CMMI Audit Checklist: Key Areas to Review
A comprehensive CMMI audit checklist should cover the processes, practices, records, measurements, and evidence relevant to the organization’s selected CMMI model and appraisal scope. The exact checklist will vary depending on the maturity level, organizational context, and applicable practice areas.
Requirements Management
Review whether requirements are properly identified, documented, reviewed, communicated, and maintained throughout the project lifecycle. Check that changes to requirements are controlled and traceable.
Project Planning and Monitoring
Verify that projects have clear objectives, plans, schedules, resources, responsibilities, and monitoring mechanisms. Project progress should be regularly reviewed against established plans.
Risk and Issue Management
Check whether project risks and issues are identified, documented, assessed, monitored, and addressed through appropriate actions. Evidence should demonstrate that significant risks are actively managed.
Process Documentation and Implementation
Review whether applicable organizational and project processes are documented, understood by teams, and consistently implemented. The checklist should compare documented processes with actual practices.
Quality Assurance
Verify that quality activities are planned and performed independently where applicable. Review quality records, findings, corrective actions, and evidence showing that identified issues are followed through to closure.
Configuration Management
Check whether project work products and configuration items are identified, version-controlled, reviewed, and maintained appropriately. Changes should follow an established configuration management process.