Tell me about...CMMI

[Gedd]

Ok, here's the scenario. For some of the work I do, I subcontract to a one-person company for some relatively small website (server-side programming with database) development for the government. Most of the projects are basically just taking some paper process and moving it into an online environment. They typically take 3-6 months to develop.

My client has been told by the government agency that she's now required to have a CMMI Level 2 rating for this work. If she doesn't get it, she'll lose the work. The contract is not a huge amount of money, but it's been pretty consistent over the years between new development and maintenance on old sites.

I've done some initial research into CMMI, and think I have an understanding of the basic concepts, but I'd appreciate some real-world input on some questions if anyone would mind answering.

1) Google has told me that CMMI Level 2 ratings generally cost around $70k and can take as long as a 9-12 months. Is that accurate, especially for a company of one?

2) I realize that CMMI doesn't really have any consideration of company and project sizes, but is it realistic and practical for a company of one (or even two) to go after? One CMMI assessor's site that I read basically said it was technically possible, but pretty much unheard of.

3) Any other information or resources that might be useful in this situation?

[Tortilla]

CMMI is completely senseless for an organization of one developer. That being said, government contracts are known for senseless requirements designed by bureaucrats who have no actual interest in the efficiency of feasibility of the requirements they impose.

I don't have any hands on experience with CMMI, my only brush with it was to get the idea of implementing it scrapped in favor of more sensible agile development models the last time my company decided to change things up.

I do, on the other hand, have some experience with subcontracted IT work when the main contracts contain absurd requirements. I would recommend looking carefully at the contracts as the first step. Determine exactly what exactly the contract is specifically demanding. Must the appraisal come from a designated appraiser or certified appraiser? Is self appraisal a possibility? There's a chance you or your sub can just BS your way through this with some extra paperwork and go back to do quality work and collecting money.

[grahamiam]

1: 9 to 12 months is pretty fast, it took our company longer but we have a few more than 1. At level 2, it's really just an exercise of getting your company's processes organized so you know how much time it will take to develop a product. Oh, and to keep consultants employed, which I think is really the main purpose.
2. I don't see how it could be practical unless this is their entire livelihood and they can expect to make back the 70 to 100k fairly quickly.
3. It's a racket (imho)

[Brandon Clements]

CMMI is completely senseless for an organization of one developer.

Just reading the overview*, I'm not sure it's possible, let alone feasable, for a one person shop that is a subcontractor likely doing other work.

*I've not had to get into it before, having had process managment fallbacks.

[Timex]

Even an organization of one developer should be able to achieve at least CMMI level 2... I mean, if you can't meet the requirements for that, it basically means you have no development process at all.

The problem would be actually getting evaluated, which would tend to cost more than you could afford. That being said, it could end up benefiting you if you deal a lot with organizations which care about that sort of thing, since you could list it on your business cards and stuff.

[Charlatan]

I've been involved in CMMI-3 for many projects, but they are typically multi-person projects in large organizations. A requirement that says a one-person shop needs to get certified as CMMI-2 compliant sounds insane.

[Gedd]

Thanks for the feedback so far everyone. It pretty much confirms what I gathered from my Googling.

The problem would be actually getting evaluated, which would tend to cost more than you could afford. That being said, it could end up benefiting you if you deal a lot with organizations which care about that sort of thing, since you could list it on your business cards and stuff.

I definitely could see pushing more towards getting it if this was something we saw popping up in other projects, but no one is asking for it at all. Just taking a look at other companies I've done work with which are in the 20-50 employee range, none of them are carrying a CMMI rating either and they do a ton more work.

[Gedd]

I've been involved in CMMI-3 for many projects, but they are typically multi-person projects in large organizations. A requirement that says a one-person shop needs to get certified as CMMI-2 compliant sounds insane.

More than likely the requirement is coming from an outside group that is just sticking it on any sort of software/web development project without any consideration for project and/or vendor size. It's not the people we work with on a day-to-day basis, but likely someone reviewing all technical contracts and applying the same standards to everyone.

[GatInDaHat]

Expecting CMM quality code from your usual $40/hr developer is unrealistic. What you'll get for $40/hr is some guy from india that has his "master's degree" in comsci. You'll end up needing the $80/hr+ developers, most of whom have never heard of CMM, and the likelihood is epic fail.