StandardCMII 100D
StandardCMII 100D
Notice This standard was developed by a group of configuration management (CM) subject matter experts who are also certified CMII professionals (CMIIPs). CMII Group A This revision (rev D) serves to align its format and content with CMII-105C CMII Standard for Product CM and CMII-200C CMII Standard for Business Process Certification This standard is copyrighted by the CMII Research Institute which is the research and development arm of the Institute of Configuration Management (ICM). This 23-page standard may be downloaded at no cost from www.icmhq.com. Although this standard and the CMII training materials are copyrighted, organizations that implement this standard may reuse any portion of this standard, as well as any portion of the CMII training materials, provided the sources of those uses are referenced.
CMII-100D Page 2 of 23
About this Standard This standard defines the requirements for applying configuration management to the business enterprise and its core business processes in the same manner that CMII-105 defines the requirements for applying configuration management to products. An enterprise baseline is the cornerstone to this standard as product baselines are the cornerstone to the CMII-105 standard. The hierarchy of administrative requirements provides the framework for an enterprise baseline while physical item hierarchies provide the framework for product baselines. Both standards utilize the same configuration management process which is enabled by the same business process infrastructure. This is not an ANSI-sanctioned consensus standard, but its contributors include the most highly recognized experts in the field. They are the CMII instructors who train the subject-matter experts from businesses and government agencies world-wide in how to build and utilize a CM-based business process infrastructure. The CM process requirements defined herein are at a high level, yet sufficiently detailed such that those who implement and conform to this standard should achieve similar results. Existing CM processes may also be assessed against this standard to identify their strengths and weaknesses. Please send any questions to [email protected] and use the form on the last page to request changes.
CMII-100D Page 3 of 23
Definitions
Administrative Hierarchy - A hierarchy of administrative requirements and procedures used to run the business and which provide the framework for the enterprise baseline. Administrative Procedure - Instructions for how to achieve an operating standard. As-Planned/As-Released Baseline - A structured set of information that fully defines the current configuration and also provides visibility of planned changes. Business Process Infrastructure - A set of processes designed to accommodate change, keep requirements clear, concise and valid and maintain records of work accomplished. Change Review Board - A management team that makes business decisions. CMII Model - A model for an enterprise and its business process infrastructure. Core Business Process - A specific discipline for performing certain type of work. Corrective Action - The extra effort, or intervention resources, required to compensate for something that should not be necessary. Creator - A person who is the assigned author and co-owner of a specific document. Design Basis - A high-level definition of the configuration is and how it does what it does. Designated User - A person who is a user and a co-owner of a specific document. Fast-Track Changes - Changes that may be approved and implemented by an individual. Indenture Levels - The parent-to-child relationships between items or documents. Intervention Resources - See corrective action. Operating Standard - A requirement to be achieved by a core business process. Physical Item Hierarchy - A set of indentured bills of material used to define products. Release - The formal act of releasing and making something available for use. Strategic Business Plan - Provides the design basis for the enterprise. Traceability - Knowing, through records, where something came from and/or where it is. Validation - The process of ensuring that a requirement is clear, concise and valid. Verification - The process of ensuring that something conforms to its requirements. Waiver (or Deviation) - Provides authorization to accept a nonconforming product.
CMII 100D Page 4 of 23
Table of Contents
Notice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . About this Standard. . . . . . . . . . . . . . . . . . . . . . . . . Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . Figures and Tables . . . . . . . . . . . . . . . . . . . . . . . . 1. Enterprise Baseline and its Importance . . . . . . . . . . . . . . . 2. Effectiveness of Existing CM Processes . . . . . . . . . . . . . .
Page
2 3 4 6 8 9
INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . 7
3. Five Levels of Process Evolution . . . . . . . . . . . . . . . . . 10 4. Core Business Processes and Process Infrastructure . . . . . . . . . 11 5. Enterprise Baseline Content and Format . . . . . . . . . . . . . . . 12 5.1 Business Regulations and Standards . . . . . . . . . . . . . 13 5.2 Strategic Business Plan . . . . . . . . . . . . . . . . . 14 5.3 Strategic Business Plan Parts . . . . . . . . . . . . . . . 14 5.4 Core Business Processes and Linkages . . . . . . . . . . . 15 5.5 Operating Standards and Procedures . . . . . . . . . . . . 16 5.6 Baseline Automation . . . . . . . . . . . . . . . . . . 17 5.6.1 Access to Enterprise Baseline Content . . . . . . . 17 5.6.2 Changes and Baseline Updates . . . . . . . . . . . 17 6. Enterprise Process Improvement Plan . . . . . . . . . . . . . . 18 6.1 Enterprise Process Improvement Team . . . . . . . . . . . 18 6.2 Business Process Infrastructure Sub-Team . . . . . . . . . 18 6.3 Enterprise Configuration Management Plan . . . . . . . . . 18 6.3.1 Establish the Enterprise Baseline . . . . . . . . . . 18 6.3.2 Numbering Convention for Administrative Documents . . 18 6.3.3 Document Changes and Revision Levels . . . . . . . 19 6.3.4 Effective Dates for Each Version of Each Document . . 19 6.3.5 Establish Ownership of Each Document . . . . . . . 19
CMII 100D Page 5 of 23
6.3.6 Define the Enterprise Operating Standards . . . . . . 19 6.3.7 Consolidate and Validate the Operating Standards . . . 19 6.3.8 Administrative Procedures . . . . . . . . . . . . . 19 6.3.9 One Common Closed-Loop Change Process . . . . . 19 6.3.9.1 Change Review Board and Fast-Track Changes . 19 6.3.9.2 Change Specialist Functions I, II and III . . . . 20 6.3.9.3 Reporting Relationships . . . . . . . . . . 20 6.3.10 Document Release and Validation Records . . . . . 20 6.3.11 Change and Revision Records . . . . . . . . . . 20 6.3.12 Traceability via Retained Records . . . . . . . . . 20 7. Measurements of Process Effectiveness . . . . . . . . . . . . . . . 20 Annex A Annex B Enterprise Baseline Example . . . . . . . . . . . . . . 21 Related Standards, White Papers and Courses . . . . . . 22
8. Form for Requesting Changes . . . . . . . . . . . . . . . . . . . 23 Figures and Tables Figure 1 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Table 1 Table 2 Figure 7 Figure 8 Figure 9 Enterprise CM Relative to Product CM . . . . . . . . . . . . . . 07 Enterprise Baseline and Work Flows . . . . . . . . . . . . . . 08 Measure of CM Process Effectiveness . . . . . . . . . . . . . 09 Five Levels of Process Evolution . . . . . . . . . . . . . . . . 10 Core Business Processes and Infrastructure . . . . . . . . . . 11 Enterprise Baseline Content and Format . . . . . . . . . . . . 12 Regulations/Standards by Core Business Process . . . . . . . 13 Strategic Business Plan Parts . . . . . . . . . . . . . . . . . 14 Core Business Processes and Linkages . . . . . . . . . . . . 15 Operating Standards and Procedures . . . . . . . . . . . . 16 Enterprise Baseline Example . . . . . . . . . . . . . . . . 21
CMII 100D Page 6 of 23
INTRODUCTION Figure 1 provides insight to the CMII model and how the same CM process can be applied to products and the business enterprise. For products, the design basis requirements flow-down through the physical item hierarchy and into detailed designs and processes. Flow-down is an iterative process and changes are continuous. Ability to accommodate change and keep requirements clear, concise and valid is essential. For a business enterprise, the high-level requirements of the strategic business plan flow-down through the administrative hierarchy and into detailed operating standards and procedures. There too, flow-down is an iterative process and changes are continuous. There too, the ability to accommodate change and keep requirements clear, concise and valid is essential. The CM process, itself, is the same.
ENTERPRISE CM per CMII-100 Strategic Business Plan and Administrative Hierarchy Operating Standards and Procedures Conformance Records
PRODUCT CM per CMII-105 Design Basis and Physical Item Hierarchy Detail Designs, Process Plans and Work Instructions Conformance Records
CMII
CMII
CMII
CMII
1. Enterprise Baseline and Its Importance Activities in a business enterprise can be segregated into three tiers as shown below. A nonconforming situation in tier 3 is a symptom of a problem in tier 2 which, in turn, is a symptom of a problem in tier 1. The root causes for most problems in all three tiers can be traced back to the operating standards and procedures in tier 1. The operating standards and procedures in tier 1 deserve top priority. High quality standards and procedures yield high quality designs and processes which, in turn, yield high quality products. Enterprise Baseline with an Administrative Hierarchy (HOW WE DO)
Business Regulations
(WHAT WE DO)
Application Requirements
Start
Business Enterprise
Develop/ Produce
Operate/ Maintain
Enterprise Baseline
CORE BUSINESS PROCESSES As-Built Products/Records Product Baselines Operating Standards Administrative Procedures Enabling Tools Detailed Designs Process Plans Work Instructions Equipment Facility Baseline & Tools
As-B'lt Records
Product A
2
Info. Sys. Baseline
As-B'lt Records
Product B
As-B'lt Records
Product C
As-B'lt Records
Product D
2. Effectiveness of Existing CM Processes Figure 3 illustrates what it means to operate in the continuous improvement mode versus the corrective action mode. The outer-loop represents the continuous improvement mode. The inner-loop represents the corrective action mode. Those operating in the inner loop process a large number of changes to correct errors plus a large number of deviations/ waivers to accept nonconforming products. The root causes for corrective action, deviations and waivers reside in operating standards and procedures that are in the domain of CM. The proven solution is a business process infrastructure that can accommodate change and keep requirements clear, concise and valid. The building blocks required to achieve the desired business process infrastructure also reside in the domain of CM.
Documents
CMII Baselines
Records
INFORMATION REPOSITORY
Data
Forms
Intermittent Failures
Application
Results
Consistent Conformance
3. Five Levels of Process Evolution To achieve a business process infrastructure that can accommodate change and keep requirements clear, concise and valid represents five levels of process evolution. Organizations operating in the corrective action mode with no plan to escape are at level 1. Organizations that achieve level 5 are truly lean and agile. The transition from level 1 to level 5 is achievable in 8 steps as shown below. The first two steps required to transition from level 1 to level 2 are most important. To start with a good plan is essential. This standard defines the requirements to be included in that plan. The ultimate goal is integrated process excellence. The appropriate business process infrastructure is a prerequisite and is built in steps 1 and 2.
2 steps
gh
Improvements Excellence are robust Implemented in all segments Level 4 CMII is reliable, Engaged fast & efficient Implemented in 1st segment Level 3 Plan is Committed validated 2 steps Level 2
Level 5
oP tS tep st Ei
2 steps
ro c
2 steps
ess
Ex
cel
len
In corrective action mode No plan to escape
ce
Enlightened
Unaware
Level 1
4. Core Business Processes and Process Infrastructure The CMII model for a business enterprise includes a strategic business plan and nineteen core business processes as shown below. The core business processes and their owners are identified in the strategic business plan. The process owners represent the ideal cross-functional team to be responsible for achieving the requirements of this standard. The business process infrastructure is comprised of the strategic business plan and core process categories 1.0 through 8.0. Core process categories 1.0 through 7.0 reside in the domain of CM. 19.0
Business Process Infrastructure (SBP + 1.0-8.0)
18.0
gm
&A ss e
8.0
In
ma t i on S for ys
As-Planned/ As-Released Baselines
1.0
te
10
m
.0
11.0
S
ec
F ac i l i t i es
17.0
7.0
6.0
9.0
2.0
ur
3.0
12.0
f e t y & E nv , Sa i ro ity nm
15.0
14.0
16.0
5.0
4.0
13.0
en
ta
5.1 Business Regulations and Standards The enterprise baseline is the proper place to compile a list of all business regulations and standards to which the enterprise has chosen to comply. Each core business process owner is likely to have their own set and they may be segregated into like-groups accordingly. 1.0 As-Planned/As-Released Baselines 3.0 Naming and Numbering
List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards List of applicable regulations and/or standards
2.0 4-Tier, 9-Step Development Process 4.0 Data and Record Integrity
5.0 Validation and Release Records 6.0 Changes and Revision Records 8.0 Information Systems
9.0 Facilities and Asset Management 11.0 Business Program Management 13.0 Marketing, Sales and Contracts 14.0 Supply Chain Management
15.0 Order Fulfillment and As-Built Records 16.0 Support, Operation and Maintenance 17.0 Human Resources and Training 19.0 Oversight and Internal Audit 18.0 Financial Accounting and Reporting
5.2 Strategic Business Plan A strategic business plan is the proper place to establish how the organization conducts business. Changes in personnel and/or assignments should have minimal impact on overall process effectiveness. 5.3 Strategic Business Plan Parts Part 5, per the CMII model, is where the core business processes and their owners are identified. Part 5 serves to link the strategic plan to the detailed operating standards and procedures (as shown on page 15). Part 1 Mission (or vision) statement High-level statement of the business objectives Part 2 Relationships to other divisions/sites/partners Interdependencies, if not autonomous Part 3 Organizational alignment and policies Organizational hierarchy and business rules Part 4 Products, services and customers How perceived in marketplace and market share Part 5 Core business processes and operating standards How day-to-day operations are conducted Part 6 Financial accounting and reporting Past, present and future projections Part 7 Human resource development and training Education, training and career development Part 8 Compensation, stock options and bonus plans Salaries, performance reviews, contractor rates, etc. Part 9 Internal and external audits Performance measurements (macro and micro) Part 10 Product, process and administrative improvements Planned improvements; results of prior initiatives Part 11 Stockholder expectations and community spirit Expected growth in value and contributions
5.4 Core Business Processes and Linkages The goal is to establish a reliable and efficient process that can provide consistent results impervious to changes in personnel and organizational alignments. A parallel goal is to maintain agility. It should be possible to accommodate change without compromising reliability or efficiency. The linkages shown below represent the flow-down of higher-level requirements to the supporting details. The processes are refined until repeatable results are being achieved. The processes are also revised and realigned as needed to support changing business conditions. Proper linkages make it easier to accommodate change and retain control. The core business process owners are responsible for creating and maintaining the operating standards and administrative procedures.
Level 2
Strategic Business Plan Parts
SBP Part Part Owner
Part 5
Lev. 3.x
Operating Standards for Core Process 1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8
The baseline contains the document ID information, but not their content.
Part 1 Part 2 Part 3 Part 4 Part 5 Part 6 Part 7 Part 8 Part 9 Part 10 Part 11
_____ _____ _____ _____ _____ _____ _____ _____ _____ _____ _____
Lev. 4
Procedure for 1.0 1.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8
_____ _____ _____ _____ _____ _____ _____ _____ _____ _____ _____
In CMII terms, each requirement to be achieved by a core business process is called an operating standard. An operating standard is a statement of the requirement and is limited to one, two or three sentences. An administrative procedure describes how to achieve an operating standard per the examples below. For example, the requirements to be achieved by the 19 core business processes within the CMII model represent about 250 operating standards. The requirements in core business process categories 1.0 through 8.0, represent about half of the total. All operating standards are integrated into one consolidated set and the entire set is validated by each of the core business process owners.
Enterprise Operating Standards Requirement for Item ID Numbers Procedure for Item ID Numbers Requirement for Item Re-identification Procedure for Item Re-identification Requirement for Validating Documents Procedure for Validating Documents Requirement for Releasing Documents Procedure for Releasing Documents Administrative Procedures
5.6 Baseline Automation CM process automation revolves around baselines and their input and output work flows. The inputs are provided by the change process. Outputs are the requirements that are referenced in work authorizations. Baselines and their inputs and outputs can be fully automated. 5.6.1 Access to Enterprise Baseline Content A baseline provides direct access to the repositories of information about the enterprise configuration. All important information about the enterprise is entered into the baseline. Each important element has its own set of metadata. The required content of an enterprise baseline is defined in Part 5. See Figure 9 on page 21 for a detailed example. Functionality of the enterprise baseline includes the ability to enter at any point and navigate up or down through the administrative hierarchy. It includes the ability to navigate side-ways from documents to their authorizing ECNs, release dates and effective dates. It also includes the ability to access any document, ECN or other key element directly from the baseline. 5.6.2 Changes and Baseline Updates Each baseline is closely coupled with a common closed-loop change process. A change impact matrix is used to identify all baselined elements impacted by each change. The baseline includes visibility of planned changes and planned release dates for new and revised documents. The implementation plan for each change is used to update the baseline and display the planned change. The baseline is further updated as planned documents are released. Change forms are used as templates to guide each change through each phase of the process. An analysis phase is separate from the implementation phase. Completed forms are retained as records of work accomplished.
CMII 100D Page 17 of 23
6.3.3 Document Changes and Revision Levels Conventions for identifying and advancing the revision level of each administrative document at each indenture level are established. 6.3.4 Effective Dates for Each Version of Each Document Methods for determining when a newly released document, or a superseding document, shall be authorized for use are established. 6.3.5 Establish Ownership of Each Document A creator and one or more designated users are identified for each document who shall be jointly responsible for its integrity. 6.3.6 Define the Enterprise Operating Standards Each core business process owner shall define the requirements, or operating standards, that their process is to achieve on an ongoing basis. 6.3.7 Consolidate and Validate the Operating Standards The core business process owner that has the most operating standards is responsible for consolidating and maintaining the entire set. The other core business process owners validate the entire set for completeness and individual integrity. 6.3.8 Administrative Procedures Each core business process owner is responsible for developing administrative procedures as needed to achieve each operating standard. Each administrative procedure is co-owned by its assigned creator and a designated user. 6.3.9 One Common Closed-Loop Change Process The entire hierarchy of administrative requirements is maintained with one common closed-loop change process. 6.3.9.1 Change Review Board and Fast-Track Changes The Change Review Board is comprised of the core business process owners. The board members define the criteria for changes that are authorized to be processed on a fast-track basis.
CMII 100D Page 19 of 23
6.3.9.2 Change Specialist Functions I, II and III The closed-loop change process is managed on behalf of the core business process owners by three change specialist functions. Specialist I manages and/or supports the change analysis phase. Specialist II manages and/or supports the implementation of approved changes and updates to the enterprise baseline. Specialist III ensures that continuity is retained between superseded and superseding documents. 6.3.9.3 Reporting Relationships The three change specialist functions report to the owner of core business categories 1.0 through 8.0. 6.3.10 Document Release and Validation Records A release record for each released version of each document is retained and includes evidence of validation. 6.3.11 Change and Revision Records A record of each problem report, each enterprise change request, each enterprise change notice and each document revision is retained. 6.3.12 Traceability via Retained Records Ability to retrieve any previous version of the enterprise baseline and demonstrate that it was properly authorized and validated is established. 7. Measurements of Process Effectiveness The ratio of existing resources being spent on intervention is measured and reported. The ratio of products with nonconforming conditions and the number of deviations/waivers being written are measured and reported. The ratio of changes being written for corrective action purposes are measured and reported. The ratio of output value relative to input costs is measured and reported.
CMII 100D Page 20 of 23
Annex A
The illustration below is an example of an enterprise baseline populated with a hierarchy of administrative requirements. The entire hierarchy is comprised of five indenture levels, levels 0 through 4. The numbering convention for identifying the administrative documents at levels 1 through 4 is similar to a Dewey Decimal system. Document type codes include BR for business regulations, SP for the strategic business plan and its parts, OS for operating standards and AP for administrative procedures. BUSINESS ENTERPRISE BASELINE
Enterprise ID ___________ Administrative Hierarchy
Indenture Levels
01234
Documented Req
Type
BR BR SP SP SP SP SP SP SP OS AP OS AP OS AP OS AP BP OS AP OS AP OS AP BP OS AP OS
Topic Structure
Number
777777 888888 100000 100000-1 100000-2 100000-3 100000-4 100000-5 100000-5-1.0 100000-5-1.1 100000-5-1.1 100000-5-1.2 100000-5-1.2 100000-5-1.3 100000-5-1.3 100000-5-1.4 100000-5-1.4 100000-5-2.0 100000-5-2.1 100000-5-2.1 100000-5-2.2 100000-5-2.2 100000-5-2.3 100000-5-2.3 100000-5-3.0 100000-5-3.1 100000-5-3.1 100000-5-3.2
Rev
R R R R R R R R R R R R R R R R R R R R R R R R R
100000 Part 1 Part 2 Part 3 Part 4 Part 5 CORE PROC. 1.0 Opr. Std. 1.1 Adm. Proc. 1.1 Opr. Std. 1.2 Adm. Proc. 1.2 Opr. Std. 1.3 Adm. Proc. 1.3 Opr. Std. 1.4 Adm. Proc. 1.4 CORE PROC. 2.0 Opr. Std. 2.1 Adm. Proc. 2.1 Opr. Std. 2.2 Adm. Proc. 2.2 Opr. Std. 2.3 Adm. Proc. 2.3 CORE PROC. 3.0 Opr. Std. 3.1 Adm. Proc. 3.1 Opr. Std 3.2
Annex B
CMII-105C CMII Standard for Product Configuration Management CMII-200C CMII Standard for Business Process Certification
CMII-800D Configuration Management: Traditional CM versus CMII CMII-805D CMII versus Other CM Certification Programs CMII-810C Exponential Curve for Intervention Resources and Derivation CMII-815B How CMII Can Further Enhance ISO 9001-2008 CMII-820C Enterprise Architecture Methodologies and the CMII Model CMII-855C Configuration Items: History and Current Usage CMII-860C Comparison of DoD and CMII Development Practices CMII-865C How to Write Requirements for Development Programs
The CMII Model (2 days) Structuring and Managing Requirements (2 days) Key Elements of the CMII Change Process (2 days) The CMII Change Process (2 days) The Business Case for CMII (2 days) CMII Implementation and Application (2 days) How to Achieve Integrated Process Excellence (2 days) CMII Process Automation (2 days) CMII Awareness (1 to 4 hours) CMII Tutorial (1 day) Software Development and Software CM Tools (4 days) Export Control, Security and Governance (2 days) CMII Bootcamp for Management (3 days) CMII Laboratory for Creator/User Team Training (3 days)
ISO 9001:2008 Quality Management Systems Requirements CMMI Capability Maturity Model Integration (and Process Maturity Levels)
8. Form for Requesting Changes Recommended changes to this standard should be submitted to CMII Research Institute by FAXing this completed form to (602) 595-8942.
PHONE
DATE
CR No.____________
Page ___ of ___