<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>Comparison of devops maturity models</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Monika Gasparaite˙</string-name>
          <email>monika.gasparaite@gmail.com</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Saulius Ragaišis</string-name>
          <email>saulius.ragaisis@mif.vu.lt</email>
          <xref ref-type="aff" rid="aff0">0</xref>
        </contrib>
        <aff id="aff0">
          <label>0</label>
          <institution>Institute of Computer Science, Vilnius University</institution>
          ,
          <addr-line>Vilnius</addr-line>
          ,
          <country country="LT">Lithuania</country>
        </aff>
      </contrib-group>
      <fpage>65</fpage>
      <lpage>69</lpage>
      <abstract>
        <p>-Since software development using DevOps is still a new phenomenon, analysis of DevOps maturity models is insufficient. The purpose of this work is to investigate whether perception of DevOps is similar in different models. Models that have been investigated are as follows: BTopham, Samer I. Mohamed, and Focus Area models. In order to compare the models, assessments of maturity and capability assured by the models have been performed. The results have shown that the examined models are different in terms of their interpretation of DevOps.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>I. INTRODUCTION</title>
      <p>
        Software process is a set of interrelated or interacting
activities that are performed while creating a software product.
Although software industry has improved significantly over the
last few decades, many software companies face such
problems as projects being behind schedule, exceeding the budget,
customer dissatisfaction with product quality [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ]. Eventually,
it was acknowledged that most of the problems arise due
to immature software process of the company [
        <xref ref-type="bibr" rid="ref2">2</xref>
        ]. Software
process models were created to improve and assess software
process. Software process model defines essential elements of
the process, which can be used to assess the maturity of an
organization or the capability of individual processes.
      </p>
      <p>New software development methods are emerging over time.
One of the rapidly growing phenomena is DevOps, the primary
goal of which is to bridge the gap between development and
operations. That can be achieved by combining the objectives
of different disciplines and tools, forcing interdisciplinary
professionals to communicate frequently.</p>
      <p>Since software development using DevOps practices is a
quite new concern, there is a lack of analysis related to DevOps
maturity models. The purpose of this paper is to examine
whether DevOps concept can be interpreted the same way in
various DevOps maturity models.</p>
      <p>This paper is organized as follows. Section II describes
DevOps. Section III presents existing DevOps maturity
models. Section IV defines comparison method which is used when
assessing models in sections V-VI.
©2019 for this paper by its authors. Use permitted under Creative
Commons License Attribution 4.0 International (CC BY 4.0)</p>
    </sec>
    <sec id="sec-2">
      <title>II. DEVOPS</title>
      <p>
        The literature review has shown that definition of DevOps is
ambiguous [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ]. Even though DevOps has no formal definition,
there are a few prevailing opinions about it. Some state that it
can be defined as a job title which requires additional skills,
while others strongly believe that DevOps is more like a
movement with specific concepts covered. However, in simple
terms, it can be defined as a combination of development and
operations. Development is represented by software
developers, while operations involve experts who maintain software
in production environment such as database administrators and
network specialists [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ].
      </p>
      <p>
        Today DevOps covers culture, collaboration, automation,
lean practices, continuous improvement and delivery, user
satisfaction. Culture can be interpreted as shared goals and
values, responsibility and effortless communication.
Collaboration is about adopting cross-functional teams. Automation
involves building, testing, and deployment. Lean practices aim
to eliminate waste. DevOps also encompasses practices related
to monitoring and measurement, which result in continuous
improvement. Another purpose of DevOps concerns releasing
software and reacting on feedback faster [
        <xref ref-type="bibr" rid="ref3">3</xref>
        ].
      </p>
    </sec>
    <sec id="sec-3">
      <title>III. DEVOPS MATURITY MODELS</title>
      <p>This section provides an overview of three considered
models as follows: BTopham, Samer I. Mohamed, and Focus
Area maturity models. From all DevOps models that can be
found, only three DevOps models were selected for further
investigation. The reason being is that they are more
comprehensive in comparison with other models.</p>
      <sec id="sec-3-1">
        <title>A. BTopham maturity model</title>
        <p>
          Shani Inbar, Sayers Yaniv, Pearl Gil, Schitzer Eran, Shufer
Ilan, Kogan Olga, Srinivasan Ravi present DevOps maturity
model which consists of five maturity levels [
          <xref ref-type="bibr" rid="ref5">5</xref>
          ]. For the
purpose of simplicity, this maturity model is hereinafter referred
to as BTopham maturity model.
        </p>
        <p>
          Authors define three dimensions - process, automation, and
collaboration. It is essential to mention that term "dimension"
is not used correctly in this context as it has a different
meaning in traditional maturity models. In this case, dimension
is an equivalent term to process area in CMMI [
          <xref ref-type="bibr" rid="ref6">6</xref>
          ]. In fact,
other models give a different name for it. For example,
ISO/IEC 15504 [
          <xref ref-type="bibr" rid="ref7">7</xref>
          ] uses term "process" while AgilityMOD [
          <xref ref-type="bibr" rid="ref8">8</xref>
          ]
model names it aspect. In order to avoid misunderstandings,
in this paper dimensions will be called aspects.
        </p>
        <p>Even though BTopham maturity model is designed to cover
the entire life-cycle of an application or a service for large
enterprises, this model lacks clarity and specificity. This model
can be rather perceived as guidelines which state general ideas
for software process improvement.</p>
      </sec>
      <sec id="sec-3-2">
        <title>B. Samer I. Mohamed maturity model</title>
        <p>Samer I. Mohamed maturity model presents an improved
version of the previously examined BTopham maturity model
[9]. This model has identical five maturity levels, but it
defines slightly different aspects as follows: communication,
automation, quality, and governance.</p>
        <p>Communication refers to effective communication between
teams. Automation specifies improvement of delivery speed,
throughput, and repeatability. Quality is about delivering in
more lean and faster manner while governance is responsible
for controlling how those aspects work seamlessly together.</p>
        <p>Although this model is an improved version of BTopham
maturity model, disadvantages remain the same. Both models
are quite abstract in order to assess maturity of real-life
organization.</p>
      </sec>
      <sec id="sec-3-3">
        <title>C. Focus Area maturity model</title>
        <p>
          Rico de Feijter, Rob van Vliet, Erik Jagroep, Sietse
Overbeek, Sjaak Brinkkemper present another DevOps maturity
model which is the largest and the most comprehensive model
of all models that have been found [
          <xref ref-type="bibr" rid="ref3">3</xref>
          ]. For the purpose of
simplicity hereinafter it will be referred to as Focus Area
model.
        </p>
        <p>Focus Area model is a non-traditional model because of its
focus area architecture. In this context, staged and
continuous representations are traditional. Focus area architecture is
different for two reasons. First of all, there can be unlimited
quantity of maturity and capability levels. Secondly, each focus
area (which is a synonym for process area in CMMI
maturity model) has different evaluation intervals. For example,
possible capability levels for communication focus area starts
from A to E, while configuration management can be assessed
from A to C. For this reason, meaning of C capability level is
different in both contexts. Even though focus areas are named
differently in traditional maturity models, original term in this
paper will be used instead. This is because of focus area
architecture which is quite specific.</p>
        <p>This model describes sixteen focus areas which must be
taken into consideration while trying to adopt or improve
DevOps practices in company. All focus areas are logically
grouped into three groups: 1) culture and communication, 2)
product, process, and quality, 3) foundation.</p>
      </sec>
    </sec>
    <sec id="sec-4">
      <title>IV. COMPARISON METHOD</title>
      <p>In order to determine how different DevOps maturity
models perceive DevOps, comparison of maturity models has been
performed. That comparison is accomplished by assessing
maturity models in accordance with Focus Area model.</p>
      <p>Model assessment is composed of several steps. Firstly,
maturity assessment of selected model, for example, model
X, is done. This assessment is performed as follows. First of
all, it is assumed that the company meets the requirements of a
certain maturity level of the selected model X. Based on those
requirements, the assessment is carried out in accordance with
Focus Area assessment method. It gives information about
maturity level that can be achieved in accordance with Focus
Area maturity model. The assessment is performed until all
maturity levels of the selected model X are assessed.</p>
      <p>After maturity assessment, the capability assessment is
performed. This assessment is based on focus areas instead of
maturity levels as in maturity assessment. It gives information
about capability level for each focus area that can be assured
by the highest maturity level of model X. If a certain level of
capability is not achieved, the higher capability levels are no
longer assessed. This assessment provides more information
about the model being assessed.</p>
      <p>Finally, reverse assessments are performed. Reverse
assessments are analogous to previously mentioned assessments. The
only difference is that it is based not on Focus Area maturity
model but on the selected model X.</p>
      <p>All assessments rely not only on model requirements that
were presented but also on requirements that are established
and well known in IT industry nowadays. For instance, version
control system usage. If assessments were based only on the
explicitly stated requirements, the results would be slightly
worse. In fact, the purpose of this assessment is to get results
that are as realistic as possible.</p>
      <p>V. COMPARISON OF BTOPHAM AND FOCUS AREA</p>
      <p>MATURITY MODELS</p>
      <sec id="sec-4-1">
        <title>A. BTopham model maturity assessment</title>
        <p>The assessment of BTopham model maturity allows to
determine which level of maturity in accordance with Focus
Area model each maturity level can assure.</p>
        <p>Assessment begins with the first maturity level. BTopham
model does not have any requirements for the first maturity
level. For this reason, each organization is at this level by
default. Focus Area maturity model defines maturity level 0,
which is equivalent to maturity level 1 in BTopham model as
there is no focus area assigned.</p>
        <p>One of the Focus Area model requirements for maturity
level 1 is “functional and non-functional requirements and
incidents are gathered from and prioritized with internal
stakeholders and customers”. However, BTopham maturity
model does not provide any information about requirements
and incidents. For this reason, maturity level 2 in BTopham
maturity model cannot assure maturity level 1 in Focus Area
model. Oddly, all other requirements for maturity level 1 are
met.</p>
        <p>The assessment of maturity levels 3 - 5 corresponds to
assessment of maturity level 2 because previously mentioned
requirement still cannot be satisfied.</p>
        <p>In short, the results of BTopham model maturity assessment
show that all maturity levels in BTopham maturity model can
ensure only maturity level 0 in the Focus Area model.</p>
        <p>The assessment of maturity levels 2-10 corresponds to
previous assessment because Focus Area model does not have
requirements related to documentation.</p>
      </sec>
      <sec id="sec-4-2">
        <title>B. BTopham model capability assessment</title>
        <p>As mentioned before, capability assessment allows to gain
additional knowledge about models. The assessment result is
provided in Table I. A dash indicates that the lowest capability
level cannot be assured. Also, maximum capability levels are
provided as they are different for each focus area.</p>
        <p>As shown in Table I, communication and release alignment
focus areas assure the highest capability level. It means that
perception of communication is similar in both models. It is
worth to mention that requirement for capability level C is
incorrect because it is composed of requirements for lower
capability levels. Therefore, if lower capabilities (A and B)
are achieved, the highest capability level C will be always
achieved as well.</p>
      </sec>
      <sec id="sec-4-3">
        <title>C. Focus Area model maturity assessment</title>
        <p>The assessment of Focus Area model maturity allows to
determine which level of maturity in accordance with BTopham
maturity model each maturity level can assure.</p>
        <p>As mentioned before, Focus Area model does not have any
requirements for maturity level 0 because there are no focus
areas assigned to this maturity level. For this reason, maturity
level 0 in Focus Area maturity model is analogous to maturity
level 1 in BTopham maturity model.</p>
        <p>Maturity level 1 in Focus Area model cannot ensure
maturity level 1 in BTopham maturity model because requirements
"automation process is documented and partially automated",
"regular sync meetings are held", "there is frequent
communication between the teams" are not fulfilled.</p>
      </sec>
      <sec id="sec-4-4">
        <title>D. Focus Area model capability assessment</title>
        <p>The result of Focus Area capability assessment is provided
in Table II. The highest capability level that can be achieved
is 5 as model provides exact five levels. It is worth to mention
that in traditional models the lowest capability level is 0
which means that aspect is either not performed or partially
performed. In this case, the lowest capability is 1.</p>
      </sec>
      <sec id="sec-4-5">
        <title>E. Disadvantages of BTopham and Focus Area maturity models</title>
        <p>The obtained results have shown that BTopham and Focus
Area models are contrastive. First of all, a few requirements
in BTopham maturity model are abstract, making it difficult to
check whether the requirement is met, while the Focus Area
model provides very specific requirements. For instance, Focus
Area model requires manual code quality monitoring and
examples of how it can be done are provided, while BTopham
maturity model requires that the quality of the overall process
should be measured but it is not clear which areas and how
to measure.</p>
        <p>What is more, requirements that can be checked, such
as standardization or documentation of the process, are not
required in Focus Area model. Assessments have shown that
BTopham maturity model has some drawbacks. For instance,
requirements for higher maturity levels can be satisfied even
though requirements for lower maturity levels are not met.
Meanwhile, the absolute majority of the requirements in Focus
Area model are formulated so that higher level requirements
cannot be met unless lower level requirements are satisfied.</p>
        <p>Another disadvantage of BTopham maturity model is that
this model does not define the necessary level implementation
of the requirements for maturity level. Traditional models do
not require complete implementation of the requirements. For
example, ISO/IEC 15504 states that the process attribute is
“fully achieved” if at least 86% requirements are met, while
CMMI requires no fundamental shortcomings.</p>
        <p>Unfortunately, Focus Area model has downsides as not
proper requirements. For example, requirement "a software
build is created manually" are always fulfilled because it
cannot be done in a worse way. Furthermore, requirements
for release alignment focus area are not correct because they
overlap each other.</p>
        <p>VI. COMPARISON OF SAMER I. MOHAMED AND FOCUS</p>
        <p>AREA MATURITY MODELS</p>
      </sec>
      <sec id="sec-4-6">
        <title>A. Samer I. Mohamed model maturity assessment</title>
        <p>The results of BTopham and Samer I. Mohamed maturity
assessments are identical. The reason being is that both models
do not define any requirements related to requirements and
incidents gathering.</p>
        <p>In short, Samer I. Mohamed maturity model can assure only
maturity level 0 in accordance with Focus Area model.</p>
      </sec>
      <sec id="sec-4-7">
        <title>B. Samer I. Mohamed model capability assessment</title>
        <p>The result of Focus Area capability assessment is provided
in Table III.
Even though requirements related to defect
tracking/management are met in maturity level 3, requirement
for documentation still cannot be fulfilled. For this reason,
maturity level 3 in Focus Area model cannot assure maturity
level 1 in Samer I. Mohamed model.</p>
        <p>The assessment of maturity levels 4-10 is identical to
assessment of maturity level 3. In short, maturity level 1
in Focus Area model assures maturity level 1 in Samer I.
Mohamed maturity model.</p>
      </sec>
      <sec id="sec-4-8">
        <title>D. Focus Area model capability assessment</title>
        <p>The result of Focus Area capability assessment is provided
in Table IV.</p>
        <p>As shown in Table III, the assessment result is similar
comparing with BTopham model. Almost all achieved
capability levels are the same except for knowledge sharing, team
organization, and development quality improvement focus
areas.</p>
      </sec>
      <sec id="sec-4-9">
        <title>C. Focus Area model maturity assessment</title>
        <p>The assessment of Focus Area model maturity allows to
determine which level of maturity in accordance with Samer
I. Mohamed maturity model each level can assure.</p>
        <p>Maturity level 0 in Focus Area model is analogous to
maturity level 1 in Samer I. Mohamed maturity model because
both maturity levels do not have any requirements.</p>
        <p>Maturity level 1 in Focus area cannot ensure maturity
level 2 in BTopham maturity model because requirements
"automation process is documented but not yet executed as a
standard", "defect tracking/management is done using proper
tools" are not satisfied.</p>
        <p>The assessment of maturity level 2 corresponds to previous
assessment because Focus Area model does not have
requirements related to documentation and defect tracking.</p>
        <p>Aspect
Communication
Automation
Governance
Quality</p>
        <p>Achieved
capability level
3
1
2
2</p>
      </sec>
      <sec id="sec-4-10">
        <title>E. Disadvantages of Samer I. Mohamed and Focus Area maturity models</title>
        <p>Assessments have shown that Samer I. Mohamed maturity
model has the same drawbacks as BTopham maturity model.</p>
      </sec>
    </sec>
    <sec id="sec-5">
      <title>CONCLUSIONS</title>
      <p>The assessments have shown that considered models
perceive DevOps in a different manner. This conclusion can be
justified by the fact that the highest maturity level in BTopham
and Samer I. Mohamed maturity models corresponds to the
lowest maturity level in Focus Area maturity model and
vice versa. Nevertheless, communication perception is similar.
Assessments have exposed that all considered maturity models
have weaknesses.
[9] S. I. Mohamed, “DevOps shifting software engineering strategy-value
based perspective,” International Journal of Computer Engineering,
vol. 17, no. 2, pp. 51–57, 2015.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1]
          <string-name>
            <given-names>Stasys</given-names>
            <surname>Peldžius</surname>
          </string-name>
          , “
          <article-title>Software process assessment using multiple process assessment models</article-title>
          ,
          <source>” Ph.D. dissertation</source>
          , Vilnius University,
          <year>2014</year>
          , (in Lithuanian).
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>W. S.</given-names>
            <surname>Humphrey</surname>
          </string-name>
          ,
          <string-name>
            <given-names>W.</given-names>
            <surname>Sweet</surname>
          </string-name>
          ,
          <string-name>
            <given-names>R.</given-names>
            <surname>Edwards</surname>
          </string-name>
          , G. LaCroix, M. Owens, and
          <string-name>
            <given-names>H.</given-names>
            <surname>Schulz</surname>
          </string-name>
          , “
          <article-title>A method for assessing the software engineering capability of contractors</article-title>
          ,”
          <year>1987</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <surname>R. de Feijter</surname>
            , R. van Vliet,
            <given-names>E.</given-names>
          </string-name>
          <string-name>
            <surname>Jagroep</surname>
            ,
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Overbeek</surname>
            , and
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Brinkkemper</surname>
          </string-name>
          , “
          <article-title>Towards the adoption of devops in software product organizations: A maturity model approach</article-title>
          ,” Department of Information and Computing Sciences Utrecht University, Utrecht, The Netherlands,
          <source>Tech. Rep. UUCS-2017-009</source>
          ,
          <year>2017</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <given-names>J.</given-names>
            <surname>Roche</surname>
          </string-name>
          , “Adopting DevOps Practices in Quality Assurance,” Commun. ACM, vol.
          <volume>56</volume>
          , no.
          <issue>11</issue>
          , pp.
          <fpage>38</fpage>
          -
          <lpage>43</lpage>
          , Nov.
          <year>2013</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <given-names>S.</given-names>
            <surname>Inbar</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Yaniv</surname>
          </string-name>
          ,
          <string-name>
            <given-names>P.</given-names>
            <surname>Gil</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Eran</surname>
          </string-name>
          ,
          <string-name>
            <given-names>S.</given-names>
            <surname>Ilan</surname>
          </string-name>
          ,
          <string-name>
            <given-names>K.</given-names>
            <surname>Olga</surname>
          </string-name>
          , and
          <string-name>
            <given-names>S.</given-names>
            <surname>Ravi</surname>
          </string-name>
          , “DevOps and OpsDev: How Maturity Model Works,” https://community.softwaregrp.com/t5/
          <article-title>All-About-the-Apps/ DevOps-and-</article-title>
          <string-name>
            <surname>OpsDev-How-Maturity-</surname>
          </string-name>
          Model-Works/ba-p/
          <year>306787</year>
          ,
          <year>2013</year>
          , [Accessed:
          <fpage>2018</fpage>
          -06-15].
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <given-names>C. P.</given-names>
            <surname>Team</surname>
          </string-name>
          , “
          <article-title>CMMI for Development, version 1</article-title>
          .2,”
          <year>2006</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          <source>[7] ISO/IEC 15504 - 1 Information technology - Process Assessment - Part 1: Concepts</source>
          and vocabulary, “ISO/IEC,”
          <year>2004</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <given-names>Ozcan</given-names>
            <surname>Top</surname>
          </string-name>
          , Ozden, “
          <source>Software Agility Assessment Reference Model v3.0</source>
          (
          <issue>AgilityMOD</issue>
          ),”
          <year>2014</year>
          .
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>