Evaluating Technology Maturity: CMM and DORA
Technology maturity models provide structured frameworks for assessing current capability and identifying improvement priorities. Understanding where an organisation sits on the maturity curve — and where it needs to get to — enables targeted investment and realistic improvement planning.
Capability Maturity Model (CMM)
The Capability Maturity Model (SEI) defines five maturity levels for software development processes: Initial (chaotic, unpredictable), Managed (project-level control), Defined (organisation-wide standard processes), Quantitatively Managed (metrics-driven management), Optimising (continuous improvement culture). CMMI (the integrated model) extends this to engineering and services capabilities. Primarily used in government contracting and large regulated enterprises.
DORA State of DevOps Research
The DORA (DevOps Research and Assessment) research identifies four key metrics for software delivery performance — Deployment Frequency, Lead Time for Changes, Change Failure Rate, Mean Time to Restore — and categorises organisations as Elite, High, Medium, or Low performers. The research also identifies the technical and cultural capabilities that predict performance: version control, CI, trunk-based development, test automation, observability, loosely coupled architecture, and a generative culture.
Practical Maturity Assessment
Use maturity models as conversation starters, not report cards. A practical assessment identifies the two or three capability improvements with the highest leverage — not a comprehensive checklist of 50 areas. DORA's quick check tool provides a rapid benchmark; more detailed assessments engage the team in honest self-evaluation that builds shared understanding of improvement priorities.