Technical Report CMU/SEI-96-TR-023 ESC-TR-96-023 Cleanroom Software Engineering Implementation of the Capability Maturity Model (CMMsm) for Software Richard C. Linger Mark C. Paulk Carmen J. Trammell December 1996 Technical Report CMU/SEI-96-TR-023 ESC-TR-96-023 December 1996 Cleanroom Software Engineering Implementation of the Capability Maturity Model (CMMsm) for Software Richard C. Linger Mark C. Paulk Software Engineering Institute Carmen J. Trammell University of Tennessee Process Program Unlimited distribution subject to the copyright Software Engineering Institute Carnegie Mellon University Pittsburgh, PA 15213 This report was prepared for the SEI Joint Program Office HQ ESC/AXS 5 Eglin Street Hanscom AFB, MA 01731-2116 The ideas and findings in this report should not be construed as an official DoD position. It is published in the interest of scientific and technical information exchange. FOR THE COMMANDER (signature on file) Thomas R. Miller, Lt Col, USAF SEI Joint Program Office This work is sponsored by the U.S. Department of Defense. Copyright © 1996 by Carnegie Mellon University. Permission to reproduce this document and to prepare derivative works from this document for internal use is granted, provided the copyright and “No Warranty” statements are included with all reproductions and derivative works. Requests for permission to reproduce this document or to prepare derivative works of this document for external and commercial use should be addressed to the SEI Licensing Agent. NO WARRANTY THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING INSTITUTE MATERIAL IS FURNISHED ON AN “AS-IS” BASIS. CARNEGIE MELLON UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. This work was created in the performance of Federal Government Contract Number F19628-95-C-0003 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center. The Government of the United States has a royalty-free government-purpose license to use, duplicate, or disclose the work, in whole or in part and in any manner, and to have or permit others to do so, for government purposes pursuant to the copyright license under the clause at 52.227-7013. This document is available through Research Access, Inc., 800 Vinial Street, Pittsburgh, PA 15212. Phone: 1-800-685-6510. FAX: (412) 321-2994. RAI also maintains a World Wide Web home page. The URL i s http://www.rai.com Copies of this document are available through the National Technical Information Service (NTIS). For information on ordering, please contact NTIS directly: National Technical Information Service, U.S. Department of Commerce, Springfield, VA 22161. Phone: (703) 487-4600. This document is also available through the Defense Technical Information Center (DTIC). DTIC provides access to and transfer of scientific and technical information for DoD personnel, DoD contractors and potential contractors, and other U.S. Government agency personnel and their contractors. To obtain a copy, please contact DTIC directly: Defense Technical Information Center / 8725 John J. Kingman Road / Suite 0944 / Ft. Belvoir, VA 22060-6218. Phone: (703) 767-8222 or 1-800 225-3842.] Use of any trademarks in this report is not intended in any way to infringe on the rights of the trademark holder. Contents Acknowledgments..................................................................................................................iii 1 Cleanroom and the CMM for Software ...........................................................................1 2 The Capability Maturity Model for Software..................................................................3 2.1 The Five Maturity Levels.....................................................................................3 2.2 The Key Process Areas ..........................................................................................4 2.3 Common Features and Key Practices ................................................................6 3 Cleanroom Software Engineering Processes....................................................................9 3.1 Cleanroom Management Processes...................................................................9 Project Planning Process..................................................................................9 Project Management Process........................................................................10 Performance Improvement Process ...........................................................10 Engineering Change Process.........................................................................10 3.2 Cleanroom Specification Processes..................................................................11 Requirements Analysis Process ..................................................................11 Function Specification Process.....................................................................11 Usage Specification Process...........................................................................11 Architecture Specification Process ..............................................................11 Increment Planning Process.........................................................................12 3.3 Cleanroom Development Processes................................................................12 Software Reengineering Process..................................................................12 Increment Design Process .............................................................................12 Correctness Verification Process..................................................................13 3.4 Cleanroom Certification Processes...................................................................13 Usage Modeling and Test Planning Process..............................................13 Statistical Testing and Certification Process..............................................13 4 Cleanroom Implementation of the CMM for Software..............................................15 4.1 Cleanroom and the CMM...................................................................................15 4.1.1 Cleanroom/CMM Correspondences .................................................15 4.1.2 Summary of the Cleanroom/CMM Mapping.................................19 4.1.3 Interpreting the Cleanroom/CMM Mapping Tables .....................21 CMU/SEI-96-TR-023 Cleanroom Implementation of the CMM for Software ■ i 4.2 Cleanroom Implementation of Level 2 KPAs...............................................23 4.2.1 Requirements Management...............................................................23 4.2.2 Software Project Planning...................................................................27 4.2.3 Software Project Tracking and Oversight........................................31 4.2.4 Software Subcontract Management..................................................36 4.2.5 Software Quality Assurance ...............................................................41 4.2.6 Software Configuration Management .............................................45 4.3 Cleanroom Implementation of Level 3 KPAs...............................................49 4.3.1 Organization Process Focus ................................................................49 4.3.2 Organization Process Definition........................................................53 4.3.3 Training Program .................................................................................56 4.3.4 Integrated Software Management.....................................................59 4.3.5 Software Product Engineering ...........................................................63 4.3.6 Intergroup Coordination.....................................................................68 4.3.7 Peer Reviews..........................................................................................72 4.4 Cleanroom Implementation of Level 4 KPAs...............................................75 4.4.1 Quantitative Process Management...................................................75 4.4.2 Software Quality Management..........................................................79 4.5 Cleanroom Implementation of Level 5 KPAs...............................................83 4.5.1 Defect Prevention .................................................................................83 4.5.2 Technology Change Management ....................................................88 4.5.3 Process Change Management.............................................................92 References.................................................................................................................................97 Portions of this Technical Report will appear as part of a book in the SEI Series in Software Engineering, entitled Cleanroom Software Engineering, by Richard C. Linger and Carmen J. Trammell. The book will be published by the Addison-Wesley Publishing Company, Reading, Ma. ii ■ Cleanroom Implementation of the CMM for Software CMU/SEI-96-TR-023 Acknowledgments The authors express appreciation to the many reviewers of this document for their careful review and excellent suggestions. The reviewers included Philip Hausler,