copyright 2005 northrop grumman corporation is cmmi high maturity worth the investment? southern...

21
Copyright 2005 Northrop Grumman Corporat Is CMMI High Maturity Worth the Investment? Southern California SPIN 2 February 2007 Rick Hefner, Ph.D. Director, Process Management Northrop Grumman Corporation

Post on 20-Dec-2015

217 views

Category:

Documents


0 download

TRANSCRIPT

Copyright 2005 Northrop Grumman Corporation

Is CMMI High Maturity Worth the Investment? Southern California SPIN2 February 2007

Rick Hefner, Ph.D.Director, Process ManagementNorthrop Grumman Corporation

Copyright 2005 Northrop Grumman Corporation 2

Background

Until recently, Level 3 was considered the industry standard

Now, several organizations have achieved high maturity and are touting its benefits

To others, high maturity (Levels 4 & 5) is perceived as expensive and of little benefit

Do high maturity processes cost more?

Is Level 4 and 5 worth the effort?

Copyright 2005 Northrop Grumman Corporation 3

Causal Analysis and ResolutionOrganizational Innovation and Deployment5 Optimizing

4 Quantitatively Managed

3 Defined

2 Managed

Quantitative Project ManagementOrganizational Process Performance

Requirements DevelopmentTechnical SolutionProduct IntegrationVerificationValidation Organizational Process FocusOrganizational Process DefinitionOrganizational Training Risk ManagementIntegrated Project Management (for IPPD*)Integrated Teaming*Integrated Supplier Management**Decision Analysis and ResolutionOrganizational Environment for Integration*

Requirements Management Project PlanningProject Monitoring and ControlSupplier Agreement Management Measurement and AnalysisProcess and Product Quality AssuranceConfiguration Management

1 Performed

Process AreasLevel

Work proactively managed, organizational standard processes

Improving, addressing common causes of variation

Quantitatively managed, eliminating special causes of variation

Work planned and tracked (reactively managed)

Work performed, but in an ad hoc fashion

CMMI Levels

Copyright 2005 Northrop Grumman Corporation 4

The Project Manager’s Dilemma at Level 3

I want to use the organization’s standard process, but…

… Does it’s performance and quality meet my customer’s expectations?

… If not, how should I tailor the process?

Copyright 2005 Northrop Grumman Corporation 5

CMMI Level 4

Organizational Process Performance Establishes a quantitative understanding of the performance of the

organization’s set of standard processes Provides process performance data, baselines, and models to quantitatively

manage the organization’s projects

Quantitative Project Management Quantitatively manage the project’s defined process to achieve the project’s

established quality and process-performance objectives.

project’s defined process

customer and project objectives

measurement repository

organizational standard process

organizational performance data

& models

tailoring

project performance

Copyright 2005 Northrop Grumman Corporation

Copyright 2005 Northrop Grumman Corporation 6

Exercise –What is Quantitative Management?

Suppose your project conducted several peer reviews of similar code, and analyzed the results Mean = 7.8 defects/KSLOC +3σ = 11.60 defects/KSLOC -3σ = 4.001 defects/KSLOC

What would you expect the next peer review to produce in terms of defects/ KSLOC?

What would you think if a review resulted in 10 defects/KSLOC?

3 defects/KSLOC?

How would this be useful to your project/ organization? Was the review effective? Was the process different? Is the product different?

Copyright 2005 Northrop Grumman Corporation 7

Exercise – What is Required for Quantitative Management?

What is needed to develop the statistical characterization of a process?

The process has to be stable (predictable) Process must be

consistently performed Complex processes may

need to be stratified (separated into simpler processes)

There has to be enough data points to statistically characterize the process Processes must occur

frequently within a similar context (project or organization)

Copyright 2005 Northrop Grumman Corporation 8

Typical Choices in Industry

Most customers care about: Delivered defects Cost and schedule

So organizations try to predict: Defects found throughout

the lifecycle Effectiveness of peer

reviews, testing Cost achieved/actual

(Cost Performance Index – CPI)

Schedule achieved/actual (Schedule Performance Index – SPI)

Defect Detection Profile

0.00

20.00

40.00

60.00

80.00

100.00

120.00

140.00

160.00

180.00

Req'mts Design Code Unit Test Integrate Sys Test Del 90 Days

Phase

Def

ects

/KS

LO

C

All Projects

New Process

Process performance• Process measures (e.g., effectiveness, efficiency, speed)• Product measures (e.g., quality, defect density).

Copyright 2005 Northrop Grumman Corporation 9

What Can a Level 4 Project/Organization Do?

Determine whether processes are behaving consistently or have stable trends (i.e., are predictable)

Identify processes where the performance is within natural bounds that are consistent across process implementation teams

Establish criteria for identifying whether a process or process element should be statistically managed, and determine pertinent measures and analytic techniques to be used in such management

Identify processes that show unusual (e.g., sporadic or unpredictable) behavior

Identify any aspects of the processes that can be improved in the organization's set of standard processes

Identify the implementation of a process which performs best

Copyright 2005 Northrop Grumman Corporation 10

What Drives the Effectiveness of Level 4?

project’s defined process

customer and project objectives

measurement repository

organizational standard process

organizational performance data

& models

tailoring

project performance

• Comparable projects?• Enough measures to

stratify/analyze the data?

• Enough data points?• How insightful/useful are

the baselines and models?

• How detailed are the standard processes?

• What tailoring is allowed?

• Stable processes?• Clean data?

• Does the organization’s process fit the objectives?

• How much tailoring?• Does the project follow

its process?

Copyright 2005 Northrop Grumman Corporation 11

Level 5

Level 3

What Does Level 5 Add to the Organization?

Organizational Process Focus

Goals are qualitative (e.g., get better)

The effects of the improvements are not estimated or measured

Organizational Innovation & Deployment

Goals are quantitative (e.g., reduce variation by X%, reduce mean by Y%)

Incremental improvements – eliminate special causes of variation

Innovative improvements - cause a major shift in process capability

Potential improvements are analyzed to estimate costs and impacts (benefits)

Improvements are piloted to ensure success

Improvements are measured in terms of variation and mean

Copyright 2005 Northrop Grumman Corporation 12

Peer Reviews – Improving the Process

Reduce the variation Train people on the process Create procedures/checklists Strengthen process audits

Increase the effectiveness (increase the mean) Train people Create checklists Reduce waste and re-work Replicate best practices from

other projects

Copyright 2005 Northrop Grumman Corporation 13

What Does Level 5 Add to the Project?

Causal Analysis & Resolution Identify and analyze causes of defects and other problems Take specific actions to remove the causes

The project can then take actions to prevent the occurrence of those types of defects and problems in the future

Many projects implement Causal Analysis & Resolution at Level 4 Identify and eliminate special cause variations to stabilize the

process

Copyright 2005 Northrop Grumman Corporation 14

How Does Level 4 & 5 Benefit the Customer?

Organizational process performance

More accurate estimates

Quantitative project management

Problem behaviors are recognized faster, enabling quicker resolution

Organizational innovation and deployment

The project benefits from improvements found and proven on other projects

Causal analysis The project fixes the source

of defects to prevent future defects

Level 5 reduces costs and improves quality (so we implement it on Level 5 reduces costs and improves quality (so we implement it on allall projects)projects)

Level 5 reduces costs and improves quality (so we implement it on Level 5 reduces costs and improves quality (so we implement it on allall projects)projects)

Reference: How Does High Maturity Benefit the Customer?, R. Hefner, Systems & Software Technology Conference, 2005

Copyright 2005 Northrop Grumman Corporation 15

Two Complementary Approaches to Process Improvement

Data-Driven (e.g., Lean Six Sigma)

Clarify what your customer wants (Voice of Customer) Critical to Quality (CTQs)

Determine what your processes can do (Voice of Process) Statistical Process Control

Identify and prioritize improvement opportunities Causal analysis of data

Determine where your customers/competitors are going (Voice of Business) Design for Six Sigma

Model-Driven (e.g., CMM, CMMI)

Determine the industry best practice Benchmarking, models

Compare your current practices to the model Appraisal, education

Identify and prioritize improvement opportunities Implementation Institutionalization

Look for ways to optimize the processes

Copyright 2005 Northrop Grumman Corporation 16

Side effects ofregister usage

Can’t keep track

Poordocumentation

Registerallocation

defect

Incorrect processorregister usage

Lack ofprocessorknowledge

Can’t isolate

Pass 1architecture

Process knowledge

UCL 1

LCL 1

UCL 2

LCL 21 2 3 4 5 6 7 7C 8B 8B 8C 8D 8F 20 21 22 23

0

2

4

6

8

10

12

14

16Actual

Expected

95% limits

UCL

_X

Process variation Process performance

0

2

4

6

8

10

12

Projects Audited in First Quarter

Nu

mb

er o

f N

on

com

pli

ance

s

Improve & ControlStabilize Predict

Lean Six Sigma Provides the Needed Tools to Implement CMMI High Maturity

Level 4 Understand project’s process capabilities

based on process performance baselines Control process variation

(remove “assignable causes”) Predict results using process performance

models Manage to achieve goals

Level 5 Base improvement goals on

future business needs Eliminate problem and defect

causes (“common causes”) Select, predict, and measure

improvements to change the process performance baselines - shift the mean; tighten the variance

Manage change

Copyright 2005 Northrop Grumman Corporation 17

Barriers and Challenges

Engineering process measurements are often difficult to analyze Inherent process variations when human creativity is involved Dirty (or no) data Vague measurement definitions, human recording errors Infrequent measurements Non-normal data Need for stratification/aggregation

Must demonstrate the value of quantitative data to managers Management style - reactive vs. proactive vs. quantitative Less value in a chaotic environment Must involve customers

Copyright 2005 Northrop Grumman Corporation 18

Launch 1 Intro to

Quantitative Management

Launch 2Statistical

ProcessControl

Launch 4CMMI Level 5(OID &CAR)

• Collect relevant project historical data, review it and perform initial “clean up”

• Collect data from project subprocesses and put on SPC charts

• Complete project profile

• Review business issues for clarity

• Identify Quantitative Measurement Plan data

• Measure progress against the Level 4/5 plan tasks

• Finish building models

• Begin tracking to models

• Draft Quantitative Measurement Plan

• Draft QPM evidence

• Measure progress against the Level 4/5 plan tasks

• Develop project CAR plan

• Start project CAR activities

• Submit improvements to support OID (when applicable)

• Measure progress against the Level 4/5 plan tasks

Launch 3QuantitativeMonitoring &Management

• Finalize project goals

• Obtain measurement data for the subprocesses the project will put under SPC analysis

• Become familiar with Northrop Grumman Mission Systems QPM process

• Definition of related six sigma project(s)

• Incorporate and measure progress against the Level 4/5 plan tasks

Northrop Grumman Launch Workshop Strategy

STM 925.1-Exec, Rev 01, 05-05-04

Launch 0 Executive Overview

Prerequisite2 week Six

Sigma Green Belt training

Copyright 2005 Northrop Grumman Corporation 19

Lessons Learned (1 of 2)

Based on over 35 Northrop Grumman CMMI Level 5 organizations

1) Level 3 metrics, measurement processes, and goal setting are generally inadequate for Levels 4 and 5 Better definitions of the measures Lower level metrics of lower level subprocesses Stratifying the data properly

2) When operating at Level 3, it is difficult to predict the measurement improvements needed Trying to understand and stabilize the key subprocesses will

naturally drive you to the right metrics

3) CMMI and Six Sigma compliment each other CMMI can yield behaviors without benefit Six Sigma improvements based solely on data may miss

innovative improvements (assumes a local optimum)

4) Six Sigma is an enabler for higher maturity Focus on data, measurement systems, process improvement Tying improvements to business goals Tools and methods support the Level 4/5 analysis tasks

Copyright 2005 Northrop Grumman Corporation 20

Lessons Learned (2 of 2)

5) Projects have different quality and process performance needs, and should select different subprocesses to quantitatively manage This will also slow adoption, and complicate the organizational

baselines and models

6) Training the staff as Six Sigma Green Belts has resulted in a change of language and culture Voice of Customer, data-driven decisions, causal analysis, etc. Better to use the tools in everyday work than to adopt the

“religion”

7) The real ROI comes in institutionalizing local improvements across the wider organization CMMI establishes the needed mechanisms

Having all the tools at Level 5 gives you the insight to manage Having all the tools at Level 5 gives you the insight to manage each project the way the customer needs it to be managedeach project the way the customer needs it to be managed

Having all the tools at Level 5 gives you the insight to manage Having all the tools at Level 5 gives you the insight to manage each project the way the customer needs it to be managedeach project the way the customer needs it to be managed

Copyright 2005 Northrop Grumman Corporation 21

References

2006 CMMI Conference “Using ‘Voice of Customer’ Tools to Advance

Organizational Innovation and Deployment”, Don Corpron

“Making OID Effective,” Diane Mizukami

“Statistical Control of System and Software Design Activities, “ Dr. Richard Welch and Ms. April King

“Business Value of CMMI Level 5,” Gene Miluk, Lynn Penn, Rick Hefner and Rushby Craig

Other Sources “Squeezing Variation for Profit”, Don Corpron, CMMI

Technology Conference and User Group, 2005 “How Does High Maturity Benefit the Customer?,”

Rick Hefner, Systems & Software Technology Conference, 2005

“Using a Process Database to Facilitate Transition to Level 4”, Rick Hefner, International Conference on Applications of Software Measurement, 2002

“Business Value and Customer Benefits Derived from High Maturity”, Alan Pflugrad, CMMI Technology Conference and User Group, 2002

http://www.isixsigma.com High Maturity with Statistics, SEI course

CMMI Implementation: Embarking on High Maturity Practices, Shivraj Kanungo, Asha Goyal

Measuring the Software Process, William A. Florac, Anita D. Carleton

Metrics and Models in Software Quality Engineering, Stephen H. Kan

Understanding Variation: The Key to Managing Chaos, Donald J. Wheeler