CMMI-SVC & ISO20000 Kieran Doyle T: 01748 821824 E: kieran.doyle@lamri.com
Agenda How CMMI-SVC Relates to ISO 20000 What does CMMI-SVC give me? Implementation Scenarios
How CMMI-SVC Relates to ISO 20000
The CMMI-SVC Model MATURITY LEVEL PROCESS AREAS 5- OPTIMISING 4- QUANTITATIVELY MANAGED Innovation & Deployment Process Performance Causal Analysis & Resolution Quantitative Core Process Areas CMMI-SVC Process Areas Shared Process Areas (i.e. only with CMMI-DEV) 3- DEFINED Process Focus Strategic Organisation Process Definition Capacity & Availability Training Incident Resolution & Prevention Integrated System Transition Decision Analysis & Resolution Continuity System Development * 2- MANAGED Requirements Delivery Planning Monitoring & Control Supplier Agreement Measurement & Analysis Process & Product QA Configuration * Optional addition
Mapping ISO 20000 Clauses to CMMI-SVC CMMI-SVC provides almost complete coverage of ISO 20000 clauses
How Much CMMI-SVC Do I Need for ISO 20000? MATURITY LEVEL PROCESS AREAS 5- OPTIMISING Innovation & Deployment Causal Analysis & Resolution Not necessary for initial coverage CMMI-SVC Process Areas required to cover ISO 20000 clauses 4- QUANTITATIVELY MANAGED Process Performance Quantitative 3- DEFINED Process Focus Strategic Organisation Process Definition Capacity & Availability Training Incident Resolution & Prevention Integrated System Transition Decision Analysis & Resolution Continuity System Development * 2- MANAGED Requirements Delivery Planning Monitoring & Control Supplier Agreement Measurement & Analysis Process & Product QA N.B. Lamri recommends always implementing complete process areas. Configuration * Optional addition
If I Do ISO 20000, How Much CMMI-SVC Do I Get? MATURITY LEVEL PROCESS AREAS 5- OPTIMISING 4- QUANTITATIVELY MANAGED Innovation & Deployment Process Performance Causal Analysis & Resolution Quantitative Not necessary for ISO 20000 Required to cover ISO 20000 Implementing ISO20000 gives this CMMI-SVC Coverage 3- DEFINED Process Focus Strategic Organisation Process Definition Capacity & Availability Training Incident Resolution & Prevention Integrated System Transition Decision Analysis & Resolution Continuity System Development * 2- MANAGED * Optional addition Requirements Delivery Planning Monitoring & Control Supplier Agreement Measurement & Analysis Process & Product QA ISO20000 partially implements CMMI processes. The differences are significant in the next slides we discuss these differences. Configuration
Difference = Value Lamri recommends implementing each Process Area in FULL Partial implementation of a Process Area is a risky approach Practices are closely connected and difficult to pull apart ISO 20000 coverage is dispersed However, these differences represent advantage from implementing the CMMI practices
The CMMI Added Value: Where CMMI Maps Directly to ISO 20000
CMMI Added Value - Generic Practice (GPs) Gaps At Capability Level 2, all Process Areas have these 10 GPs in place All GPs are core to all CMMI Models They ensure the embedding of good practice They provide pragmatic steps that lead automatically to well embedded practice Generic Practices Establish an Policy Plan the Process Provide Resources Assign Responsibility Train People Manage Configurations Identify and Involve Relevant Stakeholders Monitor and Control the Process Objectively Evaluate Adherence Review Status with Higher Level
CMMI Added Value - Generic Practices (GPs) Certain practices are not stressed to the same extent in ISO20000. E.g. Stakeholder Stakeholder management occurs a couple of places in the standard In CMMI it is an inherent part of every process area, focussing attention on what stakeholders are relevant to each task, and how they are involved Information Flows (Monitor and Control the Process) Every process area requires pragmatic measures to be identified and used Provides a structure for capturing and reporting management information that zeros in on what is important to managers
CMMI Added Value Process Areas Fully implementing the process areas that map directly to ISO 20000 can deliver significant benefits. Requirements (REQM) Traceability of requirements right through from the customer s request through to finished product. Ties Design, Development and Delivery together Process Areas (PP, PMC) Supplier Agreement (SAM) In a services environment this is crucial for rapid turn around of changes to services Rigorous mechanisms which have been proven to lead to substantial improvements in organisational predictability. Instils a way of managing supplier interfaces that requires insight into the relevant supplier processes ( Looking into the box ). This facilitates: Effective tailoring of processes to relevant interfaces Focussed management information for supplier interfaces Better risk management of supplier interfaces
CMMI Added Value Process Areas Fully implementing the process areas that map directly to ISO 20000 can deliver significant benefits. Measurement and Analysis (MA) CMMI brings robust management information rather than just data collection. This focuses attention on: Collecting the right information that addresses organisational goals Addressing how we are going to analyse the data and turn it into valuable information Taking the right action using the data Building up a history of data that progressively delivers better predictability and a richer picture of organisational behaviour
The CMMI Added Value: From Fully Implementing Maturity Level 3
What Value Do The Untouched ML3 PA s Give Us? MATURITY LEVEL PROCESS AREAS 5- OPTIMISING Innovation & Deployment Causal Analysis & Resolution Not necessary for initial coverage CMMI-SVC Process Areas required to cover ISO 20000 clauses 4- QUANTITATIVELY MANAGED Process Performance Quantitative 3- DEFINED Process Focus Strategic Organisation Process Definition Capacity & Availability Training Incident Resolution & Prevention Integrated System Transition Decision Analysis & Resolution Continuity System Development * 2- MANAGED Requirements Delivery Planning Monitoring & Control Supplier Agreement Measurement & Analysis Process & Product QA Configuration * Optional addition
CMMI Added Value Maturity Level 3 Gaps Implementing the remaining Maturity Level 3 Process Areas delivers further substantial benefits. OPF, OPD, OT and IPM are the bedrock of ML3 and together achieve a step change in an organisation. Impact Way of Thinking Focus on Business Goals Process Asset Right Balance of People, Tools and Processes Learning Organisation Integrated Teams Benefit The big picture of how the organisation fits together and works drives efficient ways of working Process is designed to achieve objectives; not to tick boxes. What works can be used again and again with confidence and reduced risk. The tools and environments support effective processes and people know what they are doing. The organisation stops re-inventing the wheel. Good practice is easily communicated and used. Break down organisational silos between different departments and groups.
Standardising the Offering (Strategic - SSM) This Process Area focuses on maintaining a set of standard services Standardising the process offering enables rapid, repeatable delivery of service to customers If your organisation already offers a standard catalogue of services, you are well on the way to satisfying this process area. BUT remember the importance of the Generic Practices These practices enforce a particular discipline in maintaining the organisation s asset base
The Improvement Scale CMMI High Maturity CMMI ML3 ISO 20000 CMMI ML2 Achieving CMMI-SVC ML2 gives a solid basis for establishing & maintaining ISO20000 An existing ISO20000 accreditation is a firm basis for a mature organisation Achieving CMMI-SVC ML3 creates an organisation with a very strong customer focus, that is significantly more effective and efficient in the delivery of its services.
CMMI, ISO 20000, ITIL: The Good, The Bad, & The Ugly?
CMMI-SVC, ISO 20000, ITIL These 3 complement each other substantially. ITIL is the Library full of great ideas CMMI-SVC is the Reading List for success ISO 20000 is the Exam CMMI-SVC Supports ISO 20000. ITIL is not essential But Lamri recommends using ITIL for implementation guidance to address gaps CMMI-SVC ISO 20000 ITIL Road Map of Change & Value Certifies Position Provides Implementation Options
Implementation Choices
Implementation Choices Given the mapping discussed earlier we have a number of choices of how to implement CMMI-SVC Option 1: Implement all Process Areas that map directly to ISO 20000 Option 2: Implement all Process Areas up to Maturity Level 3 Option 3: Implement the Maturity Level 2 process areas only Lamri believes these choices fit best with certain scenarios.
Scenario 1: Maintaining an Existing ISO 20000 Certification. CMMI-SVC provides almost complete coverage of the ISO 20000 clauses. Only 1 clause (6.6 Information Security ) is not covered by CMMI-ACQ However, if the organisation already has the ISO 20000 standard, this clause will already be satisfied. Implementing Option 1 (i.e. the 12 Process Areas that cover the ISO 20000 clauses): Maintains the ISO 20000 certification Embeds the expected behaviours more strongly Delivers additional benefits that extend the value of the ISO 20000 certification
Scenario 2: Attaining an ISO 20000 Certification. The CMMI-ACQ can be used in two ways to help attain ISO 20000 accreditation. Implement Option 1 - (i.e. the Process Areas that cover the ISO 20000 clauses) Similarly to the previous scenario implementing these 12 Process Areas will give a significantly more robust implementation of ISO 20000. The chances of attaining accreditation are significantly improved. Additional work would however need to be done in the area of Information Security. However, this would be case anyway. Implement Option 3 I.e. CMMI-ACQ Maturity Level 2. This wont get the organisation all the way to attaining certification. But it will give a solid foundation for achieving accreditation. This option could be used as a partial step towards option 1.
Scenario 3: Already Have ISO 20000 Certification But Want to Further Improve Again two options are worthwhile considering Implement Option 1 Implementing these 12 process areas delivers the additional benefits discussed earlier It strengthens and maintains the existing accreditation It constitutes a step towards option 2 Implement Option 2 I.e. go straight to CMMI ML3 This significantly strengthens the existing ISO certification But additionally increases the organisation s efficiency, effectiveness, cohesion, risk profile, etc. In short CMMI-SVC ML3 delivers Competitive Advantage
Q&A