nerdexam
Isaca

CISA · Question #149

Which of the following is the PRIMARY benefit of benchmarking an organization's software development life cycle practices against a capability maturity model?

The correct answer is D. Repeatable software development procedures are established.. The primary benefit of benchmarking SDLC practices against a capability maturity model is establishing repeatable software development procedures, which leads to more predictable and controlled outcomes.

Submitted by femi9· Apr 18, 2026Information Systems Acquisition, Development, and Implementation

Question

Which of the following is the PRIMARY benefit of benchmarking an organization’s software development life cycle practices against a capability maturity model?

Options

  • ASecurity requirements are added to software development processes.
  • BReliable products are guaranteed.
  • CProgrammers' efficiency is improved.
  • DRepeatable software development procedures are established.

How the community answered

(41 responses)
  • A
    2% (1)
  • B
    7% (3)
  • C
    2% (1)
  • D
    88% (36)

Why each option

The primary benefit of benchmarking SDLC practices against a capability maturity model is establishing repeatable software development procedures, which leads to more predictable and controlled outcomes.

ASecurity requirements are added to software development processes.

While process improvement often includes incorporating security, adding security requirements is a specific outcome and not the *primary* overarching benefit of using a general capability maturity model for SDLC.

BReliable products are guaranteed.

While maturity models aim to improve quality, they do not *guarantee* reliable products; rather, they provide a framework to increase the likelihood of producing reliable products through better processes.

CProgrammers' efficiency is improved.

Improved programmer efficiency can be a *result* of more mature processes, but the primary benefit of the model itself is the establishment and institutionalization of those processes, not direct efficiency gains.

DRepeatable software development procedures are established.Correct

Capability maturity models (like CMMI) define levels of process maturity, where higher levels emphasize standardized, documented, and consistently applied (repeatable) processes. Benchmarking against such a model helps an organization mature its SDLC by moving towards repeatable procedures, reducing reliance on individual heroism, and improving predictability.

Concept tested: SDLC maturity model benefits

Source: https://www.sei.cmu.edu/what-we-do/areas-of-work/all-areas-of-work/c/cmmi/index.cfm

Topics

#Capability Maturity Model (CMM)#Software Development Life Cycle (SDLC)#Process Maturity#Process Improvement

Community Discussion

No community discussion yet for this question.

Full CISA Practice