That??™s
why we need procedures to support the processes??”processes are at too high a level
to be consistently applied. An example of a supporting risk management procedure
might be something like:
If the risk affects safety of human beings, categorize it as level 1
If the risk will cause the site to shut down and all processing to stop, categorize
the risk as level 2
If the risk will allow processing to continue, or consists of a simple fix, categorize
it as level 3
And there would be examples and definitions to help flesh out the information
listed in the bullets (like how to identify a level 1, 2, or 3 risk, and what to do about
it). It??™s just a simple example for this discussion.
The point is that the CMMI requires processes to be documented in enough
detail to be followed. A process is not just a high-level flowchart of whats. It needs
supporting procedures to be effective.
In addition to processes, procedures, and standards, there are policies, charters,
and plans. A policy is a high-level document, generated under senior management
sponsorship, that directs the organization to perform.
Pages:
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410