Data Management Maturity (DMM) Model Update



Similar documents
Evaluating the Quality of Software Engineering Performance Data

CMMI KEY PROCESS AREAS

CMMI for Development, Version 1.3

CMMI for Acquisition, Version 1.3

CMMI for Development, Version 1.3

Moving Target Reference Implementation

Distributed and Outsourced Software Engineering. The CMMI Model. Peter Kolb. Software Engineering

Applying Software Quality Models to Software Security

CMMI Version 1.2. SCAMPI SM A Appraisal Method Changes

Electricity Subsector Cybersecurity Capability Maturity Model (ES-C2M2) (Case Study) James Stevens Senior Member, Technical Staff - CERT Division

Interpreting Capability Maturity Model Integration (CMMI ) for Service Organizations a Systems Engineering and Integration Services Example

Software Engineering. Standardization of Software Processes. Lecturer: Giuseppe Santucci

CMMI-Services Visao Geral & CMMI v1.3 Plans

Data Management Maturity Model. Overview

CAPABILITY MATURITY MODEL INTEGRATION

Towards a new approach of continuous process improvement based on CMMI and PMBOK

Resolving Chaos Arising from Agile Software Development

MKS Integrity & CMMI. July, 2007

Software Quality. Process Quality " Martin Glinz. Chapter 5. Department of Informatics!

Lessons Learned from Adopting CMMI for Small Organizations

wibas Team CMMI-ITIL IT Maturity S e r v i c e s

Steve Masters (SEI) SEPG North America March Carnegie Mellon University

Merging Network Configuration and Network Traffic Data in ISP-Level Analyses

CMMI: Specific Goals and Practices

Contracting Officer s Representative (COR) Interactive SharePoint Wiki

Data Management Maturity Model. Overview

The Compelling Case For CMMI-SVC: CMMI-SVC, ITIL & ISO20000 demystified

Capability Maturity Model Integration (CMMI SM ) Fundamentals

CMMI for Development Introduction & Implementation Roadmap

Buyer Beware: How To Be a Better Consumer of Security Maturity Models

Synergism of the CMMI Development and Services Constellations in a Hybrid Organization

Introduction to SEIs Capability Maturity Model Integration (CMMI)

Capability Maturity Model Integration (CMMI)

The Road to Enterprise Data Governance: Applying the Data Management Maturity Model in a Financial Services Firm

Truly Managing a Project and Keeping Sane While Wrestling Elegantly With PMBOK, Scrum and CMMI (Together or Any Combination)

CMMI meets ITIL. Dr. Ute Streubel

Integrating CMMI & ITIL: An Outsourcing Success Story. Joanne Kopcho Capgemini, Outsourcing Services

Case Study of CMMI implementation at Bank of Montreal (BMO) Financial Group

Interpreting Capability Maturity Model Integration (CMMI ) for Business Development Organizations in the Government and Industrial Business Sectors

Risk Management Framework

Software Acquisition Capability Maturity Model (SA-CMM ) Version 1.03

Common Testing Problems: Pitfalls to Prevent and Mitigate

Cyber Intelligence Workforce

An Application of an Iterative Approach to DoD Software Migration Planning

Model Checking Distributed Software

Agenda. CMMI, ITIL & ISO A Mutually Supportive Relationship

SW Process Improvement and CMMI. Dr. Kanchit Malaivongs Authorized SCAMPI Lead Appraisor Authorized CMMI Instructor

Leveraging CMMI framework for Engineering Services

A SURVEY OF ARTIFICIAL INTELLIGENCE TECHNIQUES FOR CAPABILITY MATURITY MODEL INTEGRATION (CMMI)

Integrating CMMI with COBIT and ITIL

An OWL Ontology for Representing the CMMI-SW Model

Copyright 2014 Carnegie Mellon University The Cyber Resilience Review is based on the Cyber Resilience Evaluation Method and the CERT Resilience

A Report on The Capability Maturity Model

CMMI for SCAMPI SM Class A Appraisal Results 2011 End-Year Update

Comparing Scrum And CMMI

Data Management Maturity Model Introduction

A Systematic Method for Big Data Technology Selection

Capability Maturity Model Integrated (CMMI)

Using Rational Software Solutions to Achieve CMMI Level 2

Getting Started with Service- Oriented Architecture (SOA) Terminology

How to use CMMI to bring your project management process to the next level A CMMI Implementation Case Study

Agile Development and Software Architecture: Understanding Scale and Risk

CERT Resilience Management Model (RMM) v1.1: Code of Practice Crosswalk Commercial Version 1.1

Literature. 9. Quality Control. Quality control tries to eliminate coincidence Quality control makes achieving quality repeatable FBI Sentinel Project

Custom Development Management and Resource Planning. Eric Halbur, Application Development Manager

Assurance Cases for Design Analysis of Complex System of Systems Software

Developing a Data Management Strategy Using CMMI Data Maturity Model

The Capability Maturity Model for Software, Version 1.1

Is the CMMI¹ of Value for Flight Software? Dr. Gary M. Heiligman Space Department The Johns Hopkins University Applied Physics Laboratory

SOA for Healthcare: Promises and Pitfalls

CMMI: What do we need to do in Requirements Management & Engineering?

Implementation of Multiple Quality Frameworks An Analysis

Applying Agile Techniques to Process Development: Lessons Learned

Understanding High Maturity Organizations

SEI Level 2, 3, 4, & 5 1 Work Breakdown Structure (WBS)

Software Quality Management II

Software Configuration Management. Wingsze Seaman COMP250SA February 27, 2008

Software Process Improvement CMM

ISO 9001/TL 9000 and CMMI Comparison

Process In Execution Review (PIER) and the SCAMPI B Method

CMMI and Agile our experience revealed

RTI Software Development Methodology and CMMI

Basic Principles and Concepts for Achieving Quality

Software Process Improvement Framework for Software Outsourcing Based On CMMI Master of Science Thesis in Software Engineering and Management

Using Lean Six Sigma to Accelerate

Assurance in Service-Oriented Environments

Using Baldrige Performance Criteria to Strengthen CMMI Measurable Results NDIA CMMI Conference - November 2008

CMMI and IBM Rational Unified Process

Exploring CMMI-ISO ISO 9001:2000 Synergy when Developing a Process Improvement Strategy

Extending AADL for Security Design Assurance of the Internet of Things

Supply-Chain Risk Management Framework

A Lightweight Supplier Evaluation based on CMMI

An Integrated Model of ISO 9001:2000 and CMMI for ISO Registered Organizations

Rapidly Defining a Lean CMMI Maturity Level 3 Process

Software Process Maturity Model Study

ORACLE NAIO Excellence combined with Quality A CMMI Case study

2012 CyberSecurity Watch Survey

A Study of Systems Engineering Effectiveness. Building a Business Case for Systems Engineering

Optimizing Organizational Measurement and Analysis ROI for Small Diverse Projects. Susanna Schwab July 2007

Automated Provisioning of Cloud and Cloudlet Applications

Transcription:

Data Management Maturity (DMM) Model Update Rawdon Young November 2012 Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213

Contents / Agenda The DMM SEI Observations on Core Content Model from EDM Council DMM V1.0 Requirements CMMI Reuse in DMM DMM Development Plan 2

DMM Model 3

Data Management Maturity Model Partnership between the Enterprise Data Management Council (EDM Council) and the SEI to develop a model for data management. Detailed documentation of all components associated with data management at the project and organization level (practical measurement criteria based on operational reality) Consistent measurement criteria for appraising data management capabilities that can be verified 4

Current Status Baseline content developed by EDM Council and verified by members (6 categories, 15 component areas, 36 business process areas, 18 policies/procedures, 200 capability measures) Core team has been meeting 2/3x per week since January, 2011 to define components (definition, purpose, core issues, explicit goals, expected artifacts) and measurement criteria for each business process area Prototype of the Data Profiling process area has been produced and is under review Core content released by the EDMC 5

Next Steps Discussions with regulators and market authorities on use of DMM for evaluating data management capability (in line with Senior Supervisors Report) Building upon the prototype creating for certification and regulatory adoption DMM Training Any needed modification to SCAMPI appraisal methodology 6

Core Content Document Released by EDM Council July 1, 2012 7

DMM Proposed Process Areas Data Management Strategy Data Management Operations Data Management Goals Corporate Culture Governance Model Data Management Funding Data Requirements Lifecycle Standards and Procedures Data Sourcing Data Management Objectives Data Management Priorities Scope of Data Management Program Alignment Communications Strategy Governance Structure Organization Model Oversight Governance Implementation & Management Human Capital Requirements Measurement Total Lifecycle Cost of Ownership Business Case Funding Model Data Requirements Definition Operational Impact Data Lifecycle Management Areas Promulgation Business Process and Data Flows Data Dependencies Lifecycle Ontology and Business Semantics Data Change Management Data Sourcing Requirements Procurement & Provider Process Platform and Architecture Data Quality Support Process Areas Architectural Framework Platform & Integration Data Quality Framework Data Quality Assurance Architectural Standards Architectural Approach Data Management Platform Application Integration Release Management Historical Data Data Quality Strategy Development Data Quality Measurement & Analysis Data Profiling Data Quality Assessment Data Quality for Integration Data Cleansing Configuration Management Measurement and Analysis Requirements Management Risk Management 8

SEI Observations from Our Reviews of the DMM 9

DMM Core Content Selected Observations from the SEI Review Team DMM Core Content could be used to help Verify the completeness of the developing model Split functional and institutionalization practices Resolve material is written at different levels of detail. Identified relevant CMMI, People CMM and RMM Process Areas Human Capital Requirements P-CMM {STAFF, WFP, OCM}, RMM {HRM, PM} Measurement Core.{MA, GP2.8} Change Requests and Exception Management SVC {IRP}, RMM {IMC} Capability levels (CLs) are used to stratify practices functionally within a PA No separate, detailed characterization of CLs is provided Use RMM focus on process governance instead CMMI poliby Other PAs that might provide value to DMM CMMI Process Management (OPD, OPF) Support PAs (REQM, CM, RSKM, MA) can be lifted from CMMI Core (augmented by RMM components: RRM, RISK, etc.) 10

DMM Model Requirements 11

DDM Requirements EDMC and SEI Align DMM with CMMI to leverage the benefits of the CMMI brand Levels within Process Areas that emphasize increase functional capability Reuse from CMMI constellations, People CMM, and RMM Address the unique aspects of Data Management Flexible Model/Training/Appraisal Incremental builds to Test assumptions Get stakeholder agreement Get-to-market faster Develop full product suite (Model, Training, Appraisal) Address Data Management link to Risk Management in-line with the Senior Supervisors report/financial regulators/dodd-frank legislation 12

A Maximal CMMI Reuse Strategy for Developing DMM V1.0 13

SEI Recommended Approach First draft a Prototype PA for DMM V1.0 Incorporate the CMMI dimension CLs, GGs, GPs Scrub DMM Practices, removing GP-isms from the statements of the practices. Reconcile CMMI and BITS Glossaries Established harmonized glossary Identify initial CMMI Core PAs to Use in DMM MA, CM, REQM, RSKM But also DAR, OPF, OPD, PPQA And to address higher capability, the HM PAs: OPP, OPM, CAR, and an adjusted QPM 14

DMM Development Team Software Engineering Institute Gian Wemyss, Rusty Young, Mike Konrad, Rhonda Brown EDM Council Jim Halcomb, Mike Atkin Booz Allen Hamilton Melanie Mecca Microsoft Corporation Art Freas Lockheed Martin Corporation Lynn Penn Tool Support for Development and Pilots ISD Appraisal Wizard Paul Byrnes, Mike Simmons Method Park - Stages Eric Meier 15

Protoype Principles - 1 1. Minimize the need to learn a new language in order to use the model. 2. All functional practice statements will appear together grouped by level. 3. If a statement relates to a generic practice in CMMI it will be referenced using footnotes/hyperlinks rather than treated as an elaboration and placed elsewhere in the model. Note: We acknowledged that we will find the inconsistent application of generic concepts across the DMM for a given level (e.g. reviewing status with higher level management at level 2). We discussed marking these instances as gaps for further development. We also discussed the possibility that certain practices should be deemed to be applicable to every process area and we should avoid making formulaic statements. 16

Protoype Principles - 2 4. Functional practice statements should adhere to the following quality criteria: Unambiguous (hard to assess "appropriate") Orthogonal (independent) Acceptable to the users Convey what and why (Non-prescriptive and non-negative) Minimize compound statements Is sufficiently detailed to make the process area recognizable to the user Retain statements that pertain to higher and lower levels of activity - it is useful to see a progression. 5. Target State - Multiple Views of a Single Document: Can see operations, management, executive, appraiser needs in one document (assign task to M. Atkin) (Technology enabled pushbutton to see ) 17

Protoype Priciples - 3 6. Guidelines for Functional Practice Statements: While some statements can stand on their own, others may require additional information to understand. May include additional +information to explain what is meant by the singular statement. Expand upon the statement for operational use and appraisal evidence. Establish boundaries for the statement what is included and what is NOT included. Try to stay between 3 to 7 statements per PA. Careful to reduce statements without reducing information. Levels: 1. Competency (how good am I at this): ad hoc, practiced, standardized, measured statistically, feedback processes to facilitate improvements 2. Maturity (at what level are we doing this thing): project, business unit, organizational level, enterprise level, industry level 18

The Result Prototype #2 DMM Data Profiling Prototype 19

Plan for Developing DMM V1.0 20

Milestones July 31, 2012 Development activities begin November 15, 2012 DMM PA Prototype Approved by Sponsors DMM Model Build 1 Completed on February 15, 2013 DMM Model Build 2 Completed on July 8, 2013 DMM Model Build 3 Completed on September 12, 2013 DMM Model Build 4 Completed on December 5, 2013 DMM Model Sponsor\EDM Member Draft released December 31, 2013 DMM Model V1.0 released (Final QA) March 6, 2014 DMM Product Suite (Model, Training, MDD, Certification) released March 20, 2014 21

An Opportunity To Get Involved Sponsorship of DMM creation and roll-out Data management from a non-financial industry perspective Looking for organizations to pilot the DMM (and partners to help with piloting activities) 22

Contact Information Rawdon Young Telephone: +1 412-268-2584 Email: rry@sei.cmu.edu Dave Scherb Telephone: +1 412-268-3946 Email: dscherb@sei.cmu.edu Lisa Masciantonio Telephone: +1 412-268-4652 Email: lm@sei.cmu.edu Gian Wemyss Telephone: +1 412-268-8138 Email: rgw@sei.cmu.edu Web www.sei.cmu.edu www.sei.cmu.edu/contact.cfm U.S. Mail Software Engineering Institute 4500 Fifth Avenue Pittsburgh, PA 15213-2612 USA Customer Relations Email: info@sei.cmu.edu Telephone: +1 412-268-5800 SEI Phone: +1 412-268-5800 SEI Fax: +1 412-268-6257 23

Copyright 2012 Carnegie Mellon University. This material is based upon work supported by the Department of Defense under Contract No. FA8721-05-C-0003 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center. Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the United States Department of Defense. NO WARRANTY THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING INSTITUTE MATERIAL IS FURNISHED ON AN AS- IS BASIS. CARNEGIE MELLON UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. This material has been approved for public release and unlimited distribution except as restricted below. Internal use:* Permission to reproduce this material and to prepare derivative works from this material for internal use is granted, provided the copyright and No Warranty statements are included with all reproductions and derivative works. External use:* This material may be reproduced in its entirety, without modification, and freely distributed in written or electronic form without requesting formal permission. Permission is required for any other external and/or commercial use. Requests for permission should be directed to the Software Engineering Institute at permission@sei.cmu.edu. *These restrictions do not apply to U.S. government entities. 24