SP 3.2 Perform Configuration Audits

CMMI DEV 1.3

5. Process Areas

5.2. Configuration Management

SG 3 Establish Integrity

SP 3.2 Perform Configuration Audits

Process Area	CM
Level	2
Goal	SG 3
Practice	SP 3.2

Perform configuration audits to maintain the integrity of configuration baselines.

Configuration audits confirm that the resulting baselines and documentation conform to a specified standard or requirement. Configuration item related records can exist in multiple databases or configuration management systems. In such instances, configuration audits should extend to these other databases as appropriate to ensure accuracy, consistency, and completeness of configuration item information. (See the definition of “configuration audit” in the glossary.)

Examples of audit types include the following:

· Functional configuration audits (FCAs): Audits conducted to verify that the development of a configuration item has been completed satisfactorily, that the item has achieved the functional and quality attribute characteristics specified in the functional or allocated baseline, and that its operational and support documents are complete and satisfactory.

· Physical configuration audits (PCAs): Audits conducted to verify that a configuration item, as built, conforms to the technical documentation that defines and describes it.

· Configuration management audits: Audits conducted to confirm that configuration management records and configuration items are complete, consistent, and accurate.

Example Work Products

1. Configuration audit results

2. Action items

Subpractices

1. Assess the integrity of baselines.

2. Confirm that configuration management records correctly identify configuration items.

3. Review the structure and integrity of items in the configuration management system.

4. Confirm the completeness, correctness, and consistency of items in the configuration management system.

Completeness, correctness, and consistency of the configuration management system’s content are based on requirements as stated in the plan and the disposition of approved change requests.

5. Confirm compliance with applicable configuration management standards and procedures.

6. Track action items from the audit to closure.

Keywords appropriate ; audit ; baseline ; configuration audit ; configuration baseline ; configuration item ; configuration management ; data ; development ; document ; FCA ; functional configuration audit ; physical configuration audit ; product ; quality ; requirement ; standard ; subpractice