Capability Maturity Model (CMM) - Software Engineering
Last Updated :
11 Jul, 2025
The Capability Maturity Model (CMM) is a tool used to improve and refine software development processes. It provides a structured way for organizations to assess their current practices and identify areas for improvement. CMM consists of five maturity levels: initial, repeatable, defined, managed, and optimizing. By following the CMM, organizations can systematically improve their software development processes, leading to higher-quality products and more efficient project management.
What is the Capability Maturity Model (CMM)
Capability Maturity Model (CMM) was developed by the Software Engineering Institute (SEI) at Carnegie Mellon University in 1987. It is not a software process model. It is a framework that is used to analyze the approach and techniques followed by any organization to develop software products. It also provides guidelines to enhance further the maturity of the process used to develop those software products.
It is based on profound feedback and development practices adopted by the most successful organizations worldwide. This model describes a strategy for software process improvement that should be followed by moving through 5 different levels. Each level of maturity shows a process capability level. All the levels except level 1 are further described by Key Process Areas (KPA).
Importance of Capability Maturity Model
- Optimization of Resources: CMM helps businesses make the best use of all of their resources, including money, labor, and time. Organizations can improve the effectiveness of resource allocation by recognizing and getting rid of unproductive practices.
- Comparing and Evaluating: A formal framework for benchmarking and self-evaluation is offered by CMM. Businesses can assess their maturity levels, pinpoint their advantages and disadvantages, and compare their performance to industry best practices.
- Management of Quality: CMM emphasizes quality management heavily. The framework helps businesses apply best practices for quality assurance and control, which raises the quality of their goods and services.
- Enhancement of Process: CMM gives businesses a methodical approach to evaluate and enhance their operations. It provides a road map for gradually improving processes, which raises productivity and usefulness.
- Increased Output: CMM seeks to boost productivity by simplifying and optimizing processes. Organizations can increase output and efficiency without compromising quality as they go through the CMM levels.
Principles of Capability Maturity Model (CMM)
- People's capability is a competitive issue. Competition arises when different organizations are performing the same task (such as software development). In such a case, the people of an organization are sources of strategy and skills, which in turn results in better performance of the organization.
- The people's capability should be defined by the business objectives of the organization.
- An organization should invest in improving the capabilities and skills of the people as they are important for its success.
- The management should be responsible for enhancing the capability of the people in the organization.
- The improvement in the capability of people should be done as a process. This process should incorporate appropriate practices and procedures.
- The organization should be responsible for providing improvement opportunities so that people can take advantage of them.
- Since new technologies and organizational practices emerge rapidly, organizations should continually improve their practices and develop the abilities of people.
Shortcomings of the Capability Maturity Model (CMM)
- It encourages the achievement of a higher maturity level in some cases by displacing the true mission, which is improving the process and overall software quality.
- It only helps if it is put into place early in the software development process.
- It has no formal theoretical basis and in fact, is based on the experience of very knowledgeable people.
- It does not have good empirical support and this same empirical support could also be constructed to support other models.
- Difficulty in measuring process improvement: The SEI/CMM model may not provide an accurate measure of process improvement, as it relies on self-assessment by the organization and may not capture all aspects of the development process.
- Focus on documentation rather than outcomes: The SEI/CMM model may focus too much on documentation and adherence to procedures, rather than on actual outcomes such as software quality and customer satisfaction.
- May not be suitable for all types of organizations: The SEI/CMM model may not be suitable for all kinds of organizations, particularly those with smaller development teams or those with less structured development processes.
- May not keep up with rapidly evolving technologies: The SEI/CMM model may not be able to keep up with rapidly evolving technologies and development methodologies, which could limit its usefulness in certain contexts.
- Lack of agility: The SEI/CMM model may not be agile enough to respond quickly to changing business needs or customer requirements, which could limit its usefulness in dynamic and rapidly changing environments.
Key Process Areas (KPA)
Each of these KPA (Key Process Areas) defines the basic requirements that should be met by a software process to satisfy the KPA and achieve that level of maturity.
Conceptually, key process areas form the basis for management control of the software project and establish a context in which technical methods are applied, work products like models, documents, data, reports, etc. are produced, milestones are established, quality is ensured and change is properly managed.
Levels of Capability Maturity Model (CMM)
There are 5 levels of Capability Maturity Models. We will discuss each one of them in detail.
CMM
Level-1: Initial
- No KPIs defined.
- Processes followed are Adhoc and immature and are not well defined.
- Unstable environment for software development.
- No basis for predicting product quality, time for completion, etc.
- Limited project management capabilities, such as no systematic tracking of schedules, budgets, or progress.
- We have limited communication and coordination among team members and stakeholders.
- No formal training or orientation for new team members.
- Little or no use of software development tools or automation.
- Highly dependent on individual skills and knowledge rather than standardized processes.
- High risk of project failure or delays due to a lack of process control and stability.
Level-2: Repeatable
- Focuses on establishing basic project management policies.
- Experience with earlier projects is used for managing new similar-natured projects.
- Project Planning- It includes defining resources required, goals, constraints, etc. for the project. It presents a detailed plan to be followed systematically for the successful completion of good-quality software.
- Configuration Management- The focus is on maintaining the performance of the software product, including all its components, for the entire lifecycle.
- Requirements Management- It includes the management of customer reviews and feedback which result in some changes in the requirement set. It also consists of accommodation of those modified requirements.
- Subcontract Management- It focuses on the effective management of qualified software contractors i.e. it manages the parts of the software developed by third parties.
- Software Quality Assurance- It guarantees a good quality software product by following certain rules and quality standard guidelines while developing.
Level-3: Defined
- At this level, documentation of the standard guidelines and procedures takes place.
- It is a well-defined integrated set of project-specific software engineering and management processes.
- Peer Reviews: In this method, defects are removed by using several review methods like walkthroughs, inspections, buddy checks, etc.
- Intergroup Coordination: It consists of planned interactions between different development teams to ensure efficient and proper fulfillment of customer needs.
- Organization Process Definition: Its key focus is on the development and maintenance of standard development processes.
- Organization Process Focus: It includes activities and practices that should be followed to improve the process capabilities of an organization.
- Training Programs: It focuses on the enhancement of knowledge and skills of the team members including the developers and ensuring an increase in work efficiency.
Level-4: Managed
- At this stage, quantitative quality goals are set for the organization for software products as well as software processes.
- The measurements made help the organization to predict the product and process quality within some limits defined quantitatively.
- Software Quality Management: It includes the establishment of plans and strategies to develop quantitative analysis and understanding of the product's quality.
- Quantitative Management: It focuses on controlling the project performance quantitatively.
Level-5: Optimizing
- This is the highest level of process maturity in CMM and focuses on continuous process improvement in the organization using quantitative feedback.
- The use of new tools, techniques, and evaluation of software processes is done to prevent the recurrence of known defects.
- Process Change Management: Its focus is on the continuous improvement of the organization's software processes to improve productivity, quality, and cycle time for the software product.
- Technology Change Management: It consists of the identification and use of new technologies to improve product quality and decrease product development time.
- Defect Prevention It focuses on the identification of causes of defects and prevents them from recurring in future projects by improving project-defined processes.
Case-Studies Capability Maturity Model (CMM):
1. Tata Consultancy Services (TCS)
CMMI has long been used by TCS, a well-known Indian provider of IT services and consulting, to enhance its software development and delivery procedures. TCS has been able to provide high-quality solutions and meet client expectations owing in part to this deployment.
2. Infosys
CMMI has been used by India-based Infosys, a global provider of IT services and consulting, to improve its software development and delivery skills. To increase process efficiency and provide its clients with high-quality solutions, the organization has adopted CMMI methods.
3. Lockheed Martin
Global aerospace and defense giant Lockheed Martin has a long history of being acknowledged for reaching high CMM maturity levels. The company's software development and project management procedures have improved as a result of its successful CMM implementation.
CMM (Capability Maturity Model) vs CMMI (Capability Maturity Model Integration)
Aspects
| Capability Maturity Model (CMM)
| Capability Maturity Model Integration (CMMI)
|
---|
Scope
| Primarily focused on software engineering processes.
| Expands to various disciplines like systems engineering, hardware development, etc.
|
Maturity Levels
| Had a five-level maturity model (Level 1 to Level 5).
| Initially had a staged representation; it introduced continuous representation later.
|
Flexibility
| More rigid structure with predefined practices.
| Offers flexibility to tailor process areas to organizational needs.
|
Adoption and Popularity
| Gained popularity in the software development industry.
| Gained wider adoption across industries due to broader applicability.
|
Levels of CMMI
CMMI, like CMM, is organized into five stages of process maturity. However, they differ from the levels in CMM.
There are 5 performance levels of the CMMI Model.
Level 1: Initial: Processes are often ad hoc and unpredictable. There is little or no formal process in place.
Level 2: Managed: Basic project management processes are established. Projects are planned, monitored, and controlled.
Level 3: Defined: Organizational processes are well-defined and documented. Standardized processes are used across the organization.
Level 4: Quantitatively Managed: Processes are measured and controlled using statistical and quantitative techniques. Process performance is quantitatively understood and managed.
Level 5: Optimizing: Continuous process improvement is a key focus. Processes are continuously improved based on quantitative feedback.
Questions For Practice
1. Capability Maturity Model (CMM) is the methodology to [ISRO 2017]
(A) Develop and refine an organization's software development process
(B) Develop the software
(C) Test the software
(D) All of the above
Solution: The correct answer is (A).
2. Match the 5 CMM Maturity levels/CMMI staged representations in List- I with their characterizations in List-II codes: [UGC NET CS 2018]
List - 1
| List - 2
|
---|
(a) Initial
| (i) Processes are improved quantitatively and continually.
|
(b) Repeatable
| (ii) The plan for a project comes from a template for plans.
|
(c) Defined
| (ii) The plan for a project comes from a template for plans.
|
(d) Managed
| (iv) There may not exist a plan or it may be abandoned.
|
(e) Optimizing
| (v) There’s a plan and people stick to it.
|
Choose the Correct Option:
| (a)
| (b)
| (c)
| (d)
| (e)
|
---|
(A)
| iv
| v
| i
| iii
| ii
|
(B)
| i
| ii
| iv
| v
| iii
|
(C)
| v
| iv
| ii
| iii
| i
|
(D)
| iv
| v
| ii
| iii
| i
|
Solution: The correct answer is (D).
3. Which one of the following is not a key process area in CMM level 5? [UGC NET CSE 2014]
(A) Defect prevention
(B) Process change management
(C) Software product engineering
(D) Technology change management
Solution: The correct answer is (C).
Conclusion
The Capability Maturity Model (CMM) is a framework designed to help organizations improve their software development processes. It outlines five levels of maturity, each representing a step towards more organized and efficient practices. In simple words, CMM helps companies identify their current process capabilities, find weaknesses, and provide a structured path for improvement, ensuring better project management and higher quality outcomes over time.
Similar Reads
Software Engineering Tutorial Software Engineering is a subdomain of Engineering in which you learn to develop, design, test, and maintain software using a systematic and structured approach. Software is a collection of programs. And that programs are developed by software engineers In this Software Engineering Tutorial, you wil
7 min read
Software Engineering Basics
Introduction to Software EngineeringSoftware is a program or set of programs containing instructions that provide the desired functionality. Engineering is the process of designing and building something that serves a particular purpose and finds a cost-effective solution to problems. Table of ContentWhat is Software Engineering?Key P
11 min read
Software Development Life Cycle (SDLC)Software Development Life Cycle (SDLC) is a structured process that is used to design, develop, and test high-quality software. SDLC, or software development life cycle, is a methodology that defines the entire procedure of software development step-by-step. The goal of the SDLC life cycle model is
8 min read
Software Quality - Software EngineeringTraditionally, a high-quality product is outlined in terms of its fitness of purpose. That is, a high-quality product will specifically be what the users need to try. For code products, the fitness of purpose is typically taken in terms of satisfaction of the wants arranged down within the SRS docum
5 min read
ISO/IEC 9126 in Software EngineeringThe International Organization for Standardization (ISO) has established a series of ISO and ISO/IEC standards for software quality. Starting with the ISO 9000-3 instructions for implementing the ISO 9001 standard, which is concerned with quality assurance processes, to the creation, supply, install
4 min read
Boehm's Software Quality ModelIn 1978, B.W. Boehm introduced his software quality model, which defines software quality through a hierarchical structure of attributes and metrics. This model is similar to the McCall Quality Model but encompasses a wider range of characteristics, including hardware performance-related ones. Boehm
4 min read
Software Crisis - Software EngineeringThe term "software crisis" refers to the numerous challenges and difficulties faced by the software industry during the 1960s and 1970s. It became clear that old methods of developing software couldn't keep up with the growing complexity and demands of new projects. This led to high costs, delays, a
3 min read
Software Measurement & Metrices
Software Measurement and MetricsSoftware Measurement: A measurement is a manifestation of the size, quantity, amount, or dimension of a particular attribute of a product or process. Software measurement is a titrate impute of a characteristic of a software product or the software process. Table of Content Software Measurement Prin
4 min read
People Metrics and Process Metrics in Software EngineeringPeople Metrics and Process Metrics, both play important roles in software development. People Metrics helps in quantifying the useful attributes whereas Process Metrics creates the body of the software. People metrics focus on how well team members work together and their overall satisfaction, while
8 min read
Halsteadâs Software Metrics - Software EngineeringHalstead's Software metrics are a set of measures proposed by Maurice Halstead to evaluate the complexity of a software program. These metrics are based on the number of distinct operators and operands in the program and are used to estimate the effort required to develop and maintain the program. T
11 min read
Cyclomatic ComplexityCyclomatic complexity, developed by Thomas McCabe, is a metric that measures the complexity of a program by counting its decision points. It measures the number of unique paths through the code, indicating how complex the logic is. Lower complexity suggests simpler, more manageable code, reducing th
6 min read
Functional Point (FP) Analysis - Software EngineeringFunctional Point Analysis (FPA) is a software measurement technique used to assess the size and complexity of a software system based on its functionality. It involves categorizing the functions of the software, such as input screens, output reports, inquiries, files, and interfaces, and assigning w
8 min read
Lines of Code (LOC) in Software EngineeringA line of code (LOC) is any line of text in a code that is not a comment or blank line, and also header lines, in any case of the number of statements or fragments of statements on the line. LOC consists of all lines containing the declaration of any variable, and executable and non-executable state
4 min read
Software Development Models & Agile Methods
Waterfall Model - Software EngineeringThe Waterfall Model is a Traditional Software Development Methodology. It was first introduced by Winston W. Royce in 1970. It is a linear and sequential approach to software development that consists of several phases. This classical waterfall model is simple and idealistic. It is important because
13 min read
What is Spiral Model in Software Engineering?The Spiral Model is one of the most important SDLC model. The Spiral Model is a combination of the waterfall model and the iterative model. It provides support for Risk Handling. The Spiral Model was first proposed by Barry Boehm. This article focuses on discussing the Spiral Model in detail.Table o
9 min read
Prototyping Model - Software EngineeringPrototyping Model is a way of developing software where an early version, or prototype, of the product is created and shared with users for feedback. The Prototyping Model concept is described below: Table of ContentWhat is Prototyping Model?Phases of Prototyping ModelTypes of Prototyping ModelsAdva
7 min read
Incremental Process Model - Software EngineeringThe Incremental model is a software Development approach which is used to breakdown the project into smaller and easily manageable parts. In these, each part passes through Requirement, Design, Testing phases and Implementation phase. The overall process continue until we got the complete System.Inc
6 min read
Rapid Application Development Model (RAD) - Software EngineeringThe RAD model or Rapid Application Development model is a type of software development methodology that emphasizes quick and iterative release cycles, primarily focusing on delivering working software in shorter timelines. Unlike traditional models such as the Waterfall model, RAD is designed to be
9 min read
Coupling and Cohesion - Software EngineeringThe purpose of the Design phase in the Software Development Life Cycle is to produce a solution to a problem given in the SRS(Software Requirement Specification) document. The output of the design phase is a Software Design Document (SDD). Coupling and Cohesion are two key concepts in software engin
10 min read
Agile Software Development - Software EngineeringAgile Software Development is a Software Development Methodology that values flexibility, collaboration, and customer satisfaction. It is based on the Agile Manifesto, a set of principles for software development that prioritize individuals and interactions, working software, customer collaboration,
15+ min read
SRS & SPM
Software Requirement Specification (SRS) FormatIn order to form a good SRS, here you will see some points that can be used and should be considered to form a structure of good Software Requirements Specification (SRS). These are below mentioned in the table of contents and are well explained below. Table of ContentIntroductionGeneral description
5 min read
Software Engineering | Quality Characteristics of a good SRSRelated Article: Writing a good SRS for your project Quality characteristics of a good Software Requirements Specification (SRS) document include:Complete: The SRS should include all the requirements for the software system, including both functional and non-functional requirements.Consistent: The S
7 min read
Software Project Management (SPM) - Software EngineeringSoftware Project Management (SPM) is a proper way of planning and leading software projects. It is a part of project management in which software projects are planned, implemented, monitored, and controlled. In this article, we are discussing Software Project Management (SPM) topics that are useful
8 min read
COCOMO Model - Software EngineeringThe Constructive Cost Model (COCOMO) It was proposed by Barry Boehm in 1981 and is based on the study of 63 projects, which makes it one of the best-documented models. It is a Software Cost Estimation Model that helps predict the effort, cost, and schedule required for a software development project
15+ min read
Capability Maturity Model (CMM) - Software EngineeringThe Capability Maturity Model (CMM) is a tool used to improve and refine software development processes. It provides a structured way for organizations to assess their current practices and identify areas for improvement. CMM consists of five maturity levels: initial, repeatable, defined, managed, a
11 min read
Integrating Risk Management in SDLC | Set 1The Software Development Life Cycle (SDLC) is a conceptual model for defining the tasks performed at each step of the software development process. This model gives you a brief about the life cycle of Software in the development phase. In this particular article, we are going to discuss risk managem
8 min read
Software Maintenance - Software EngineeringSoftware Maintenance refers to the process of modifying and updating a software system after it has been delivered to the customer. This involves fixing bugs, adding new features, and adapting to new hardware or software environments. Effective maintenance is crucial for extending the software's lif
14 min read
Testing & Debugging
What is Software Testing?Software testing is an important process in the Software Development Lifecycle(SDLC). It involves verifying and validating that a Software Application is free of bugs, meets the technical requirements set by its Design and Development, and satisfies user requirements efficiently and effectively.Here
11 min read
Types of Software TestingSoftware testing is a important of software development life-cycle that ensures a product works correctly, meets user expectations, and is free of bugs. There are different types of software testing, each designed to validate specific aspects of an application, such as functionality, performance, se
15+ min read
Testing Guidelines - Software EngineeringSoftware testing is an essential component of software development, ensuring that applications function correctly, meet user expectations, and are ready for deployment. Effective software testing involves a structured approach guided by well-defined principles and best practices. This article explor
3 min read
What is Debugging in Software Engineering?Debugging in Software Engineering is the process of identifying and resolving errors or bugs in a software system. It's a critical aspect of software development, ensuring quality, performance, and user satisfaction. Despite being time-consuming, effective debugging is essential for reliable and com
11 min read
Verification & Validation
Practice Questions