U.S. Software Engineering Institute (SEI) developed Software Capability Maturity Model (CMM), and International Organization for Standardization (ISO) developed the ISO 9000 series of standards have focused on quality and process management, both to solve the same problems, visual is relevant. But they have different basis: ISO 9001 (ISO 9000 series of standards on the part of software development and maintenance) to determine the minimum requirements of a quality system, while the CMM process of continuous improvement is emphasized. Of course, this statement a bit subjective, several international standards bodies insist that if the in-depth understanding of ISO 9001 and not just remain on the surface, ISO 9001 can solve the continuous process improvement, for example, correct behavior can be interpreted as continuous improvement. This paper will discuss the question:
◆ organizations to obtain ISO 9000 certification which is roughly equivalent to the level of CMM?
◆ achieve CMM level 2 (or 3) the organization can be considered to meet the ISO 9001 requirements?
◆ obtain ISO 9001 certification and obtain the corresponding CMM certificates of enterprise, who quality management, quality assurance, higher level or?
Production process: manufacturing vs. Software
In general, the quality assurance system is usually referred to products including hardware, software, processes, materials and services. Similarly, ISO 9000 series of standards many parts of the performance of the manufacturing industry in the raw material procurement, production and processing, use of measuring tools and products transportation, storage, packaging and delivery of different aspects such as quality requirements. Therefore, the software companies in the process of establishing quality system must carefully analyze their own production activities and manufacturing differences. As the software development and general manufacturing have significant differences, it should be noted that the characteristics of the software process. To demonstrate the difference between manufacturing and software industry, with photos of two industrial activities are given the image contrast. From the figure can be seen in the manufacturing sector, the production holds the position can not be ignored, it needs the cost of inputs, personnel, venues are unmatched design, and software contrary. Software engineering mainly in software development, manufacturing of products Sheji Xiangdang Yu; Er Ye's production of software is that software development is completed the code Wang Ge Zhong media copy, no matter which part of the work is technical Han Liang Haishitouru of manpower and material resources are extremely limited, especially in mass production conditions, this difference is more obvious, mainly in the following areas:
◆ traditional manufacturing industries have products, must be made in the transport and warehousing of the appropriate arrangements to pay the necessary price. The software industry, these requirements are minimal, even negligible.
◆ features of software products complexity and the product is much higher than the manufacturing sector, it is put into use, the effect can also play any other hardware products can not be compared.
We can see the quality of manufacturing or hardware mainly reflected in the production, storage and transportation process, and the quality of software products mainly from the development process.
Mapping: from ISO 9001 to CMM
Table 1 is the ISO 9001 clauses to CMM key process areas and key model of practice, an overview map. "Strong correlation" column that a more direct correlation between the key process areas and common features; "relevance judgments" column indicates a reasonable correlation to determine when a certain degree of subjectivity to understand the key process areas and common features.
Although some of the issues in ISO 9001 CMM model has not been covered, the details between the two great degree of Chai Yi, but the correlation between the two is still very evident in the. CMM and ISO 9001 the biggest difference between the reflected in two aspects: First, CMM model clearly emphasizes continuous process improvement, and ISO 9001 quality system only requires a minimum guarantee; Second, CMM model is only concerned about the software, and application of ISO 9001 on a larger scale.
Table 1 ISO 9001 and CMM model mapping
ISO9001 Terms of strong correlation to judge relevance
Management responsibilities to fulfill commitments
Software Project Planning
Software project tracking and oversight
Ability to perform software quality standards
Achieve correction
Software Quality Management
Correction of a Quality System
Software Project Planning
Software quality standards
Software product engineering definition of tissue engineering
Assessment of demand management contract
Software project planning software sub-contract management
Design Control Software Project Planning
Software project tracking and oversight
Software Configuration Management
Software Quality Management Software Product Engineering
Document and data control software configuration management
Software Product Engineering
Procurement software sub-contract management
Customer - supplier of control software product sub-contract management
Product identification and tracking software configuration management
Software product engineering
Software Project Planning Project Control
Software Quality Help
Quantitative project management software product engineering
Technology change management
Inspection and testing software product engineering
Partners to review
Check the control, measurement and test equipment software product engineering
Inspection and test status of software configuration management
Software Product Engineering
Substandard products control software configuration management
Software Product Engineering
Corrective and preventive measures for software quality assurance
Software Configuration Management Defect Prevention
Handling, storage, packaging, preservation and distribution of software configuration management
Software Product Engineering
Quality data control software configuration management
Software Product Engineering, partners to review
To achieve internal quality audit inspection, software quality assurance
Ability to carry out training, training programs
Service
Measurement and analysis of statistical techniques, process definition
Quantitative Process Management
Software Quality Management
The maximum similarity between two documents is their Bottom Line: "Say what you want, do what you want to say." ISO 9001's basic assumptions are: institutional quality control activities should be filed by every important process and check each important process. CMM model also emphasized the documented processes and documentation of the design. "According to documented procedures" and follow the "writing of agency policies," is the key to the process of CMM model the characteristics of the region. In a more detailed level, ISO 9001 some of the provisions can be easily mapped to the CMM with considerable practice. But because the structure of two different documents, so most of the relevant mapping is many to many way. For example, ISO 9001 training provision will also be mapped to the CMM key process model training program for all key process areas and the training of familiar practice area.
Conclusion
Through the above analysis, we can get the following conclusions:
1. ISO 9001 and CMM distinct and interrelated
Although some of the requirements ISO 9001 standard does not exist in the CMM, and CMM some of the requirements in ISO 9001 standards do not exist, but it is undeniable that a close relationship between the two. Of course, the difference between the two is also evident, for example, ISO 9001 standard elements of 4.7 and 4.15 in the CMM does not go into details, but 4.19 is scattered in various parts of the CMM. Some elements of ISO 9001, CMM can be found in the corresponding part of the total, and some elements are more dispersed counterparts.
The biggest similarities between the two is both stressed: "that's to say that to, say the want to do." For each key process should be documented, including instructions and instructions, and check the level of quality delivery. CMM emphasizes continuous improvement, ISO 9001 standards of the 1994 version of the main explanation is the "qualified minimum acceptable level of quality system" (ISO 9001 2000 version of the standard has also increased the content of continuous improvement).
In addition, the end of 1999, by the American Society for Quality (ASQ) and Motorola, Nokia, Bell South, etc. more than 100 enterprises and organizations together to develop the telecommunications sector (including telecommunications software development company) TL 9000 quality system standard official release, the deal has been made CMM and ISO 9001 certified software development companies on how to upgrade to TL 9000, the additional audit requirements are very different from the one aspect that shows the differences between them. Obviously, to obtain ISO 9001 certification for the adoption of CMM assessment is useful, the other hand, by CMM assessment to obtain ISO 9001 certification is helpful.
2. To obtain ISO 9001 certification does not mean a level to satisfy the requirements of CMM
On the surface, obtained ISO 9001 certified company should have 3 to CMM level 4, but in fact, some get CMM level 1 company also received ISO 9001 certification, ISO 9001 because the emphasis on customer requirements as a starting point, different customer requirements, quality levels are different, and each level of auditor / interpretation are different. It can be seen that to obtain ISO 9001 certification on behalf of quality management and quality assurance auditors their ability and understanding of standards and the level of their level of a great relationship, and ISO 9001 standard itself is not determined .
ISO 9001 quality management system standard is the minimum acceptable standards, CMM can not be said to have met most of the demands, but one thing is certain: ISO 9001 Certified company can satisfy at least the majority of CMM Level 2 and Level 3 requirements part of the requirements.
3. CMM level 2 by (or 3) to assess does not mean that to meet the requirements of ISO 9001
CMM level 2 process involves all the key requirements of ISO 9001, but lower than the requirements of ISO 9001. In addition, some CMM level 1 organizations to meet the level 2 and level 3 key process requirements, can obtain ISO 9001 certification. Some CMM level 2 or level 3 of the business may be considered to meet the requirements of ISO 9001, but even some by the CMM Level 3 assessed company also need to meet other elements of ISO 9001 in order to meet ISO 9001 requirements.
CMM is specifically designed for software development companies, and therefore better targeted than the ISO 9001, but it should be noted that, CMM is the software development process emphasize the management of the domestic software enterprises, more concerned with "systems integration" and not consider, if the mere establishment of quality in accordance with the requirements of CMM system, you should pay attention to complementary "systems integration" aspects.
This certainly is not clear which CMM and ISO 9001 better than as a system is determined by many aspects of the decision. For a software development enterprise, access to what kind of certification is only superficial, the important thing is to focus on continuous improvement to better ensure the quality of software development, customer satisfaction, to gain competitive advantage.