The project process areas contain practices that address acquirer activities related to establishing, executing, and transitioning an acquisition project.

The project process areas of CMMI-ACQ are as follows:

The Project Planning process area includes practices for determining the acquisition strategy, developing the project plan, involving stakeholders appropriately, obtaining commitment to the plan, and maintaining the plan.

Planning begins with the acquisition strategy, which provides the framework for the acquisition project and its plans. The project plan covers the project management and acquisition activities performed by the project. Other plans (e.g., plans for transition to operations and support, configuration management, verification, and measurement and analysis) from relevant stakeholders that affect the project are reviewed, and commitments with those stakeholders for their contributions to the project are established.

Once the acquisition strategy is established using Project Planning practices, the strategy is used to focus on specifying customer and contractual requirements that express customer value in Acquisition Requirements Development practices. Customer needs are established and translated into customer requirements. The set of customer requirements is prioritized, and a set of contractual requirements, including design constraints, is developed.

Development of contractual requirements and operational scenarios also depends on the acquisition strategy developed using Project Planning practices. This set of contractual requirements is used in Solicitation and Supplier Agreement Development practices to select suppliers and establish a supplier agreement to acquire the product or service. The product or service is designed and implemented by the supplier consistent with the acquirer’s contractual requirements and design constraints.

Requirements are maintained using Requirements Management practices. These practices describe activities for obtaining and controlling requirement changes and ensuring that other relevant plans and data are kept current. They also describe the traceability of requirements from customer to contractual requirements and supplier agreements. Requirements Management practices interact with Acquisition Requirements Development practices. All changes to contractual requirements must be reflected in the supplier agreements, which are established and maintained using Solicitation and Supplier Agreement Development practices.

The Solicitation and Supplier Agreement Development process area defines practices for preparing a solicitation package, selecting a capable supplier, and establishing and maintaining the supplier agreement. The acquisition strategy developed using Project Planning practices and the contractual requirements developed using Acquisition Requirements Development practices are required to prepare for Solicitation and Supplier Agreement Development practices. An agreement is developed to acquire the product or service by identifying potential suppliers, developing the solicitation package, and distributing it to potential suppliers. The acquirer evaluates the proposed solutions and negotiates with the supplier to finalize the agreement so that both the acquirer and the supplier have a mutual understanding of the agreement. This agreement is established and maintained using Solicitation and Supplier Agreement Development, but the execution of the agreement is performed using Agreement Management practices.

The acquirer uses Agreement Management practices to manage the supplier agreement by performing the acquirer activities defined in the supplier agreement, monitoring selected supplier processes, accepting the product or service, and managing supplier invoices.

After a supplier is selected and a supplier agreement is established, the acquirer continues to apply Requirements Management practices to manage customer and contractual requirements, while the selected supplier is managing the refined product and product component requirements. Using Requirements Management practices ensures that changes to requirements are reflected in project plans, activities, and work products. This cycle of changes may affect or be affected by other processes; thus, the requirements management process is a dynamic and often recursive sequence of events.

The Project Monitoring and Control process area contains practices for monitoring and controlling acquirer activities and overseeing the supplier’s progress and performance according to project plans. The process area includes coverage of monitoring and controlling the transition to operations and support that was planned using Project Planning practices.

Project Monitoring and Control practices also cover the activities of taking corrective action. The project plan specifies the appropriate level of project monitoring, the frequency of progress reviews, and the measures used to monitor progress. Progress is determined primarily by comparing the project status to the plan. When the actual status deviates significantly from expected values, corrective actions are taken, as appropriate. These actions may include replanning, which requires using Project Planning practices.

As the acquirer’s processes improve in capability, Integrated Project Management practices are used to manage the project using a defined process tailored from the organization’s set of standard processes (Organizational Process Definition). The project uses and contributes to the organization’s process assets, the project’s work environment is established and maintained from the organization’s work environment standards, and integrated teams are established using the organization’s rules and guidelines. The project’s relevant stakeholders coordinate their efforts in a timely manner through the identification, negotiation, and tracking of critical dependencies and the resolution of coordination issues.

In the acquirer–supplier relationship, the need for an early and aggressive detection of risk is compounded by the complexity of projects acquiring products or services. The purpose of Risk Management is to identify and assess project risks during the project planning process and to manage these risks throughout the project.

The acquirer has a dual role: First, assess and manage overall project risks for the duration of the project, and second, assess and manage risks associated with the performance of the supplier. As the acquisition progresses to the selection of a supplier, the risks specific to the supplier’s technical and management approach become more important to the success of the acquisition.

Although risk identification and monitoring are covered in the Project Planning and Project Monitoring and Control process areas, using the Risk Management process area enables the acquirer to take a continuing, forward-looking approach to managing risks with activities that include identification of risk parameters, risk assessments, and risk mitigation.

Acquisition Technical Management practices are used to combine the project’s defined process and risk management activities to perform technical and interface management. This management includes activities such as managing the technical evaluation of selected supplier products and services, conducting technical reviews with the supplier, and managing selected interfaces throughout the project’s lifecycle. Acquisition Technical Management practices, Agreement Management practices, and Project Monitoring and Control practices are all used in concert, as they all contain reviews that are conducted throughout the project.

Using Acquisition Verification practices ensures that the acquirer’s selected work products meet specified requirements. Using Acquisition Verification practices also enables the acquirer to select work products and verification methods to verify acquirer work products against specified requirements.

Acquisition Verification practices also are used to address peer reviews. Peer reviews are a proven method for removing defects early, and they provide valuable insight into the work products and product components being developed and maintained by the acquirer.

The acquirer uses Acquisition Validation processes to ensure that the products or services received from the supplier will fulfill the relevant stakeholders’ needs. Products and services are incrementally validated against the customer’s needs.

Validation may be performed in the actual operational environment or in a simulated operational environment. Coordination with the customer on the validation requirements is an important element of this process area.

The scope of the Acquisition Validation process area includes the validation of products, product components, selected intermediate work products, and processes. These validated elements may often require reverification and revalidation. Issues discovered during validation are usually resolved using Acquisition Requirements Development practices or by working with the supplier through the supplier agreement and technical reviews.

As mentioned earlier, Integrated Project Management processes establish a defined process and integrated plan for managing all the activities of the project. These activities include all of the project processes described earlier, from Project Planning through Acquisition Validation. The organization’s set of standard processes and other process assets provide critical guidance to projects for establishing a defined process and plan. How the organization creates and deploys such process assets for use by the whole organization, along with other forms of critical project support, is the subject of the next section.

Organizational process areas contain the cross-project activities related to defining, planning, deploying, implementing, monitoring, controlling, appraising, measuring, and improving processes.

The organizational process areas contain practices that provide the acquiring organization with a capability to develop and deploy processes and supporting assets and to document and share best practices and learning across the organization.

The organizational process areas of CMMI-ACQ are as follows:

Organizational Process Focus practices help the acquiring organization to plan, implement, and deploy organizational process improvements based on an understanding of the current strengths and weaknesses of the organization’s processes and process assets. Candidate improvements to the organization’s processes are obtained through activities in the processes of related projects. These activities include generating process improvement proposals, measuring processes, collecting lessons learned in implementing the processes, and evaluating products and services.

Using Organizational Process Focus practices, the acquirer encourages participation of suppliers in process improvement activities. Suppliers may be involved in developing process action plans if processes that define interfaces between the acquirer and supplier are targeted for improvement.

Organizational Process Definition practices form the basis for establishing and maintaining the organization’s set of standard processes, work environment standards, rules and guidelines for the operation of integrated teams, and other assets based on the organization’s process needs and objectives.

These other assets include descriptions of lifecycle models, process-tailoring guidelines, and process-related documentation and data. Projects tailor the organization’s set of standard processes to create their defined processes using Integrated Project Management practices. Experiences and work products from performing these defined processes, including measurement data, process descriptions, process artifacts, and lessons learned, are incorporated, as appropriate, into the organization’s set of standard processes and other assets.

The acquirer’s set of standard processes may also describe standard interactions with suppliers. Supplier interactions are typically characterized by the deliverables expected from suppliers, acceptance criteria applicable to those deliverables, standards (e.g., architecture and technology standards), and standard milestone and progress reviews. The acquirer defines in the supplier agreement how changes to organizational process assets that impact the supplier (e.g., standard supplier deliverables and acceptance criteria) are deployed.

The purpose of implementing Organizational Training practices is to develop people’s skills and knowledge so that they can perform their roles effectively and efficiently. For example, an acquiring organization may want to develop its project managers’ capability in managing supplier agreements.

Using Organizational Training practices helps the acquirer identify the strategic training needs of the organization as well as the tactical training needs that are common across projects and support groups. In particular, training is created or obtained to develop the skills required to perform the organization’s set of standard processes. The main components of training include a managed training development program, documented plans, personnel with appropriate knowledge, and mechanisms for measuring the effectiveness of the training program.

Support process areas cover the activities that support acquisition and address processes that are used in the context of performing other processes. The support process areas address acquisition project processes and may address processes that apply more generally to the organization. For example, Process and Product Quality Assurance practices can be used to provide an objective evaluation of the processes and work products described in all of the process areas.

Although all support process areas rely on other process areas for input, some support process areas provide support functions that also help to implement several generic practices.

The support process areas of CMMI-ACQ are as follows:

The Measurement and Analysis process area is related to other process areas because its practices guide projects and organizations in aligning measurement needs and objectives with a measurement approach that provides objective results. These results can be used to make informed decisions and to take appropriate corrective actions.

An acquirer uses Measurement and Analysis practices to support the information needs of the organization and the project. Some of this information may be needed from the acquirer, some from the supplier, and some from all of the parts of a project. Solicitation and Supplier Agreement Development describes how these measures are specified in the solicitation process and supplier agreement. The measurement results from the acquirer and supplier support project, supplier, and technical reviews through Project Monitoring and Control, Agreement Management, and Acquisition Technical Management.

The Process and Product Quality Assurance process area is related to all process areas because it describes specific practices for objectively evaluating performed processes and work products against applicable process descriptions, standards, and procedures, and by ensuring that issues arising from these evaluations are addressed. Process and Product Quality Assurance practices support the acquisition of high-quality products and services by providing the acquirer with appropriate visibility into, and feedback on, the processes and associated work products throughout the life of the project.

The Configuration Management process area is related to all process areas because its practices describe establishing and maintaining the integrity of work products using configuration identification, configuration control, configuration status accounting, and configuration audits. The work products placed under configuration control include the products that are delivered to the customer, designated internal work products, acquired products, tools, and other items that are used in creating and describing these work products.

Examples of work products that may be placed under configuration control include plans, process descriptions, and requirements. Suppliers may play a part in any of these activities on behalf of the acquirer, so the supplier agreement should specify the configuration management roles and responsibilities of the acquirer and the supplier. Configuration management of acquired products (both final and interim products) created by the suppliers requires monitoring to ensure that project requirements are met.

The Decision Analysis and Resolution process area is related to all process areas because its practices describe the activities of determining which issues should be subjected to a formal evaluation process and then applying a formal evaluation process to them. A repeatable Decision Analysis and Resolution process is important for an acquirer when making the critical decisions that define and guide the acquisition process, and later when critical decisions are made with the selected supplier.

High maturity process areas describe practices that further align organizational, project, and support processes with the organization’s business objectives. These process areas describe practices at both the organizational and the project level for establishing objectives for quality and process performance, monitoring variation in the organization’s and projects’ processes, evaluating the impacts of proposed changes to those processes, and systematically deploying processes across the organization. To effectively implement these practices, mature measurement and analysis processes are needed.

The acquirer achieves an effective implementation of high maturity practices by ensuring that all members of the organization collect and analyze measurements and propose and evaluate changes to processes. In other words, high maturity practices should be integrated as much as possible into the practices in other process areas.

The high maturity process areas of CMMI-ACQ are as follows:

At the organizational level, Organizational Process Performance practices are used to derive quantitative objectives for quality and process performance from the organization’s business objectives. The organization provides projects and support groups with common measures, process-performance baselines, and process-performance models. These organizational assets support quantitative project management and the statistical management of critical subprocesses for both projects and support groups.

The organization analyzes the process-performance data collected from these defined processes to develop a quantitative understanding of product quality, service quality, and the performance of the organization’s set of standard processes.

At the project level, acquirers use Quantitative Project Management practices when applying quantitative and statistical techniques to manage process performance and product quality. Quality and process-performance objectives for the project are based on the objectives established by the organization. Through an evaluation of which subprocesses will help the project best achieve its objectives, the project’s defined process is composed.

The project’s defined process comprises, in part, process elements and subprocesses for which process performance can be predicted. At a minimum, the process variation of subprocesses critical to achieving the project’s quality and process-performance objectives must be understood. Corrective action is taken when special causes of process variation are identified.

Acquirers use Causal Analysis and Resolution practices to guide identification of root causes of selected defects and other problems and taking action to prevent their reoccurrence. Although the project’s defined processes are the principal targets for identifying the cause of the defect, the process improvement proposals they create target the organization’s set of standard processes, which will prevent reoccurrence of the selected defects across the organization. These processes may be used to improve the performance of a subprocess, focusing on the central tendency of a product or process attribute, its spread, or both.

At the organizational level, Organizational Innovation and Deployment practices are used to select and deploy proposed incremental and innovative improvements that improve the organization’s ability to meet its quality and process-performance objectives. Identifying promising incremental and innovative improvements should involve an empowered work force that is aligned with the organization’s business values and objectives. The selection of improvements to deploy is based on a quantitative understanding of the benefits and costs of deploying candidate improvements, and the funding available.

Together, the high maturity processes provide the organization with an improved capability to achieve its quantitative objectives for quality and process performance.