Systematic process improvement using ISO 9001:2000 and CMMI

160 Transitioning from Legacy Standards
Table 6.2
Activity
Defined Process
Generic Practice
Follow a plan that incorporates a defined process (defined process GP 3.1
clearly states the following: purpose, inputs, entry criteria,
activities, roles, measures, verification steps, outputs, and exit
criteria).
Collect work products, measures, and improvement information for GP 3.2
supporting the use and improvement of the organizational process
assets.
institutionalizing the process. One of the more prominent new GPs is GP
2.7, Identify and Involve the Relevant Stakeholders as Planned. The CMM ® uses
the wording other groups, which seldom specifically includes customers and
end users. Relevant stakeholders are the providers of process inputs, the
users of the process outputs, and the process performers. Once stakeholders
are identified, their involvement in the process is planned. Most organizations
will have to address this specific requirement when transitioning from the
CMM ® to the CMMI ® .
GP 2.8, Monitor and Control the Process, is new in the CMMI ® . It is broader
than the ME common feature found in all CMM ® KPAs. It combines measurements
of actual performance against the plan, reviews of accomplishments
and results of the process, reviews with the immediate level of management
responsible for the process, identification of problems in the plan for performing
the process, and taking corrective action.
Verifying Implementation
In the CMMI ® the VE common feature was ‘‘trimmed’’ a little bit. The
requirement for reviewing the PA activities with a project manager has been
dropped. In addition, the requirement for software quality assurance (SQA)
review of project activities is now reworded as ‘‘Objectively evaluate adherence
of the process against its process description, standards, and procedures,
and address noncompliances’’ (GP 2.9). There are no requirements for the
separate reviews that were required in some CMM ® KPAs, such as independent
reviews in the SQA KPA.
In the continuous representation, the generic practices that institutionalize
a managed and defined process are the same as in the staged representation.
By following generic practices in each PA we have a clear picture of
what is required to bring each of the PAs to the managed or defined capability
level.