cmmi for services lecture

Frank Willems

Groningen21 November 2008

ITSM College CMMI for Services

Basics and explanation

2© Twynstra Gudde 21-11-2008


Agenda

1. What is CMMI

2. CMMI for Services proces areas

3. CMMi for Services goals



What is CMMI?

– CMMI = Capability Maturity Model Integrated

– A maturity model for process improvement

– Structure:

– Maturity levels

– Process areas

– Goals

– Practices

– Contains process areas for:

– Project management

– Process management

– Support

– Discipline-specific process areas



Coverage CMMI in relation to other models

Operations

Structure

Strategy

ServiceDirectingBusiness

Six Sigma CMMi

ITIL V3

ITIL V2

ITIL V3 & ASL

ASLBISL

Cobit



CMMI Constellations

CMMIServices

CMMI-SVC provides guidance

for delivering services within

organizations and to external customers

CMMIAcquistion

CMMI-ACQ provides

guidance for enabling

informed and decisive

acquisition leadership

CMMI-DEV provides

guidance for measuring,

monitoring and managing

development processes

CMMIDevelopme

nt

16 Foundational Process Areas, common to all



CMMI Process areas for Development and ServicesProcess Management– (3) Organizational Process Definition (OPD)– (3) Organizational Process Focus (OPF)– (3) Organizational Service Management (OSM)– (3) Organizational Training (OT) – (4) Organizational Process Performance (OPP)– (5) Organizational Innovation and Deployment (OID)

Support– (2) Configuration Management (CM)– (2) Measurement and Analysis (MA) – (2) Process and Product Quality Assurance (PPQA)– (3) Decision Analysis and Resolution (DAR)– (3) Problem Management (PRM)– (5) Causal Analysis and Resolution (CAR)

Service Establishment and Delivery– (2) Incident and Request Management (IRM)– (3) Service Delivery (SD)– (3) Service System Development (SSD)– (3) Service Transition (ST)

Project Management– (2) Project Monitoring and Control (PMC)– (2) Project Planning (PP)– (2) Supplier Agreement Management (SAM) – (3) Capacity and Availability Management (CAM)– (3) Integrated Project Management (IPM)– (3) Risk Management (RSKM)– (3) Service Continuity Management (SCON)– (4) Quantitative Project Management (QPM)

Engineering – (2) Requirements Management (REQM)– (3) Requirements Development (RD) – (3) Product Integration (PI)– (3) Technical Solution (TS)– (3) Validation (VAL)– (3) Verification (VER)



CMMI Process areas

Maturity Level

Practices

Process-areas

contain

contain

goalshave



CMMI Process areas– Goals (required)

– Needed to implement a process area– Specific (Specific Goals)

– Eg: Incidents and requests are identified and managed (SG2 IRM)

– Generic (Generic Goals)– GG1: Achieve specific goals– GG2: Institutionalize a managed process– GG3: Institutionalize a defined process

– Note also that GG3 for the level two process areas are as an organization if you want to get level three, outside the scope of this assessment, but does take action!

– GG4: Institutionalize a quantitatively managed process– GG5: Institutionalize an optimizing process

– Practices (expected)– Help in achieving the goals– Specific for a process area (Specific Practice)

– Eg: Monitor the resolution of incidents and requests (SP2.3 IRM)

– Generic (Generic Practice)– Eg: Identify and involve the relevant stakeholders of the process as planned (GP2.7

IRM)



What is CMMI for Services?

– CMMI for Services is a CMMI constellation that covers the activities required to manage, establish, and deliver services. As defined in the CMMI context, a service is simply an intangible, non-storable product

– CMMI for Services has been developed to be compatible with this broad definition, and its goals and practices are therefore potentially relevant to any organization concerned with the delivery of services, including enterprises in sectors such as defense, information technology, health care, finance, and transportation

– Referenced frameworks and standards: ITIL, ISO20000, IT Service CMM, and COBIT



Why a CMMI for Services?

– We are living in a ‘Service society’

– Over half of the US DoD budget is service-oriented

– A growing portion (~80%) of the US economy is in services

– Legislation such as Sarbanes-Oxley (SOX)

– There is a growing emphasis on quality

– Customer discontentment has grown due to disappointments in outsourcing (where the emphasis was cost cutting).



CMMI levels applied to services

Mature service management prioritizes its improvements into 5 levels:

1. As-is services, not a professional approach

2. Basic service management and support discipline

3. Organizational consistency of level 2-3 practices, including service delivery, and advanced management practices

4. Quantitative predictors of key service qualities

5. Optimization of key service qualities



CMMI services specific process areasRequirements Management (level 2)

– Requirements Management has been extended to include the establishment and maintenance of written agreements between service providers and customers on service requirements and service levels.

Configuration Management (level 2)

– To establisch and maintain integrity of work products using configuration identification, control, status accounting and audits, including change control.

Incident and Request Management (level 2)

– Ensure the timely resolution of requests for service and incidents that occur during service

delivery.

Measurement and Analysis (level 2)

– To develop and substain a measurement capability that is to support management information needs

Process and Product Quality Assurance (level 2)

– To provide staff and management



CMMI services specific process areas

Project Planning (level 2)

– To establish and maintain plans that define project activities

Project Monitoring and Control (level 2)

– To provide an understanding of the project’s progress so that appropriate corrective actions can be taken when the project’s performance deviates significantly from the plan

Supplier Agreement Management (level 2)

– To manage the acquisition of products from suppliers

Problem Management (level 3)

– Prevent incidents from recurring by identifying and addressing underlying causes of incidents.

Capacity and Availability Management (level 3)

– Plan and monitor the effective provision of resources to support service requirements.



CMMI services specific process areas

Organizational Service Management (level 3)

– Establish and maintain standard services that ensure the satisfaction of the organization's customer base.

Service Continuity (level 3)

– Establish and maintain contingency plans for continuity of agreed services during and following any significant disruption of normal operations.

Service Delivery (level 3)

– Deliver services in accordance with service agreements.

Service System Development (level 3)

– Analyze, design, develop, integrate, and test service systems to satisfy existing or anticipated service agreements.

Service Transition (level 3)

– Deploy new or significantly changed service systems while managing their effect on ongoing service delivery.



Specific goals and practices Requirements Management

(level 2)SG 1: Requirements are managed and inconsistencies with project plans and

work products are identified

– SP 1.1: Develop an understanding with the requirements providers on the meaning of the requirements.

– SP 1.2: Obtain commitment to the requirements from the project participants

– SP 1.3: Manage changes to the requirements as they evolve during the project

– SP 1.4: Maintain bidirectional traceability among the requirements and work products.

– SP 1.5: Identify inconsistencies between the project plans and work products and the requirements.

SG 2: Service requirements agreements are established and maintained

– SP 2.1: Analyze existing agreements and service data against requested service requirements.

– SP 2.2: Establish and maintain the service requirements agreement.



Specific goals and practices Configuration Management (level 2)

SG 1: Baselines of identified work products are established.

– SP 1.1: Identify the configuration items, components, and related work products that will be placed under configuration management

– SP 1.2: Establish and maintain a configuration management and change management system for controlling work products.

– SP 1.3: Create or release baselines for internal use and for delivery to the customer.

SG 2: Changes to the work products under configuration management are

tracked and controlled.

– SP 2.1: Track change requests for the configuration items.

– SP 2.2: Control changes to the configuration items.

SG 3: Integrity of baselines is established and maintained.

– SP 3.1: Establish and maintain records describing configuration items.

– SP 3.2: Perform configuration audits to maintain integrity of the configuration baselines.



Specific goals and practices Incident and Request Management (level 2)

SG 1: Preparation for incident and request management is conducted

– SP 1.1: Establish and maintain the strategy to be used for incident and request management.

– SP 1.2: Establish and maintain an incident and request management system for

recording incident and request information.

SG 2: Incidents and requests are identified and managed.

– SP 2.1: Identify and record incidents and requests.

– SP 2.2: Analyze, review, and manage incidents and requests

– SP 2.3: Monitor the resolution of incidents and requests and escalate if necessary.

– SP 2.4: Communicate the status of incidents and requests and validate the resolution of incidents and requests with the submitters of incidents and requests.



Specific goals and practices Measurement and Analysis (level 2)

SG 1: Measurement objectives and activities are aligned with identified

information needs and objectives.

– SP 1.1: Establish and maintain measurement objectives that are derived from identified

information needs and objectives. – SP 1.2: Specify measures to address the measurement objectives.

– SP 1.3: Specify how measurement data will be obtained and stored.

– SP 1.4: Specify how measurement data will be analyzed and reported.

SG 2: Measurement results, which address identified information needs

and objectives, are provided.

– SP 2.1: Obtain specified measurement data.

– SP 2.2: Analyze and interpret measurement data.

– SP 2.3: Manage and store measurement data, measurement specifications, and analysis results.

– SP 2.4: Report results of measurement and analysis activities to all relevant stakeholders.



Specific goals and practices Process and Product Quality Assurance (level 2)

SG 1: Adherence of the performed process and associated work products

and services to applicable process descriptions, standards, and

procedures is objectively evaluated.

– SP 1.1: Objectively evaluate the designated performed processes against the applicable process descriptions, standards, and procedures.

– SP 1.2: Objectively evaluate the designated work products and services against the applicable process descriptions, standards, and procedures.

SG 2: Noncompliance issues are objectively tracked and communicated,

and resolution is ensured.

– SP 2.1: Communicate quality issues and ensure resolution of noncompliance issues with the staff and managers.

– SP 2.2: Establish and maintain records of the quality assurance activities.



Specific goals and practices Project Planning (level 2)

SG 1: Estimates of project planning parameters are established and maintained.

– SP 1.1: Establish a top-level work breakdown structure (WBS) to estimate the scope of the project.

– SP 1.2: Establish and maintain estimates of the attributes of the work products and tasks.

– SP 1.3: Define the project lifecycle phases on which to scope the planning effort.

– SP 1.4: Estimate the project effort and cost for the work products and tasks based on estimation rationale.

SG 2: A project plan is established and maintained as the basis for managing the project.

– SP 2.1: Establish and maintain the project’s budget and schedule.

– SP 2.2: Identify and analyze project risks.

– SP 2.3: Plan for the management of project data.

– SP 2.4: Plan for necessary resources to perform the project.

– SP 2.5: Plan for knowledge and skills needed to perform the project.

– SP 2.6: Plan the involvement of identified stakeholders.

– SP 2.7: Establish and maintain the overall project plan content.



Specific goals and practices Project Planning (level 2)

SG 3: Commitments to the project plan are established and maintained.

– SP 3.1: Review all plans that affect the project to understand project commitments.

– SP 3.2: Reconcile the project plan to reflect available and estimated resources.

– SP 3.3: Obtain commitment from relevant stakeholders responsible for performing and supporting plan execution..



Specific goals and practices Project Monitoring and Control (level 2)

SG 1: Actual performance and progress of the project are monitored against

the project plan.

– SP 1.1: Monitor the actual values of the project planning parameters against the project plan.

– SP 1.2: Monitor commitments against those identified in the project plan.

– SP 1.3: Monitor risks against those identified in the project plan.

– SP 1.4: Monitor the management of project data against the project plan.

– SP 1.5: Monitor stakeholder involvement against the project plan.

– SP 1.6: Periodically review the project's progress, performance, and issues.

– SP 1.7: Review the accomplishments and results of the project at selected project milestones.

SG 2: Corrective actions are managed to closure when the project's performance or

results deviate significantly from the plan.

– SP 2.1: Collect and analyze the issues and determine the corrective actions necessary to address the issues.

– SP 2.2: Take corrective action on identified issues.

– SP 2.3: Manage corrective actions to closure.



Specific goals and practices Supplier Agreement Management (level 2)

SG 1: Agreements with the suppliers are established and maintained.– SP 1.1: Determine the type of acquisition for each product or product component to be

acquired.

– SP 1.2: Select suppliers based on an evaluation of their ability to meet the specified requirements and established criteria.

– SP 1.3: Establish and maintain formal agreements with the supplier.

SG 2: Agreements with the suppliers are satisfied by both the project and

the supplier.

– SP 2.1: Perform activities with the supplier as specified in the supplier agreement.

– SP 2.2: Select, monitor, and analyze processes used by the supplier.

– SP 2.3: Select and evaluate work products from the supplier of custom-made products.

– SP 2.4: Ensure that the supplier agreement is satisfied before accepting the acquired product.

– SP 2.5: Transition the acquired products from the supplier to the project.



Example of Audit Tool



Example of Audit Reporting Tool

SG1 SG2 SG3 GG2 GG3

Requirements Management (REQ level 2) PS PS PS NS

Configuration Management (CON level 2) PS PS PS NS NS

Incident and Request Management (IRM level 2) S PS PS NS

Measurement and Analysis (MA level 2) NS NS NS NS

Process and Product Quality Assurance (PPQA level 2) S PS PS PS

Project Planning (PP level 2) PS NS NS NS NS

Project Monitoring and Control (PMC level 2) PS PS S PS

Supplier Agreement Management (SAM level 2) PS NS PS PS

Organizational Process Focus (OPF) PS PS NS NS NS

Organizational Process Definition (OPD) PS PS NS NS

Organizational Training (OT) PS PS PS NS



Generic goals CMMI Services

– GG1: The process supports and enables achievement of the specific goals of the process area by transforming identifiable input work products to produce identifiable output work products

– GG2: The process is institutionalized as a managed process

– GG3: The process is institutionalized as a defined process

– GG4: The process is institutionalized as a quantitatively managed process.

– GG5: The process is institutionalized as an optimizing process



More information

– CMMI: http://www.sei.cmu.edu/cmmi

– CMMI for Services Public Workspace: https://bscw.sei.cmu.edu/pub/bscw.cgi/0/424939

– CMMi for Services at DNV Cibit: http://www.cibit.nl/



All rights reserved. No part of this presentation may be reproduced or published in any form or by any means without the prior written permission of Twynstra Gudde.

Frank [email protected]/frankwillems

www.twynstragudde.nl

cmmi for services lecture

Business

cmmi cmmi

services process management

cmmi process areas goals

basic service management

cmmi levels

defined process

services proces areas

service requirements