Explanation/Reference:
Explanation:
The Software Capability Maturity Model (CMM) is based on the premise that the quality of a software product is a direct function of the quality of its associated software development and maintenance processes. It introduces five maturity levels that serve as a foundation for conducting continuous process improvement and as an ordinal scale for measuring the maturity of the organization involved in the software processes.
CMM has Five Maturity Levels of Software Processes:
The initial level: processes are disorganized, even chaotic. Success is likely to depend on individual

efforts, and is not considered to be repeatable as processes would not be sufficiently defined and documented to allow them to be replicated.
The repeatable or managed level: basic project management techniques are established, and

successes could be repeated as the requisite processes would have been made established, defined, and documented.
The defined level: an organization has developed its own standard software process through greater

attention to documentation, standardization, and integration.
The quantatively managed level: an organization monitors and controls its own processes through data

collection and analysis.
The optimized level: processes are constantly being improved through monitoring feedback from

current processes and introducing innovative processes to better serve the organization's particular needs.
Incorrect Answers:
A: Total Quality Management (TQM) is a management approach of an organization centered on quality, based on the participation of all its members and aiming at long term success through customer satisfaction.
B: The Integrated Design, Evaluation, and Assessment of Loadings (IDEAL) model is a post-construction water quality model for designing storm water best management practices. It is not a software development model.
D: The Spiral model uses an iterative approach to software development with an emphasis on risk analysis. The iterative approach allows new requirements to be addressed as they are uncovered. It is a good model for complex projects that have fluid requirements.
The spiral model has four main phases:
Planning

Risk analysis: ensures that all issues are actively reviewed and analyzed.

Development and testing: prototype testing takes place early in the development project, and feedback

based upon these tests is integrated into the following iteration of steps.
Evaluation: the customer evaluates the product in its current state and provides feedback, which is an

input value for the following iteration of steps.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, pp. 62, 1115-
1116, 1120-1122
http://en.wikipedia.org/wiki/Capability_Maturity_Model
https://en.wikipedia.org/wiki/Total_quality_management
https://en.wikipedia.org/wiki/IDEAL_model