nerdexam
(ISC)2

CISSP · Question #786

What do Capability Maturity Models (CMM) serve as a benchmark for in an organization?

The correct answer is D. Procedures in systems development. Capability Maturity Models (CMM) are frameworks that describe the key elements of effective processes for various domains, such as software engineering, project management, or information security. CMM serve as a benchmark for an organization to assess its current level of maturi

Submitted by helene.fr· Mar 5, 2026Software Development Security

Question

What do Capability Maturity Models (CMM) serve as a benchmark for in an organization?

Options

  • AExperience in the industry
  • BDefinition of security profiles
  • CHuman resource planning efforts
  • DProcedures in systems development

How the community answered

(57 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    2% (1)
  • D
    91% (52)

Explanation

Capability Maturity Models (CMM) are frameworks that describe the key elements of effective processes for various domains, such as software engineering, project management, or information security. CMM serve as a benchmark for an organization to assess its current level of maturity and identify the areas for improvement. CMM can help an organization to establish, standardize, measure, control, and optimize its procedures in systems development, which is the process of creating, maintaining, and enhancing information systems. Experience in the industry, definition of security profiles, and human resource planning efforts are not the main focus of CMM, although they may be influenced by the maturity level of the organization.

Topics

#CMM#CMMI#software development process#maturity models

Community Discussion

No community discussion yet for this question.

Full CISSP Practice