Page 272 - DCAP304_DCAP515_SOFTWARE_PROJECT_MANAGEMENT

Software Project Management

Notes Table 13.1: Differences between ISO 9001 and CMM
ISO 9001 CMM
It determines the minimum criteria for an It emphasizes on continuous process improvement
acceptable quality system.
ISO has a wider scope including software, ISO focuses strictly on software.
hardware, materials and services.

ISO 9001

ISO 9001 is a standard for quality management systems and CMMI is a model for process
improvement. If an ISO-certified organization wishes to improve its processes continuously,
implementing CMMI would be a good choice, as it provides more detailed practices for process
improvement than the ISO standards. However, there are two issues that need to be resolved
when an ISO-certified organization implements CMMI. First, it is not easy to identify any
reusable parts of the ISO standards, and it would be advantageous to be able to reuse selected
portions of the ISO standards during CMMI adoption in order to use existing resources to their
best advantage. Second, it is difficult for an ISO-certified organization to implement CMMI in a
straightforward, easy manner because of the differences in the language, structure, and details
of the two sets of documents. In this paper, we present our unified model for ISO 9001:2000 and
CMMI that resolves these two issues. Our model would be an extremely useful tool for ISO-
certified organizations that plan to implement CMMI.

According to the Carnegie Mellon University Software Engineering Institute, CMM is a common-
sense application of software or business process management and quality improvement concepts
to software development and maintenance. It’s a community-developed guide for evolving towards
a culture of engineering excellence, model for organizational improvement. The underlying structure
for reliable and consistent software process assessments and software capability evaluations.
The Capability Maturity Model for Software (CMM) is a framework that describes the key
elements of an effective software process. There are CMM’s for non software processes as well,
such as Business Process Management (BPM). The CMM describes an evolutionary improvement
path from an ad hoc, immature process to a mature, disciplined process. The CMM covers
practices for planning, engineering, and managing software development and maintenance.
When followed, these key practices improve the ability of organizations to meet goals for cost,
schedule, functionality, and product quality. The CMM establishes a yardstick against which it
is possible to judge, in a repeatable way, the maturity of an organization’s software process and
compare it to the state of the practice of the industry. The CMM can also be used by an organization
to plan improvements to its software process. It also reflects the needs of individuals performing
software process, improvement, software process assessments, or software capability evaluations;
is documented; and is publicly available.

ISO 9002

ISO 9002 is no longer in use. It was the standard that applied to organizations that did not do
design or development. It was made obsolete with the 2000 year revisions. Now companies that
do not do design are registered to ISO 9001; they include a “Permissible Exclusion” in the
Quality Manual stating that design and development do not apply and are not included in the
Quality System. ISO 9000 is often used to refer to the set of ISO Quality Management System
documents. ISO 9001 is the document that contains the requirements for the Quality Management
System. You will register to ISO 9001. ISO 9000 is a guidance document on the fundamentals and
vocabulary for quality management systems. ISO 9002 and ISO 9003 are no longer in use. All
companies register to ISO 9001.

266 LOVELY PROFESSIONAL UNIVERSITY