CMMC is “The Capability Maturity Model Integration (CMMI) for Acquisition”. This maturity assessment approach was developed by the US government with assistance from Carnegie Mellon University.
A CMMI maturity level is assigned following a full and independent assessment of an organization’s processes and practices, and governs how well-defined and documented they are.
These maturity levels:
– set the expectations and requirements
– focus on continuous process improvement and capability maturity.
CMMC is a component of the CMMI-ACQ ( CMMI for Acquisition, Capability Maturity Model Integration) that also includes CMMI for Development and CMMI for Services that were developed by Carnegie Mellon University. CMMC criteria and practices are based in-part on the Software Engineering Institute (SEI) and CMMI for Development.
How is CMMC different from conventional maturity models?
– It focuses on achieving process improvements; only maturity levels 3-5 apply to software acquisition programs or projects.
– The assessment model includes both business and engineering practices, whereas other models focus on engineering practices.
– It provides an assessment of the maturity of a process, not just whether it is being followed. All but one process area has associated key practices that must be accomplished to achieve each maturity level.
-FM3 and FM4 were combined into CMMC to create more consistency with the SEI’s CMMi model and to improve the ability to assess and improve acquisition management.
– It uses a staged process, where the organization starts at maturity level 1 and then works towards achieving higher maturity levels.
– An organization that has attained CMMC Level 5 is expected to have an established set of processes that are repeatable, documented, managed, measured, assessed.
Organizations can be assessed to CMMC Levels 2-5.
What is a traditional or conventional maturity model?
A discipline that applies the principles of software engineering and systems engineering to establish, measure, and improve the operational capability of an organization’s processes for acquiring technology-based products and services from internal stakeholders, from external service providers, or from suppliers.
What is CMMI?
A process improvement approach that provides organizations with a model for assessing and continuously improving their operational capabilities and results by focusing on: people, processes, and products. It helps maximize an organization’s value by enabling effective management of the entire acquisition life cycle.
Who has developed CMMC?
CMMC was developed by the US government with assistance from Carnegie Mellon University.
How is CMMC different from other acquisition models?
– It focuses on achieving process improvements; only maturity levels 3-5 apply to software acquisition programs or projects.
– The assessment model includes both business and engineering practices, whereas other models focus on engineering practices.
– It provides an assessment of the maturity of a process, not just whether it is being followed. All but one process area has associated key practices that must be accomplished to achieve each maturity level.
– FM3 and FM4 were combined into CMMC to create more consistency with the SEI’s CMMi model and to improve the ability to assess and improve acquisition management.
– It uses a staged process, where the organization starts at maturity level 1 and then works towards achieving higher maturity levels.
– An organization that has attained CMMC Level 5 is expected to have an established set of processes that are repeatable, documented, managed, measured, assessed.
Organizations can be assessed to CMMC Levels 2-5.
