Download (Member Only, 556K)
Purchase the Book
Provide feedback on this document
Visit the COBIT - Implementation Knowledge Center community
Visit the COBIT - Use it Effectively Knowledge Center community
This document contains a detailed mapping of CMMI® for Development V1.2 with COBIT 4.0 and also contains the classification of the standards discussed in this paper as presented in the overview document COBIT® Mapping: Overview of International IT Guidance, 2nd Edition.
A brief overview of the standards mapped against each other in this document follows:
- COBIT—COBIT was originally released as an IT process and control framework linking IT to business requirements. It was initially used mainly by the assurance community in conjunction with business and IT process owners. With the addition of management guidelines in 1998, COBIT was used increasingly as a management framework, providing management tools such as metrics and maturity models to complement the control framework. With the release of COBIT® 4.0 in 2005, it became a more complete IT governance framework.
- Capability Maturity Model® Integration (CMMI) for Development—CMMI is a process improvement capability maturity model for the processes controlling development, implementation, acquisition and maintenance of systems and software products and services. It consists of best practices that address development and maintenance activities that cover the product life cycle from conception through delivery and maintenance. This latest iteration of the model represents an integration of bodies of knowledge that address software engineering, systems engineering, hardware and design engineering, and acquisition. The model is used mainly by organisations engaged in relatively large and complex software and systems engineering projects to develop and maintain products and services. CMMI-assessed capabilities meet supplier qualifications for US government contracts. In 2006, the SEI published CMMI for Development V1.2.
The mapping is performed in two layers:
- High-level mapping of CMMI process area goals and practices to the high-level framework and control objectives/processes of COBIT
- Capability maturity level mapping
The CMMI generic practice requirements for institutionalising process capability were mapped to COBIT detailed control objectives and maturity level maturity attribute descriptions.