Monday, July 23, 2007

Configuration Management: Institutionalize a Managed Process

The process is institutionalized as a managed process.

Commitment to Perform
GP 2.1 (CO 1) Establish an Organizational Policy
Establish and maintain an organizational policy for planning and performing the configuration management process.

Elaboration:
This policy establishes organizational expectations for establishing and maintaining baselines, tracking and controlling changes to the work products (under configuration management), and establishing and
maintaining integrity of the baselines.

Ability to Perform
GP 2.2 (AB 1) Plan the Process
Establish and maintain the plan for performing the configuration management process.

Elaboration:
This plan for performing the configuration management process can be included in (or referenced by) the project plan, which is described in the Project Planning process area.

GP 2.3 (AB 2) Provide Resources
Provide adequate resources for performing the configuration management process, developing the work products, and providing the services of the process.


Elaboration:
Examples of resources provided include the following tools:
· Configuration management tools
· Data management tools
· Archiving and reproduction tools
· Database programs

GP 2.4 (AB 3) Assign Responsibility
Assign responsibility and authority for performing the process, developing the work products, and providing the services of the configuration management process.


GP 2.5 (AB 4) Train People
Train the people performing or supporting the configuration management process as needed.


Elaboration:
Examples of training topics include the following:

· Roles, responsibilities, and authority of the configuration management staff
· Configuration management standards, procedures, and methods
· Configuration library system


Directing Implementation
GP 2.6 (DI 1) Manage Configurations
Place designated work products of the configuration management process under appropriate levels of configuration management.

Elaboration:
Examples of work products placed under configuration management include the following:

· Access lists
· Change status reports
· Change request database
· CCB meeting minutes
· Archived baselines


GP 2.7 (DI 2) Identify and Involve Relevant Stakeholders
Identify and involve the relevant stakeholders of the configuration
management process as planned.

Elaboration:
Examples of activities for stakeholder involvement include the following:
· Establishing baselines
· Reviewing configuration management system reports and resolving issues
· Assessing the impact of changes for the configuration items
· Performing configuration audits
· Reviewing the results of configuration management audits

GP 2.8 (DI 3) Monitor and Control the Process
Monitor and control the configuration management process against the plan for performing the process and take appropriate corrective action.

Elaboration:
Examples of measures used in monitoring and controlling include the following:
· Number of changes to configuration items
· Number of configuration audits conducted


Verifying Implementation
GP 2.9 (VE 1) Objectively Evaluate Adherence
Objectively evaluate adherence of the configuration management process against its process description, standards, and procedures, and address noncompliance.


Elaboration:
Examples of activities reviewed include the following:
· Establishing baselines
· Tracking and controlling changes
· Establishing and maintaining integrity of baselines


Examples of work products reviewed include the following:

· Archives of the baselines
· Change request database


GP 2.10 (VE 2) Review Status with Higher Level Management
Review the activities, status, and results of the configuration management process with higher level management and resolve issues.
(The following goal is not required and its practices are not expected for a maturity level 2 rating,
but are required for a maturity level 3 rating and above.)

GG 3 Institutionalize a Defined Process
The process is institutionalized as a defined process.

GP 3.1 Establish a Defined Process
Establish and maintain the description of a defined configuration
management process.


GP 3.2 Collect Improvement Information
Collect work products, measures, measurement results, and improvement information derived from planning and performing the configuration management process to support the future use and improvement of the organization’s processes and process assets.