contexts.
• Lack of agility: The SEI/CMM model may not be agile enough to respond quickly to changing business needs or customer requirements, which could limit its usefulness in dynamic and rapidly changing environments.

Key Process Areas (KPA)

Each of these KPA (Key Process Areas) defines the basic requirements that should be met by a software process to satisfy the KPA and achieve that level of maturity.

Conceptually, key process areas form the basis for management control of the software project and establish a context in which technical methods are applied, work products like models, documents, data, reports, etc. are produced, milestones are established, quality is ensured and change is properly managed.

Levels of Capability Maturity Model (CMM)

There are 5 levels of Capability Maturity Models. We will discuss each one of them in detail.

CMM

**Level-1: Initial

• No KPIs defined.
• Processes followed are Adhoc and immature and are not well defined.
• Unstable environment for software development.
• No basis for predicting product quality, time for completion, etc.
• Limited project management capabilities, such as no systematic tracking of schedules, budgets, or progress.
• We have limited communication and coordination among team members and stakeholders.
• No formal training or orientation for new team members.
• Little or no use of software development tools or automation.
• Highly dependent on individual skills and knowledge rather than standardized processes.
• High risk of project failure or delays due to a lack of process control and stability.

**Level-2: Repeatable

• Focuses on establishing basic project management policies.
• Experience with earlier projects is used for managing new similar-natured projects.
• **Project Planning- It includes defining resources required, goals, constraints, etc. for the project. It presents a detailed plan to be followed systematically for the successful completion of good-quality software.
• **Configuration Management- The focus is on maintaining the performance of the software product, including all its components, for the entire lifecycle.
• **Requirements Management- It includes the management of customer reviews and feedback which result in some changes in the requirement set. It also consists of accommodation of those modified requirements.
• **Subcontract Management- It focuses on the effective management of qualified software contractors i.e. it manages the parts of the software developed by third parties.
• **Software Quality Assurance- It guarantees a good quality software product by following certain rules and quality standard guidelines while developing.

**Level-3: Defined

• At this level, documentation of the standard guidelines and procedures takes place.
• It is a well-defined integrated set of project-specific software engineering and management processes.
• **Peer Reviews: In this method, defects are removed by using several review methods like walkthroughs, inspections, buddy checks, etc.
• **Intergroup Coordination: It consists of planned interactions between different development teams to ensure efficient and proper fulfillment of customer needs.
• **Organization Process Definition: Its key focus is on the development and maintenance of standard development processes.
• **Organization Process Focus: It includes activities and practices that should be followed to improve the process capabilities of an organization.
• **Training Programs: It focuses on the enhancement of knowledge and skills of the team members including the developers and ensuring an increase in work efficiency.

**Level-4: Managed

• At this stage, quantitative quality goals are set for the organization for software products as well as software processes.
• The measurements made help the organization to predict the product and process quality within some limits defined quantitatively.
• **Software Quality Management: It includes the establishment of plans and strategies to develop quantitative analysis and understanding of the product's quality.
• **Quantitative Management: It focuses on controlling the project performance quantitatively.

**Level-5: Optimizing

• This is the highest level of process maturity in CMM and focuses on continuous process improvement in the organization using quantitative feedback.
• The use of new tools, techniques, and evaluation of software processes is done to prevent the recurrence of known defects.
• **Process Change Management: Its focus is on the continuous improvement of the organization's software processes to improve productivity, quality, and cycle time for the software product.
• **Technology Change Management: It consists of the identification and use of new technologies to improve product quality and decrease product development time.
• **Defect Prevention It focuses on the identification of causes of defects and prevents them from recurring in future projects by improving project-defined processes.

Case-Studies Capability Maturity Model (CMM):

1. Tata Consultancy Services (TCS)

CMMI has long been used by TCS, a well-known Indian provider of IT services and consulting, to enhance its software development and delivery procedures. TCS has been able to provide high-quality solutions and meet client expectations owing in part to this deployment.

2. Infosys

CMMI has been used by India-based Infosys, a global provider of IT services and consulting, to improve its software development and delivery skills. To increase process efficiency and provide its clients with high-quality solutions, the organization has adopted CMMI methods.

3. Lockheed Martin

Global aerospace and defense giant Lockheed Martin has a long history of being acknowledged for reaching high CMM maturity levels. The company's software development and project management procedures have improved as a result of its successful CMM implementation.

CMM (Capability Maturity Model) vs CMMI (Capability Maturity Model Integration)

Levels of CMMI

CMMI, like CMM, is organized into five stages of process maturity. However, they differ from the levels in CMM.

There are 5 performance levels of the CMMI Model.

**Level 1: Initial: Processes are often ad hoc and unpredictable. There is little or no formal process in place.

**Level 2: Managed: Basic project management processes are established. Projects are planned, monitored, and controlled.

**Level 3: Defined: Organizational processes are well-defined and documented. Standardized processes are used across the organization.

**Level 4: Quantitatively Managed: Processes are measured and controlled using statistical and quantitative techniques. Process performance is quantitatively understood and managed.

**Level 5: Optimizing: Continuous process improvement is a key focus. Processes are continuously improved based on quantitative feedback.

Questions For Practice

**1. Capability Maturity Model (CMM) is the methodology to [ISRO 2017]

****(A)** Develop and refine an organization's software development process

****(B)** Develop the software

****(C)** Test the software

****(D)** All of the above

**Solution: The correct answer is ****(A).**

**2. Match the 5 CMM Maturity levels/CMMI staged representations in List- I with their characterizations in List-II codes: [UGC NET CS 2018]

**Choose the Correct Option:

**Solution: The correct answer is ****(D).**

**3. Which one of the following is not a key process area in CMM level 5? [UGC NET CSE 2014]

****(A)** Defect prevention

****(B)** Process change management

****(C)** Software product engineering

****(D)** Technology change management

**Solution: The correct answer is ****(C).**

**Conclusion

The Capability Maturity Model (CMM) is a framework designed to help organizations improve their software development processes. It outlines five levels of maturity, each representing a step towards more organized and efficient practices. In simple words, CMM helps companies identify their current process capabilities, find weaknesses, and provide a structured path for improvement, ensuring better project management and higher quality outcomes over time.