A TSP SM Roadmap to CMMI SM Implementation

Similar documents
Standard CMMI SM Appraisal Method for Process Improvement. (SCAMPI Version 1.1)

SA-CMM and the CMMI sm A Comparison

DAVIS SYSTEMS

Association for Computing Machinery

CMMI Version 1.2. Josh Silverman Northrop Grumman

Final Exam Review (extended)

Developing a Software Industry with TSP and PSP

TSP Secure. Software Engineering Institute Carnegie Mellon University Pittsburgh, PA September 2009

ImplementingPSP/TSP Massivelyin Mexico

A smooth transition from SW-CMM to CMMI

GPI Asia Annual Conference 2012 CMMI for Development with CMMI for Service, or with ITIL

Evaluating and Improving Cybersecurity Capabilities of the Electricity Critical Infrastructure

Certified Information Security Manager (CISM) Course Overview

Software Assurance Education Overview

Using CERT-RMM in a Software and System Assurance Context

The Cleanroom Method

ITIL V3.0 Compliance Benchmarking with CMMI-SVC SCAMPI A

ISTQB Expert Level. Improving the Testing Process. Erik van Veenendaal. Vice-President ISTQB.

Software, Security, and Resiliency. Paul Nielsen SEI Director and CEO

Cloud Strategies for Addressing IT Challenges

Threat and Vulnerability Assessment Tool

Cleanroom Software Engineering

EXIN Expert in IT Service Management based on ISO/IEC Preparation Guide

Determining Best Fit for ITIL Implementation

Global Voic Cutover

State of Security Operations

Information Technology Services. Informational Report for the Board of Trustees October 11, 2017 Prepared effective August 31, 2017

Build Your Cybersecurity Team: Create a Strong Cybersecurity Workforce Using Best Practices in Development

Roles and Responsibilities on DevOps Adoption

Process Improvement for Present and Future. Erik van Veenendaal.

OCM ACADEMIC SERVICES PROJECT INITIATION DOCUMENT. Project Title: Online Coursework Management

The Key to a High. Karen M. Pelletier Deputy Project Manager DD(X) - Smart Product Model Project November 17, Track - 4B5

Goal-Based Assessment for the Cybersecurity of Critical Infrastructure

Quality Assurance Involvement Compared to Program Results. Jill A. Brooks Network Centric Systems

OWASP - SAMM. OWASP 12 March The OWASP Foundation Matt Bartoldus Gotham Digital Science

CERT Overview. Jeffrey J. Carpenter 2008 Carnegie Mellon University

IATF Transition Strategy Presenter: Mrs. Michelle Maxwell, IAOB

Assignment Kit for Program 1

Comprehensive Training For Your Engineering Workforce

ISO/IEC JTC1/SC7 /N4314

CCNA Routing and Switching Overview. June 2013

The CERT Top 10 List for Winning the Battle Against Insider Threats

The Fine Art of Creating A Transformational Cyber Security Strategy

NORTH CAROLINA NC MRITE. Nominating Category: Enterprise IT Management Initiatives

Data Governance Quick Start

ERO Compliance Enforcement Authority Staff Training

Opportunities to Integrate Technology Into the Classroom. Presented by:

REPORT 2015/149 INTERNAL AUDIT DIVISION

BUILDING CYBERSECURITY CAPABILITY, MATURITY, RESILIENCE

CIMA Asia. Interactive Timetable Live Online

CIMA Asia. Interactive Timetable Live Online

National Initiative for Cyber Education (NICE) and the Cybersecurity Workforce Framework: Attract and Retain the Best in InfoSec.

Regional TSM&O Vision and ITS Architecture Update

How To Reduce the IT Budget and Still Keep the Lights On

CMPIC s CM Training & Certification Courses

IATF Transition Strategy Presenter: Cherie Reiche, IAOB

2018 CALENDAR OF ACTIVITIES

The Evolution of IT Service Management

INFORMATION TECHNOLOGY NETWORK ADMINISTRATOR ANALYST Series Specification Information Technology Network Administrator Analyst II

"Charting the Course... ITIL 2011 Managing Across the Lifecycle ( MALC ) Course Summary

ALBEMARLE COUNTY SERVICE AUTHORITY

The Insider Threat Center: Thwarting the Evil Insider

FRM TRAINING Our National Industrial Training Authority registration Number is NITA/TRN/1261.

NHS Fife. 2015/16 Audit Computer Service Review Follow Up

Academic Program Review at Illinois State University PROGRAM REVIEW OVERVIEW

Certified Tester. Expert Level. Modules Overview

Professional (CBAP) version 3

Protecting Control Systems from Cyber Attack: A Primer on How to Safeguard Your Utility May 15, 2012

Julia Allen Principal Researcher, CERT Division

2 The IBM Data Governance Unified Process

North Carolina Visit and Assessment Tom Clarke Vice President for Research and Technology National Center for State Courts

SESSION 802 Friday, November 3,10:15am - 11:15am Track: The Generalist

Asset Management NL What s the Plan?

Building a Resilient Security Posture for Effective Breach Prevention

Organizational Privacy Transformation: A case study from Critical Issues to Award Winning Success

Consideration of Issues and Directives Federal Energy Regulatory Commission Order No. 791 June 2, 2014

The CERT Survivability and Information Assurance Curriculum Building Enterprise Networks on a Firm Educational Foundation

Turning Risk into Advantage

Getting in Gear with the Service Catalog

ITSM20F_Umang. Number: ITSM20F Passing Score: 800 Time Limit: 120 min File Version: 4.0. Exin ITSM20F

SAVE International Certification Program Transition Summary

WELCOME. to the 1 st online DG CONNECT NIPS Study workshop. July 25, 2013

The New Security Heroes. Alan Paller

Effective Use of Non- Directive Tools and Templates Integrating the How s with the What s

Service Extensions to the CMMI

INTEGRITY ASSURANCE: Safety/Security Extensions to CMMI and icmm

Defining Computer Security Incident Response Teams

Researching New Ways to Build a Cybersecurity Workforce

Practical IPv6 for Government

Rethinking Cybersecurity from the Inside Out

APNIC Training Mini Survey

TEL2813/IS2820 Security Management

SAP Help for Student Lifecycle Management

Cleanroom Software Engineering Reference

3/13/2015. COSO Revised: Implications for Compliance and Ethics Programs. Session Agenda. The COSO Framework

INFORMATION TECHNOLOGY ONE-YEAR PLAN

The Presentation Will Begin At 12PM EST

Introduction: UNCC COE MOSAIC Page 1 of 9

IT Updates. Maryland Health Benefit Exchange Board Meeting April 15, Presented by: Isabel FitzGerald Secretary, DoIT

The What, Why, Who and How of Where: Building a Portal for Geospatial Data. Alan Darnell Director, Scholars Portal

Transcription:

Pittsburgh, PA 15213-3890 A TSP SM Roadmap to CMMI SM Implementation Jim McHale, SEI 2 nd CMMI Technology Conference Denver, CO 13 November 2002 Sponsored by the U.S. Department of Defense 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 1

Service Marks and Trademarks The following are service marks of Carnegie Mellon University. Personal Software Process SM PSP SM Team Software Process SM TSP SM CMMI SM The following are registered trademarks of Carnegie Mellon University. Capability Maturity Model CMM 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 2

Acronyms Used CMM CMMI EPG GP KPA ML PA PSP SP SSM TP TR TSP Software Capability Maturity Model v.1.1 CMMI-SE/SW/IPPD v.1.1 Engineering Process Group Generic Practice Key Process Area Maturity Level Process Area Personal Software Process Specific Practice Software Subcontract Management Training Program Technical Report Team Software Process (and sometimes its co-requisite PSP) 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 3

Target Audience Your organization uses CMM as a process standard, and will be moving soon (or is already moving) to CMMI. Your organization is just starting out in model-based improvement, and has chosen CMMI as the reference model. Your organization uses CMM and has no current plans to upgrade to CMMI, but you expect that you will have to do so eventually. Your organization uses TSP and is investigating model-based improvement. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 4

Topics Logic for TSP, CMM, and CMMI CMMI: An Upgrade for CMM TSP for CMM Implementation TSP for CMMI Implementation Getting Started 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 5

The Logical Argument Major premise: CMMI is a model upgrade from the CMM. Minor premise: TSP provides an efficient, effective vehicle for implementing CMM-based improvement. Conclusion: TSP provides an efficient, effective vehicle for implementing CMMI-based improvement. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 6

Vertically Aligned Capabilities CMM/CMMI CMM/CMMI -- for for organizational organizational capability capability TSP TSP -- for for quality quality products products on on cost cost and and schedule schedule PSP PSP -- for for individual individual skill skill and and discipline discipline 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 7

Topics Logic for TSP, CMM, and CMMI CMMI: An Upgrade for CMM TSP for CMM Implementation TSP for CMMI Implementation Getting Started 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 8

Fundamental Goals of CMM/CMMI The original CMM goals have not changed with the CMMI. quality products on committed schedules for the lowest possible costs CMMI recognizes that these goals apply to the entire engineering life cycle, not just the software development life cycle. PSP and TSP were designed to support CMM/CMMI goals at the individual and project team levels, respectively. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 9

Generic Goals and Practices A major feature of the CMMI is the introduction of uniform generic goals and practices across all process areas. This represents a significant improvement upon the Institutionalization Features of the CMM. consistency across the PAs explicit application of other PA disciplines (planning, tracking, measurement, process definition, configuration management, quality assurance) explicit improvement path for any particular process PSP-trained engineers on TSP teams already perform many if not most of the CMMI generic practices. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 10

Measurement and Analysis Why does the average organization going from level 3 to level 4 take 28 months* to get there? The addition of the Measurement and Analysis PA at level 2 corrects a common flaw in CMM-based improvement, namely, the deferral of measurement issues until higher maturity goals come into sight. With CMMI, information needs and measurement objectives become fundamental to improvement efforts as originally intended. Measurement and analysis activities are fundamental to the PSP and the TSP. * Process Maturity Profile of the Software Community, August 2002 (www.sei.cmu.edu/sema/pdf/2002aug.pdf) 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 11

Two Representations The process categories of the CMMI continuous representation provide a better handle on understanding the model and its interrelationships solving implementation issues in an efficient way The staged representation will likely continue to be crucial in obtaining management sponsorship and support establishing improvement priorities setting and communicating goals across an organization 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 12

Internal and External Forces CMMI exists in part because of a need to make sense of the plethora of maturity models developed during the 1990s. U.S. Department of Defense input and funding has driven the development of the integrated models and associated assets. CMM sunset begins in December 2003, ends in December 2005. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 13

Topics Logic for TSP, CMM, and CMMI CMMI: An Upgrade for CMM TSP for CMM Implementation TSP for CMMI Implementation Getting Started 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 14

CMM-TSP Gap Analysis The TSP initiative team at the SEI published results in a June 2002 Technical Report* (TR-008) of an analysis of TSP practices relative to SW-CMM v.1.1. TR-008 assumed that an organization uses the SEI-recommended TSP introduction strategy all development teams in an organization were using TSP Early TR-008 drafts were used by the EPG at two government organizations to help guide their work. Another TR is forthcoming on these results. * CMU/SEI-2002-TR-008, Relating the TSP to the CMM for Software, Noopur Davis and Jim McHale, June 2002. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 15

CMM-TSP Gap Analysis Results 100% Key Practices 90% 80% 70% 60% 50% 40% 30% 20% 10% 0% Level 2 Level 3 Level 4 Level 5 CMM By Level - Project Practices Source: CMU/SEI-2002-TR-008 Not applicable Not addressed Partially addressed Fully addressed 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 16

Naval Oceanographic Office 1993 SEI conducted Software Risk Evaluation; risk areas mapped to CMM level 2 KPAs (strength in SCM); traditional CMM-based improvement with help from SEI and STSC Began PSP/TSP introduction by faculty from Embry-Riddle Aeronautical University PSP training for developers started 1999 PSP instructors authorized; TSP pilot launched 99-02 CMM Snapshot Assessments and a Process Desk Audit showed progression from ML1 to ML2 to ML3 5/01 Standdown to rewrite OSSP to integrate TSP 2001 Began using early draft of TR-008 to help guide improvement efforts 9/02 CBA-IPI: CMM level 3! 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 17

NAVAIR AV-8B March 2000 Began current CMM-based improvement effort Oct. 2000 Began PSP/TSP introduction sequence Jan. 2001 First TSP team launched May 2001 CBA-IPI: CMM level 2; 3 KPAs satisfied at level 3; level 4/5 observations on TSP June 2001 Received draft of CMM-TSP gap analysis (levels 2 and 3 only, minus SSM and TP) to help guide improvement efforts Feb. 2002 Received late-model gap analysis (including TP at level 3 and levels 4 and 5) June 2002 Launched second TSP team Sep. 2002 CBA-IPI: CMM level 4 (14 months from L2!) See Crosstalk, Sep. 2002, AV-8B s Experiences Using the TSP to Accelerate SW-CMM Adoption, Dr. Bill Hefley, Jeff Schwalb, and Lisa Pracchia. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 18

TSP Results: CMM/CMMI Goals Category Without TSP With TSP Average schedule deviation - range Average effort deviation - range Acceptance test product quality (defects/kloc) System test savings (cost to system test 1000 LOC) Number of post-release defects per KLOC 27% to 112% -8% to 5% 17% to 85% -8% to -4%.1 * to.7.02 to.1 1 to 5 days.1 to 1 days.2 to 1+ 0 to.1 * This data (.1 defects/kloc in acceptance test) is from a CMM level 5 organization. Source: CMU/SEI-2000-TR-015, The Team Software Process (TSP): An Overview and Preliminary Results of Using Disciplined Practices, Donald R. McAndrews, November 2000. Organizations were CMM levels 1, 2, 3, and 5. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 19

Effort and Schedule Deviation Average Effort Deviation - Range 120% 100% 80% 60% 40% 20% 0% -20% Pre TSP/PSP With TSP/PSP Average Schedule Deviation - Range 160% 140% 120% 100% 80% 60% 40% 20% 0% -20% Pre TSP/PSP With TSP/PSP 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 20

Quality Defects/KLOC in Acceptance Test - Range 0.9 0.8 0.7 0.6 0.5 0.4 0.3 0.2 0.1 0 Pre TSP/PSP With TSP/PSP Post-Release Defects/KLOC - Range 1.4 1.2 1 0.8 0.6 0.4 0.2 0 Pre TSP/PSP With TSP/PSP 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 21

Reduction in System Test Time System Test Duration (Days/ KLOC) - Range 7 6 5 4 3 2 1 0 Pre TSP/PSP With TSP/PSP 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 22

Topics Logic for TSP, CMM, and CMMI CMMI: An Upgrade for CMM TSP for CMM Implementation TSP for CMMI Implementation Getting Started 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 23

TSP: Not Just About Software The PSP teaches quantitative process principles in a software development context. The TSP requires that project teams collectively take control of their engineering processes in order to do the job right the first time. TSP teams very often include members who are not software engineers. systems engineers hardware engineers test engineers business analysts documentation specialists EPG and other support functions 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 24

Personal Processes for All To address the reality that most of our TSP teams included non-software engineers, SEI developed a twoday course, An Introduction to Personal Process. It does not replace the 10-day PSP for Engineers course. Software engineers need a lot of convincing. Software engineers often have to coach their nonsoftware counterparts. Although some non-software personnel still have difficulty adapting to disciplined methods, we find many that take to it naturally. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 25

Early CMMI-TSP Mapping Results A preliminary survey of TSP practices (leading to another TR in mid-2003) with respect to the CMMI-SE/SW/IPPD shows these results. Project Management SPs: most fully or largely implemented Process Management SPs: majority partially or largely implemented Engineering SPs: majority fully or largely implemented Support SPs: no consistent pattern as yet Generic practices: no policies in the TSP, but most other GPs at all capability levels are either taught in PSP training, or practiced by TSP teams, or both 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 26

AV-8B CMMI Quick Look Profile PA -> RM RD TS PI VE VAL CM PPQA MA CAR DAR OEI OPD OPF OID OT OPP PP PMC IPM QPM SAM RSKM IT Specific Goal 1 U FI NR S S S S S U U NR S S S U S U S S U U U U S SP1.1 FI FI NR FI FI FI FI FI PI PI NR FI FI FI LI FI PI FI FI FI FI FI FI FI SP1.2 FI FI NR FI FI FI FI FI PI PI NR FI FI FI LI FI PI FI FI FI PI FI LI FI SP1.3 FI FI FI FI FI FI LI NR FI FI FI FI FI FI FI FI FI PI LI FI FI SP1.4 PI PI NR FI FI FI LI FI FI FI FI SP1.5 FI NR FI PI FI PI SP1.6 NR FI SP1.7 FI Specific Goal 2 S NR S S S S U U U NR U U U S S NR U U S S SP2.1 FI FI FI FI FI FI LI LI PI PI FI FI LI FI FI NR PI NR FI FI SP2.2 FI FI FI FI FI FI FI LI PI NR FI FI FI FI FI FI PI LI FI FI SP2.3 FI FI FI PI NR PI FI LI FI FI FI FI LI FI FI SP2.4 NR LI LI FI LI FI FI SP2.5 FI FI SP2.6 FI SP2.7 FI SP2.8 Specific Goal 3 NR S S S S S S S SP3.1 NR FI FI FI FI FI FI FI SP3.2 FI FI FI FI FI FI FI FI SP3.3 LI FI FI SP3.4 NR FI SP3.5 NR Specific Goal 4 SP4.1 SP4.2 SP4.3 S FI FI FI PA -> RM RD TS PI VE VAL CM PPQA MA CAR DAR OEI OPD OPF OID OT OPP PP PMC IPM QPM SAM RSKM IT Generic Goal 2 S S S U S S S Generic Goal 3 S U U S S S S S U U NR NR S S NR S U S S S S S S S LEGENDS Practices Goals FI Fully Implemented or Satisfied S Satisfied LI Largely Implemented U Unsatisfied (Goals) PI Partially Implemented NR Not Rated NI Not Implemented NR Not Rated 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 27

Topics Logic for TSP, CMM, and CMMI CMMI: An Upgrade for CMM TSP for CMM Implementation TSP for CMMI Implementation Getting Started 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 28

TSP Introduction SEI s recommended strategy for introducing TSP involves these overlapping steps. Identify key areas for initial introduction. Hold executive seminar and transition planning session. Identify projects that could serve as pilots for TSP. Train the affected managers and engineers. Conduct a few (2-4) trial-use projects. Evaluate initial project results. Train and authorize an internal TSP/PSP transition team. Plan for and initiate broad rollout. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 29

Introduction Adaptations -1 Some of the keys to successfully integrating TSP introduction with model-based improvement efforts include making an explicit connection between the efforts, from senior management through the management ranks to the engineering staff defining (and possibly redefining) the roles of the EPG adapting the TSP roles to interface smoothly with existing organizational roles/groups planning how the data both used and generated by the TSP teams will be accessed, summarized and stored developing an internal capability to train and coach PSP and TSP practices 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 30

Introduction Adaptations -2 Include all development personnel on TSP teams via a TSP launch or relaunch after they receive the appropriate training If transitioning from the CMM to CMMI Train the EPG first. Don t assume that TSP introduction can be accelerated (or must be postponed) because of a particular maturity level. Size of the staff, typical project size and duration, and the availability of training/coaching resources are the critical factors. Launch your EPG using the TSP. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 31

TSP Alone is Not Enough TSP by itself, even if used by every development team, does not cover all practices of any level or process area of CMM or CMMI. Strong management support and significant organizational resources are essential to introduce and coach the TSP to all project teams to maintain and enhance CMM/CMMI organizational capabilities to achieve TSP and CMM/CMMI goals for quality, schedule and cost 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 32

Summary Major Premise: CMMI is a model upgrade from the CMM. Minor premise: TSP does provide an efficient, effective vehicle for implementing CMM-based improvement. Conclusion: Therefore, TSP can provide an efficient, effective vehicle for implementing CMMI-based improvement. 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 33

For More Information jdm@sei.cmu.edu SEI web sites / PSP & TSP Technical Reports http://www.sei.cmu.edu/tsp/ CMU/SEI-2002-TR-008 CMU/SEI-2000-TR-022/023 CMU/SEI-2000-TR-015 Contact a PSP or TSP transition partner http://www.sei.cmu.edu/collaborating/partners/trans.part.psp.html Contact SEI customer relations Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213-3890 Phone, voice mail, and on-demand FAX: 412/268-5800 E-mail: customer-relations@sei.cmu.edu 2002 by Carnegie Mellon University Version 1.0 A TSP Roadmap to CMMI Implementation - 34