SlideShare a Scribd company logo
A Process Maturity Model for Requirements Engineering
Process Maturity Models A process maturity model is a framework that organisations can use to assess their processes against ‘best practice’ in industry Processes are ranked on an ascending scale according to the practices used and the quality assurance procedures that are in place in the organisation Models serve as a basis for process improvement through moving from one level to another in the model The US DoD Software Capability Maturity Model is the best known maturity model but others (Bootstrap, Spice) have also been developed
The CMM for Software Requirements management 4 managed 2 repeatable 3 defined 1 initial 5 optimising
The CMM and Requirements Engineering The Capability Maturity Model has been designed for military system development where the requirements are the input to the software development process and are developed as part of the system procurement process It is NOT therefore concerned with requirements engineering processes except for requirements management - controlling changes to the requirements after they have been agreed The REAIMS project has identified a similar model for requirements engineering processes
The REAIMS process maturity model 3 level model.  No direct correspondence  with CMM levels  4 and 5. 1 initial 2 repeatable 3 defined
Principles of the REAIMS model There are known good practices in requirements engineering Use of these good practices lead to fewer RE process problems, better system requirements and therefore better software systems Because of the variability in RE processes, the model should not be prescriptive about the actual practices used in an organisation The model should provide a framework for process assessment and incremental RE process improvement through the introduction of these good practices
Good RE practices Basic : Fundamental measures needed for a repeatable process Intermediate : Help make process more systematic, sometimes complex to implement Advanced : Require specialist expertise, support on-going improvement Not all practices are appropriate to all organisations Implementation of Intermediate and Advanced practices is only likely to be successful if there is a foundation of basic good practice in place
The REAIMS process maturity model Level 1 - Initial level.  Limited use of the best industrial practices. Most organisational RE processes operate at this level Typically: Ad hoc processes Costs are hard to estimate and control Unsupported by planning and review procedures or documentation standards Depend on “heroics”.  Success depends on individuals rather than the organisation
The REAIMS process maturity model Level 2 - Repeatable level.  Extensive use of basic good practices and limited use of intermediate and advanced practices. Typically: Defined standards for documents Policies and procedures for requirements management Possible use of structured methods ISO 9000 certification if appropriate
The REAIMS process maturity model Level 3 - Defined level Extensive use of basic and intermediate practices. Some use of appropriate advanced practices Few organisations appear to be operating at this level. However, it is probably only appropriate for developers of critical systems. Typically: Integrated requirements and systems engineering Active process improvement programme Able to accurately evaluate new practices
Maturity levels & practice classifications No rigid correspondence between maturity level and practice classes It is not necessary to have implemented all 36 basic practices to be a repeatable process Similarly... No rigid correspondence between maturity level activities/products e.g.: requirements elicitation should be addressed to help achieve a repeatable process but not to the exclusion of other areas.
Maturity assessment Goals of maturity assessment: Identify the approximate maturity level A management requirement. Identify particular areas of weakness Needed for effective targeting of resources We felt that the assessment process used in the CMM was too complex and expensive. Therefore, a requirement for the maturity assessment process was that it should be fairly easy to use We have developed a simple checklist-based assessment process based around good practice usage
Maturity assessment Resolve areas of uncertainty Calculate  maturity Score process against checklist Prune guideline checklist Select people to interview
Prune guideline checklist We have developed a check-list with 36 basic good practices, 21 intermediate practices and 9 advanced practices  Eliminate those practices that are obviously never used Some of the practices recommended are domain specific (e.g. are focussed on critical systems) Some practices are very advanced and only used in a small number of organisations (e.g. formal specification) Managers can very quickly identify practices that they are sure are never used in their organisation
Select people to interview Need to identify key people to talk to Practitioners what happens on the ground, level of usage, practical difficulties, etc. Managers what is supposed to happen, level of organisational commitment, etc. Choose people from different projects/groups/departments Only a small number of organisations have actually standardised the techniques that they use Your goal is to discover the  reality  not what the situation is supposed to be
Score practices against checklist Your goal is to discover whether or not good practices are used in the organisation Practices are roughly scored according to whether they are: Standardised - defined organisational standards have been agreed.  In normal use - used by virtually all teams but often in different ways Used at peoples’ discretion - some teams have chosen to adopt particular practices Never used
Resolve areas of uncertainty The previous assessment activity will usually reveal patchy use across (e.g.) projects Need to evaluate representative level of usage and their consequences for the organisation This is an opportunity to find out what you do well and what you could do better. You may be surprised at the skills in your organisation Typically, this is likely to be most time-consuming part of the assessment
Calculate process maturity Score 3 for standardised practice, 2 for normal practice, 1 for occasional practice and 0 for unused practice Initial < 55 in basic practices.  Repeatable >= 55 in basic practices and normally < 40 in others Defined > 85 in basic practices and >= 40 in others
Interpreting the result As it is practically impossible to draw clear divisions between the levels, we believe that the assessment used is accurate enough as a basis for process improvement Other, more accurate but more costly assessment schemes could be devised. But (unlike the CMM) the classification is simply an internal guide and not used by external organisations Of course, the numeric result should be considered in the light of what is known about the domain and the organisation.
Benefits of assessment Understanding what you actually do is an essential pre-requisite for improving your practice You may discover excellent practices and commonalities between projects and teams that were not previously apparent You expose engineers to new ideas and provide a basis for change It demonstrates an external and internal commitment to improving quality
Summary A process maturity model is a framework for assessing your existing processes and putting in place a programme of process improvement The REAIMS requirements engineering maturity model has three levels based on the use of good RE practices Initial - limited use Intermediate - extensive use of basic good practice Advanced - use of advanced techniques A simple checklist-based process can be used to assess the maturity of an organisation’s RE processes

More Related Content

PPTX
Agile_Jira_Presentation_1.pptx
PPTX
User acceptance testing checklist (uat)
PPTX
Software Quality Gate.pptx
PPT
What is an RTM?
PPTX
Xray for Jira - Overview
PDF
PMP ITTOs Quick Review
PPTX
Huong dan su dung filter and dashboard trong Jira
PPTX
ISTQB Test Process
Agile_Jira_Presentation_1.pptx
User acceptance testing checklist (uat)
Software Quality Gate.pptx
What is an RTM?
Xray for Jira - Overview
PMP ITTOs Quick Review
Huong dan su dung filter and dashboard trong Jira
ISTQB Test Process

What's hot (20)

PPTX
Jira overview
PDF
Fundamentals of Software Testing
PDF
XRAY for Jira
DOC
Complete guide to manual testing@uma
PPS
ISTQB Foundation - Chapter 2
PPTX
Jira as a Test Management Tool
PPTX
BDD presentation
PPTX
Agile Software Development Methodologies
PDF
PMP - Download 49 Processes Chart | PMBOK6 | Links to all Slides | Link to Yo...
PPTX
Robot Framework
PPTX
Requirements Maturity Model Overview
PPT
User Acceptance Testing (Uat)
PPTX
Agile Testing: The Role Of The Agile Tester
PDF
ISTQB Metodolojisi ile Test Planlama ve Tahminleme
PPTX
Chapter 5 - Test Management
PPT
Agile Scrum Methodology
PPTX
Jira fundamentals
PDF
Integration of SharePoint and SAP Extended ECM
PPTX
Agile software development
PPTX
Use of Jira Confluence as Project Management Tool
Jira overview
Fundamentals of Software Testing
XRAY for Jira
Complete guide to manual testing@uma
ISTQB Foundation - Chapter 2
Jira as a Test Management Tool
BDD presentation
Agile Software Development Methodologies
PMP - Download 49 Processes Chart | PMBOK6 | Links to all Slides | Link to Yo...
Robot Framework
Requirements Maturity Model Overview
User Acceptance Testing (Uat)
Agile Testing: The Role Of The Agile Tester
ISTQB Metodolojisi ile Test Planlama ve Tahminleme
Chapter 5 - Test Management
Agile Scrum Methodology
Jira fundamentals
Integration of SharePoint and SAP Extended ECM
Agile software development
Use of Jira Confluence as Project Management Tool
Ad

Viewers also liked (20)

PDF
Process Maturity Model by 3P Associates
PPT
Cmm
PPT
Measuring Process Maturity: The Business Process Maturity Model
PPT
Capability Maturity Model
PPT
Capability maturity model cmm lecture 8
PDF
Using Models for Incident, Change, Problem and Request Fulfillment Management
PDF
ITIL V3 and Service Operation - ITSM Academy Webinar
PPT
Capability Maturity Model Integrity (CMMI)
PDF
Automotive SPICE® 3.0 - What is new and what has changed?
PDF
ISO/IEc 15504/SPICE Status
PDF
Issues on Big Data & Cloud Computing
PDF
Tips and Pointers for Conducting Process Improvement Projects in HR
PDF
The current challenges and opportunities of big data and analytics in emergen...
PDF
10%2 D04%20 Art%20 Bp%20 Maturity%20 Model%20%2 D%20 Fisher%2 Epdf
PDF
ITIL and Service Management
PDF
Big Data: Issues and Challenges
PDF
The Five Levels of Requirements Management Maturity
PPT
Basic of Human Resource Management
PPTX
ITIL v3 Problem Management
Process Maturity Model by 3P Associates
Cmm
Measuring Process Maturity: The Business Process Maturity Model
Capability Maturity Model
Capability maturity model cmm lecture 8
Using Models for Incident, Change, Problem and Request Fulfillment Management
ITIL V3 and Service Operation - ITSM Academy Webinar
Capability Maturity Model Integrity (CMMI)
Automotive SPICE® 3.0 - What is new and what has changed?
ISO/IEc 15504/SPICE Status
Issues on Big Data & Cloud Computing
Tips and Pointers for Conducting Process Improvement Projects in HR
The current challenges and opportunities of big data and analytics in emergen...
10%2 D04%20 Art%20 Bp%20 Maturity%20 Model%20%2 D%20 Fisher%2 Epdf
ITIL and Service Management
Big Data: Issues and Challenges
The Five Levels of Requirements Management Maturity
Basic of Human Resource Management
ITIL v3 Problem Management
Ad

Similar to A process maturity model for requirements engineering (20)

PPT
Ch28
PPT
Process Improvement in Software Engineering SE25
PPT
Requirements Engineering: A Good Practice Guide
PPT
9.process improvement chapter 9
PPTX
РАМЕЛЛА БАСЕНКО «Огляд підходів та моделей покращення процесів Improvement ...
PPTX
How to take organizations to higher testing maturity suresh bose anagha mahaj...
PDF
Adopting the Right Software Test Maturity Assessment Model
PPT
Software process improvement.ppt
PPTX
РАМЕЛЛА БАСЕНКО «Поліпшення процесу тестування, як результат аудиту процесів ...
PPTX
Capability Maturity Model (CMM).pptx
PPTX
Maturity Model Presentation from Open Compliance Summit 2023
PPTX
Maturity Models - Open Compliance Summit 2023
PPT
A Simple Introduction To CMMI For Beginer
PPTX
IT 8076 Software Testing Unit1
PPTX
Capability Maturity Model Integration
PPT
Making Smart Choices: Strategies for CMMI Adoption
PPTX
Ch26 - software engineering 9
PPTX
Pharmaceutical Quality Management System
PPTX
CMM Software quality assurance .pptx
PPTX
Improve your test process, improve your life
Ch28
Process Improvement in Software Engineering SE25
Requirements Engineering: A Good Practice Guide
9.process improvement chapter 9
РАМЕЛЛА БАСЕНКО «Огляд підходів та моделей покращення процесів Improvement ...
How to take organizations to higher testing maturity suresh bose anagha mahaj...
Adopting the Right Software Test Maturity Assessment Model
Software process improvement.ppt
РАМЕЛЛА БАСЕНКО «Поліпшення процесу тестування, як результат аудиту процесів ...
Capability Maturity Model (CMM).pptx
Maturity Model Presentation from Open Compliance Summit 2023
Maturity Models - Open Compliance Summit 2023
A Simple Introduction To CMMI For Beginer
IT 8076 Software Testing Unit1
Capability Maturity Model Integration
Making Smart Choices: Strategies for CMMI Adoption
Ch26 - software engineering 9
Pharmaceutical Quality Management System
CMM Software quality assurance .pptx
Improve your test process, improve your life

More from Ian Sommerville (20)

PPTX
Ultra Large Scale Systems
PPTX
Resp modellingintro
PPTX
Resilience and recovery
PPTX
LSCITS-engineering
PPTX
Requirements reality
PPTX
Dependability requirements for LSCITS
PPTX
Conceptual systems design
PPTX
Requirements Engineering for LSCITS
PPTX
An introduction to LSCITS
PPTX
Internet worm-case-study
PPTX
Designing software for a million users
PPTX
Security case buffer overflow
PPTX
CS5032 Case study Ariane 5 launcher failure
PPTX
CS5032 Case study Kegworth air disaster
PPTX
CS5032 L19 cybersecurity 1
PPTX
CS5032 L20 cybersecurity 2
PPTX
L17 CS5032 critical infrastructure
PPTX
CS5032 Case study Maroochy water breach
PPTX
CS 5032 L18 Critical infrastructure 2: SCADA systems
PPTX
CS5032 L9 security engineering 1 2013
Ultra Large Scale Systems
Resp modellingintro
Resilience and recovery
LSCITS-engineering
Requirements reality
Dependability requirements for LSCITS
Conceptual systems design
Requirements Engineering for LSCITS
An introduction to LSCITS
Internet worm-case-study
Designing software for a million users
Security case buffer overflow
CS5032 Case study Ariane 5 launcher failure
CS5032 Case study Kegworth air disaster
CS5032 L19 cybersecurity 1
CS5032 L20 cybersecurity 2
L17 CS5032 critical infrastructure
CS5032 Case study Maroochy water breach
CS 5032 L18 Critical infrastructure 2: SCADA systems
CS5032 L9 security engineering 1 2013

Recently uploaded (20)

PDF
Empathic Computing: Creating Shared Understanding
PDF
Spectral efficient network and resource selection model in 5G networks
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
PDF
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PPTX
Digital-Transformation-Roadmap-for-Companies.pptx
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
NewMind AI Monthly Chronicles - July 2025
PPT
Teaching material agriculture food technology
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PPTX
A Presentation on Artificial Intelligence
PDF
NewMind AI Weekly Chronicles - August'25 Week I
PDF
Diabetes mellitus diagnosis method based random forest with bat algorithm
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PPTX
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
PDF
Encapsulation_ Review paper, used for researhc scholars
PDF
Electronic commerce courselecture one. Pdf
PPTX
Big Data Technologies - Introduction.pptx
PDF
Agricultural_Statistics_at_a_Glance_2022_0.pdf
Empathic Computing: Creating Shared Understanding
Spectral efficient network and resource selection model in 5G networks
“AI and Expert System Decision Support & Business Intelligence Systems”
Shreyas Phanse Resume: Experienced Backend Engineer | Java • Spring Boot • Ka...
The Rise and Fall of 3GPP – Time for a Sabbatical?
Digital-Transformation-Roadmap-for-Companies.pptx
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
NewMind AI Monthly Chronicles - July 2025
Teaching material agriculture food technology
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
A Presentation on Artificial Intelligence
NewMind AI Weekly Chronicles - August'25 Week I
Diabetes mellitus diagnosis method based random forest with bat algorithm
Mobile App Security Testing_ A Comprehensive Guide.pdf
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
Encapsulation_ Review paper, used for researhc scholars
Electronic commerce courselecture one. Pdf
Big Data Technologies - Introduction.pptx
Agricultural_Statistics_at_a_Glance_2022_0.pdf

A process maturity model for requirements engineering

  • 1. A Process Maturity Model for Requirements Engineering
  • 2. Process Maturity Models A process maturity model is a framework that organisations can use to assess their processes against ‘best practice’ in industry Processes are ranked on an ascending scale according to the practices used and the quality assurance procedures that are in place in the organisation Models serve as a basis for process improvement through moving from one level to another in the model The US DoD Software Capability Maturity Model is the best known maturity model but others (Bootstrap, Spice) have also been developed
  • 3. The CMM for Software Requirements management 4 managed 2 repeatable 3 defined 1 initial 5 optimising
  • 4. The CMM and Requirements Engineering The Capability Maturity Model has been designed for military system development where the requirements are the input to the software development process and are developed as part of the system procurement process It is NOT therefore concerned with requirements engineering processes except for requirements management - controlling changes to the requirements after they have been agreed The REAIMS project has identified a similar model for requirements engineering processes
  • 5. The REAIMS process maturity model 3 level model. No direct correspondence with CMM levels 4 and 5. 1 initial 2 repeatable 3 defined
  • 6. Principles of the REAIMS model There are known good practices in requirements engineering Use of these good practices lead to fewer RE process problems, better system requirements and therefore better software systems Because of the variability in RE processes, the model should not be prescriptive about the actual practices used in an organisation The model should provide a framework for process assessment and incremental RE process improvement through the introduction of these good practices
  • 7. Good RE practices Basic : Fundamental measures needed for a repeatable process Intermediate : Help make process more systematic, sometimes complex to implement Advanced : Require specialist expertise, support on-going improvement Not all practices are appropriate to all organisations Implementation of Intermediate and Advanced practices is only likely to be successful if there is a foundation of basic good practice in place
  • 8. The REAIMS process maturity model Level 1 - Initial level. Limited use of the best industrial practices. Most organisational RE processes operate at this level Typically: Ad hoc processes Costs are hard to estimate and control Unsupported by planning and review procedures or documentation standards Depend on “heroics”. Success depends on individuals rather than the organisation
  • 9. The REAIMS process maturity model Level 2 - Repeatable level. Extensive use of basic good practices and limited use of intermediate and advanced practices. Typically: Defined standards for documents Policies and procedures for requirements management Possible use of structured methods ISO 9000 certification if appropriate
  • 10. The REAIMS process maturity model Level 3 - Defined level Extensive use of basic and intermediate practices. Some use of appropriate advanced practices Few organisations appear to be operating at this level. However, it is probably only appropriate for developers of critical systems. Typically: Integrated requirements and systems engineering Active process improvement programme Able to accurately evaluate new practices
  • 11. Maturity levels & practice classifications No rigid correspondence between maturity level and practice classes It is not necessary to have implemented all 36 basic practices to be a repeatable process Similarly... No rigid correspondence between maturity level activities/products e.g.: requirements elicitation should be addressed to help achieve a repeatable process but not to the exclusion of other areas.
  • 12. Maturity assessment Goals of maturity assessment: Identify the approximate maturity level A management requirement. Identify particular areas of weakness Needed for effective targeting of resources We felt that the assessment process used in the CMM was too complex and expensive. Therefore, a requirement for the maturity assessment process was that it should be fairly easy to use We have developed a simple checklist-based assessment process based around good practice usage
  • 13. Maturity assessment Resolve areas of uncertainty Calculate maturity Score process against checklist Prune guideline checklist Select people to interview
  • 14. Prune guideline checklist We have developed a check-list with 36 basic good practices, 21 intermediate practices and 9 advanced practices Eliminate those practices that are obviously never used Some of the practices recommended are domain specific (e.g. are focussed on critical systems) Some practices are very advanced and only used in a small number of organisations (e.g. formal specification) Managers can very quickly identify practices that they are sure are never used in their organisation
  • 15. Select people to interview Need to identify key people to talk to Practitioners what happens on the ground, level of usage, practical difficulties, etc. Managers what is supposed to happen, level of organisational commitment, etc. Choose people from different projects/groups/departments Only a small number of organisations have actually standardised the techniques that they use Your goal is to discover the reality not what the situation is supposed to be
  • 16. Score practices against checklist Your goal is to discover whether or not good practices are used in the organisation Practices are roughly scored according to whether they are: Standardised - defined organisational standards have been agreed. In normal use - used by virtually all teams but often in different ways Used at peoples’ discretion - some teams have chosen to adopt particular practices Never used
  • 17. Resolve areas of uncertainty The previous assessment activity will usually reveal patchy use across (e.g.) projects Need to evaluate representative level of usage and their consequences for the organisation This is an opportunity to find out what you do well and what you could do better. You may be surprised at the skills in your organisation Typically, this is likely to be most time-consuming part of the assessment
  • 18. Calculate process maturity Score 3 for standardised practice, 2 for normal practice, 1 for occasional practice and 0 for unused practice Initial < 55 in basic practices. Repeatable >= 55 in basic practices and normally < 40 in others Defined > 85 in basic practices and >= 40 in others
  • 19. Interpreting the result As it is practically impossible to draw clear divisions between the levels, we believe that the assessment used is accurate enough as a basis for process improvement Other, more accurate but more costly assessment schemes could be devised. But (unlike the CMM) the classification is simply an internal guide and not used by external organisations Of course, the numeric result should be considered in the light of what is known about the domain and the organisation.
  • 20. Benefits of assessment Understanding what you actually do is an essential pre-requisite for improving your practice You may discover excellent practices and commonalities between projects and teams that were not previously apparent You expose engineers to new ideas and provide a basis for change It demonstrates an external and internal commitment to improving quality
  • 21. Summary A process maturity model is a framework for assessing your existing processes and putting in place a programme of process improvement The REAIMS requirements engineering maturity model has three levels based on the use of good RE practices Initial - limited use Intermediate - extensive use of basic good practice Advanced - use of advanced techniques A simple checklist-based process can be used to assess the maturity of an organisation’s RE processes