IT DRILLDOWN
 
NEWSLETTERS
 

CIO.com updates, insights and advice on technology, management and your career.

 
 
 
LEADERSHIP
 
CIO Executive Programs
The Leader in Face-to-Face Education for Senior Executives

Offering regional and national programs, CIO (and CSO) events bring together some of the most respected names and thought leaders in information technology and security. Presented by CIOs and other senior level executives, these invitation-only programs offer timely topics and strong networking. Learn More »

 
CIO Executive Council
A Peer-Advisory Service and Professional Association for CIOs

Public Teleconferences
Join CIO Executive Council members and participate in the following live one-hour teleconferences:

* Transforming IT Teams
September 16

* Global CIOs: How to Lead on the World Stage
September 18

* Social Responsibility's Strategic Benefits
October 29

More / Register »

Learn more about the CIO Executive Council »



 
 
RESOURCE CENTER
 
 
 
SUBSCRIBE TO CIO
 
Are you involved in setting the direction for your company's IT budget or strategy?

Apply today for a FREE subscription to CIO Magazine!

 
 

Twelve Critical Questions About CMM

 

March 01, 2004CIO

1. Who was the appraiser? How many Level 5 assessments has he done? (If, for example, the appraiser had never evaluated a Level 5 company before, he will not be well qualified to know what a Level 5 company really looks like.)

2. What part of the company was tested? "Enterprise CMM" companies may have had 10 percent or less of their projects assessed to get the level.

3. How long ago was this done? If it’s more than two years old, chances are it has little meaning because the company will have changed and, in the case of offshore companies, may have grown many times the size it was when assessed.

4. How long did it take the company to move from one level to another? If it’s fewer than two years between Levels 1 through 4, or fewer than one year between Levels 4 and 5, that does not fit with the average. Check the company out further.

5. Where is your evidence of continuous improvement? CMM Level 5 means continuous improvement?make the company show you its improvement history.

6. Who runs the quality group? Ask to meet the quality organization that monitors and audits the process, and make sure it isn’t ghettoized. There should be more than a handful of people, and they should have the power in the organization to change things. They should report directly to the CEO, and the company should link the quality system to executive accountability and compensation.

7. Was the appraiser from inside or outside the organization? Internal assessors cannot be as objective as external lead assessors who have no links to the company.

8. Where are the reports? Ask for formal documents that the assessor must provide to the company, most importantly the Final Findings Report (discusses strengths and weaknesses of the company) and, for CMMI, the Appraisal Disclosure Statement (states exactly where, when, how and by whom the assessment was done). If the documents are vague or fluffy, ask for more detail. The company has it. If the company won’t let you see the reports, move on. You may have found a cheater.

9. What types of projects were assessed? If you’re a financial services organization, you want to make sure that at least one of the projects assessed had something to do with financial processes.

10. Did the appraiser consult on the processes being assessed? Appraisers are supposed to be independent and objective. If they’ve helped the company develop the processes they are rating, it’s a conflict of interest, and they may be tempted to improve the ratings to get their consulting fees.

Loading...
 
 
ABCs
 

Just the basics, please. Sometimes we all need a refresher or we need to make sure our team and our colleagues are all on the same page.

Over 25 tutorials on everything from business intelligence to virtualization.

 
 
FEATURED SPONSORS
 
 
 
SPONSORED LINKS
 

Forrester Total Economic Impact (TEI) report: Save Millions in Fraud Losses.

File Integrity Monitoring: Secure Your Virtual & Physical IT Environments

Protecting Data in a Highly Networked World

InfoWorld Test Center on Oracle Real Application Testing

Oracle Database 11g: Advances in Compression, Real Application Testing and Data Guard

Getting Off on the Right Foot: Avoiding Common Master Data Management False Starts

Renowned Engineering Institution Chooses AMD Processor-Based Servers

Optimizing Infrastructure Control

Effective Security with a Continuous Approach to ISO 27001 Compliance

How Does Your IT Help Desk Measure Up?

Enhancing Online Sales and Support

BlackBerry Solution Increases Customer Service For Corporate Real Estate Company

Write an RFP for Master Data Management: 10 Common Mistakes to Avoid

Building Compliance and Security into an Application Delivery Framework

Network Immunity Manager Video

Compuware.com - See how we make IT rock around the world

CA delivers deeper insight into your assets, resources, projects & services so you can make more informed IT decisions

Discover PMI's credentials and career path tools

SOA Educational Library at the TIBCO SOA Resource Center

TDWI Report shows strong validation for investing in predictive analytics

Learn about the software-based VoIP solution from Microsoft

Microsoft System Center - Designed For Big

The Latest Advancements in SSL Technology

How to Offer the Strongest SSL Encryption

Destination: Intelligent Data Center Automation

Document Management 2.0 -- Web-based Collaboration and the Road to Compliance

Webcast: Roundtable discusses industry trends for Enterprise Content Management

Oracle Real Application Testing with Oracle Database 11g

InfoWorld Test Center on Oracle Active Data Guard

Master Data Management: The Approach Determines the Results

Efficient by design: Watch this flash demo of the Quad-Core AMD Opteron Processor

HP and Oracle deploy unbreakable computing infrastructure at Replacements, Ltd.

Configuration Assessment: Choosing the Right Solution

A Closer Look at SaaS Purchasing Behaviors and Attitudes

Implementing Knowledge Management

Wireless Wars - Exchange Hosting is the Neutral Zone

Heinz Uses a Wireless, Automated, Auditing process on BlackBerry® devices

Putting Windows Server and Citrix to Work in the Enterprise

Making Adaptive Networks a Reality

Spam-proof your business with Google's hosted security solutions

Global Crossing is the most viable alternative for voice, video and data

Plan better, manage better

Dell Latitude: Battery life up to 19 hours. Learn more

Video: 21st Century Networking for a 12th Century Castle

Speed, agility, flexibility - The HP BladeSystem c-Class

Secure your virtual and physical environments with the same software

GET YOUR VoIP ONTM! Win 2 Years of Hosted VoIP from Cypress. $100,000 retail value. Enter today!

Getting in Compliance with Government Data Regulations

Solving Online Credit Fraud Using Device Reputation

The Benefits of Data Deduplication for Data Protection in the Enterprise