CMMI compliance (consulting and training)
CMMI is ISACA's capability maturity model for software, services and related disciplines. Maturity levels are awarded only through appraisals led by CMMI Certified Lead Appraisers working with ISACA-licensed partners. ICFC helps you choose the right scope and target level, close practice gaps, prepare evidence and train your teams before the appraisal.
Cybersecurity, IT and Data Protection
- Standard or scheme
- CMMI
- ISACA (CMMI Institute)
- Type
- Maturity model
- Rating by appraisal
- Funding
- Not on the EDGE Standards list
- Non-grant engagement
What is CMMI?
CMMI (Capability Maturity Model Integration) is a model of good practice for improving how organisations develop products and software, deliver services, manage suppliers and people, and handle data, safety and security.
The current version is CMMI V3.0, released in 2023. Organisations receive a maturity or capability level only through an appraisal led by a CMMI Certified Lead Appraiser.
Who is CMMI for?
Software, IT services, engineering and outsourcing firms whose customers or tenders ask for a CMMI maturity level, and organisations that want a structured path to better delivery performance.
Key details
Appraisal types
A Benchmark appraisal gives a rating valid for three years. A Sustainment appraisal gives a further two-year rating and must be accepted before the earlier rating expires. An Evaluation appraisal is informal and gives no rating, and an Action Plan Reappraisal offers a second attempt when a target level is narrowly missed. Details from ISACA's CMMI Institute, checked 12 October 2026.
Choosing a level
Most organisations start with maturity level 2 or 3. Higher levels add quantitative management and continuous optimisation, and need longer preparation.
Our role
Consulting and training only. CMMI is a registered trade mark, and ICFC uses the name descriptively. For information on whether ICFC works with an ISACA-licensed CMMI partner, please email us through the contact form.
No grant found when checked - Non-grant engagement
We did not find this framework on the EDGE Standards list when we checked, so we quote it as a non-grant engagement. Check Enterprise Singapore before you assume any grant support.
Impartiality
Impartiality comes first. Every engagement begins with a conflict-of-interest check. We keep consulting and auditing roles separate, and our auditors never audit, on behalf of a certification body, an organisation that ICFC has consulted on the same scope within the period set by that body.
Our certification role
We do not certify organisations ourselves; certificates are issued by accredited certification bodies or scheme owners.
How we help
Who rates you
Benchmark and Sustainment appraisals that give a maturity or capability level are led by CMMI Certified Lead Appraisers through ISACA-licensed CMMI partners and accepted by ISACA. ICFC does not conduct rated appraisals or issue CMMI ratings.
Readiness assessments
First-party gap assessments of your practices against the CMMI practice areas in scope, with a prioritised action list before you book an appraisal. These are ICFC reviews, not ISACA Evaluation appraisals.
Supplier reviews
Second-party reviews of subcontractors' delivery practices where your customers expect CMMI-aligned suppliers.
Funding
We explain which scheme, if any, applies and what it requires before you commit.
Non-grant
A fixed-scope engagement: gap assessment, documentation, implementation coaching, internal audit and management review, and support through the formal audit or assessment.
How we work
Practical, proportionate systems that your staff can run after we leave.
Classroom
Public and in-house classroom sessions. Courses on CMMI: awareness, practice area implementation workshops and appraisal readiness. These are ICFC courses, not official ISACA CMMI courses, and do not lead to ISACA credentials.
Online LMS
Self-paced and live-online courses on the ICFC Digital LMS, with progress tracking and certificates of completion.
Funding
Funding depends on each course's approval status, shown on the course page in the LMS.