Which model, based on the premise that the quality of a software product is a direct function of the quality of its
associated software development and maintenance processes, introduced five levels with which the maturity of
an organization involved in the software process is evaluated?

A.
The Total Quality Model (TQM)

B.
The IDEAL Model

C.
The Software Capability Maturity Model

D.
The Spiral Model

Explanation:
The Software Capability Maturity Model (CMM) is based on the premise that the quality of a software product is
a direct function of the quality of its associated software development and maintenance processes. It introduces
five maturity levels that serve as a foundation for conducting continuous process improvement and as an
ordinal scale for measuring the maturity of the organization involved in the software processes.
CMM has Five Maturity Levels of Software Processes:
The initial level: processes are disorganized, even chaotic. Success is likely to depend on individual efforts,
and is not considered to be repeatable as processes would not be sufficiently defined and documented to
allow them to be replicated.
The repeatable or managed level: basic project management techniques are established, and successes
could be repeated as the requisite processes would have been made established, defined, and
documented.
The defined level: an organization has developed its own standard software process through greater
attention to documentation, standardization, and integration.
The quantatively managed level: an organization monitors and controls its own processes through data
collection and analysis.
The optimized level: processes are constantly being improved through monitoring feedback from current
processes and introducing innovative processes to better serve the organization’s particular needs.
Incorrect Answers:
A: Total Quality Management (TQM) is a management approach of an organization centered on quality, based
on the participation of all its members and aiming at long term success through customer satisfaction.
B: The Integrated Design, Evaluation, and Assessment of Loadings (IDEAL) model is a post-construction water
quality model for designing storm water best management practices. It is not a software development model.
D: The Spiral model uses an iterative approach to software development with an emphasis on risk analysis.
The iterative approach allows new requirements to be addressed as they are uncovered. It is a good model for
complex projects that have fluid requirements.
The spiral model has four main phases:
Planning
Risk analysis: ensures that all issues are actively reviewed and analyzed.
Development and testing: prototype testing takes place early in the development project, and feedback
based upon these tests is integrated into the following iteration of steps.
Evaluation: the customer evaluates the product in its current state and provides feedback, which is an input
value for the following iteration of steps.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 62, 1115-1116,
1120-1122
http://en.wikipedia.org/wiki/Capability_Maturity_Model
https://en.wikipedia.org/wiki/Total_quality_management
https://en.wikipedia.org/wiki/IDEAL_model