問38
頻出度★★★
システム開発組織におけるプロセスの成熟度を5段階のレベルで定義したモデルはどれか。
平成24年度 春期 ITパスポート試験 問38
マネジメント系ソフトウェア開発管理技術 › 開発プロセス・手法
This question's explanation and your answers so far.
解説
問 38
- ア
正解 The correct answer is ア “CMMI”. CMMI (Capability Maturity Model Integration) is a model used to assess how systematically an organization that develops systems has established and managed its processes — that is, its maturity — and to show a step-by-step path for improvement. The assessment is defined by the following five levels. Level 1 “Initial” is a state where work is done ad hoc and results depend on the ability of the individual in charge. Level 2 “Managed” is a state where planning, progress, changes and so on are managed on a per-project basis. Level 3 “Defined” is a state where organization-wide standard processes have been established and each project applies them. Level 4 “Quantitatively Managed” is a state where actual data such as work hours and defect density are measured quantitatively to control the processes. Level 5 “Optimizing” is a state where the processes themselves are continuously improved based on the measurement results. An organization can grasp its own level objectively and learn what it must put in place to move up to the next level. CMMI is the only option that satisfies all three conditions in the question — “system development organization”, “maturity of processes”, and “five levels” — so the answer is ア.
Incorrectイ
ISMS (Information Security Management System) is an organizational framework for maintaining the confidentiality, integrity and availability of information assets: risk assessment is carried out, policies, structures and controls are set, and they are operated and improved continuously through the PDCA cycle. Its standard is JIS Q 27001 (ISO/IEC 27001), and certification is judged simply by whether the organization conforms or not; it does not grade the maturity of development processes on five levels. Its subject is information security management, not the capability assessment of system development processes.
Incorrectウ
ISO 14001 is the international standard for an environmental management system (EMS). It specifies a framework in which an organization sets an environmental policy, establishes environmental objectives such as energy saving, waste reduction and chemical substance management, and continuously reduces its environmental impact through PDCA. The area it covers is environmental protection, a different field from system development, and it does not have a structure that defines maturity on five levels.
Incorrectエ
JIS Q 15001 is the Japanese Industrial Standard for a personal information protection management system (PMS), and it is used as the certification criterion for the Privacy Mark (P Mark) scheme. It lays down rules for acquiring, using, providing, storing and disposing of personal information, how to respond to the rights of the individuals concerned, and the internal structure, training and audits, requiring that personal information be handled properly on an ongoing basis. Its purpose is the protection of personal information; it is not a model that defines maturity levels of development processes.
ここがポイント
- The five maturity levels of CMMI — Level 1 Initial, Level 2 Managed, Level 3 Defined, Level 4 Quantitatively Managed, Level 5 Optimizing. It is a model that assesses an organization's system development process capability objectively and gives guidance for step-by-step process improvement.
- Tell these abbreviations apart by what they manage — CMMI covers the maturity of development processes, ISMS (JIS Q 27001) covers information security, ISO 14001 covers the environment, and JIS Q 15001 (P Mark) covers personal information protection. Remember that only CMMI has the feature of “assessing on five levels”, and you can answer with confidence.