Quality Certification

The Software Engineering Institute’s Capability Maturity
Model (CMM) (CM-SEI, 2002) or the International Orga-
nization for Standardization’s ISO9001: 2001 standard
(ISO, 2002) serves as an independent evaluation of the
quality of a vendor’s development processes. Certifica-
tion should not be taken at face value. Investigation can
clarify its meaning. When it was acquired? Was it quali-
fied by project or by subsidiary? Who provided the
evaluation? Was it self-assessed? There are a number of
questions to raise.