Which of the following is not a defined maturity level within the Software Capability Maturity Model?

A.
Repeatable

B.
Defined

C.
Managed

D.
Oriented

Explanation:
The Software Capability Maturity Model (CMM) is based on the premise that the quality of a software product is
a direct function of the quality of its associated software development and maintenance processes. It introduces
five maturity levels that serve as a foundation for conducting continuous process improvement and as an
ordinal scale for measuring the maturity of the organization involved in the software processes.
CMM has Five Maturity Levels of Software Processes:
The initial level: processes are disorganized, even chaotic. Success is likely to depend on individual efforts,
and is not considered to be repeatable as processes would not be sufficiently defined and documented to
allow them to be replicated.
The repeatable or managed level: basic project management techniques are established, and successes
could be repeated as the requisite processes would have been made established, defined, and
documented.
The defined level: an organization has developed its own standard software process through greater
attention to documentation, standardization, and integration.
The quantatively managed level: an organization monitors and controls its own processes through data
collection and analysis.
The optimized level: processes are constantly being improved through monitoring feedback from current
processes and introducing innovative processes to better serve the organization’s particular needs.
There is thus no Oriented level.
Incorrect Answers:
A: The repeatable level is the second maturity level. At this level basic project management techniques are
established, and successes could be repeated as the requisite processes would have been made established,
defined, and documented.
B: The defined level is the third maturity level. At this level an organization has developed its own standard
software process through greater attention to documentation, standardization, and integration.
C: The (quantatively) managed level is the fourth maturity level. At this level an organization monitors and
controls its own processes through data collection and analysis.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 62, 1120-1122
http://en.wikipedia.org/wiki/Capability_Maturity_Model