What is a CMM Level?
A CMM Level refers to a maturity level in a Capability Maturity Model (CMM) framework, which assesses the maturity of an organization’s processes. There are multiple maturity models in existence and each has its own number of levels, naming conventions and criteria.
One of the oldest and most respected CMMs is the Systems Security Engineering Capability Maturity Model v2.0 (SSE-CMM). SSE-CMM is a free resource, since it was funded by the US Government. There are six (6) CMM levels associated with the SSE-CMM:
- CMM 0 – Not Performed;
- CMM 1 – Performed Informally;
- CMM 2 – Planned & Tracked;
- CMM 3 – Well-Defined;
- CMM 4 – Quantitatively Controlled; and
- CMM 5 – Continuously Improving.