What CMMI for Supplier Management is
CMMI (Capability Maturity Model Integration), administered by ISACA, is a globally recognised model for improving how an organisation performs its work and for measuring the maturity of those processes. CMMI for Supplier Management, formerly CMMI for Acquisition (CMMI-ACQ), applies the model to organisations that obtain products and services from suppliers rather than build them in-house. It strengthens the processes around planning acquisitions, selecting and managing suppliers, and verifying that what is delivered meets requirements.
The name has changed as the model has evolved: CMMI v1.3 called it CMMI for Acquisition (CMMI-ACQ), CMMI V2.0 called it Supplier Management, and in the current CMMI V3.0 (ISACA, April 2023) it is the Suppliers domain. The focus on disciplined acquisition and supplier management is unchanged.
The maturity levels
CMMI uses the same five maturity levels across all of its views:
- Level 1 — Initial: acquisition is ad hoc and unpredictable
- Level 2 — Managed: acquisition processes are planned, performed and measured
- Level 3 — Defined: processes are standardised across the organisation
- Level 4 — Quantitatively Managed: performance is controlled using quantitative techniques
- Level 5 — Optimizing: the organisation continually improves performance
For organisations that depend heavily on suppliers, a higher maturity level means fewer surprises, better value and more reliable delivery from the supply base.
Appraisal, not certification
As with the rest of the model, maturity is confirmed through an appraisal, not a certification. The formal method is the current CMMI Appraisal Method, conducted by an appraisal team led by a certified Lead Appraiser, and the result is typically valid for three years.
How ABS supports CMMI Supplier Management
ABS provides CMMI implementation and appraisal-readiness consulting; formal Benchmark or Sustainment Appraisals are performed through appropriately authorised CMMI appraisal professionals in accordance with current ISACA CMMI requirements. Our consultants bring a minimum of 8–10 years’ hands-on experience implementing CMMI.
We support organisations end to end as they mature their acquisition and supplier-management processes: gap analysis and current-state assessment, CMMI overview training, a process-improvement strategy and roadmap, defining and documenting acquisition processes, establishing a measurement framework, software quality assurance (SQA) support, and preparation for and support through the formal appraisal, which is led by an authorised Lead Appraiser.
It suits organisations with significant procurement or outsourcing — including manufacturing supply chains and enterprises that outsource development. It complements CMMI for Development and CMMI for Services; see the full CMMI & Process category for related work.
Common questions
What does CMMI for Supplier Management (formerly Acquisition) cover?
It applies the CMMI model to organisations that obtain products and services from suppliers rather than build them in-house — strengthening how they plan acquisitions, select and manage suppliers, and verify what is delivered. It was called CMMI for Acquisition (CMMI-ACQ) in CMMI v1.3 and Supplier Management in CMMI V2.0; in the current CMMI V3.0 it is the Suppliers domain. The intent is the same.
How does it differ from CMMI for Development and Services?
All three share the same five-level maturity scale and appraisal approach. Development targets building products and systems, Services targets delivering services, and Supplier Management (formerly Acquisition) targets buying and managing what suppliers provide. Organisations with significant outsourcing or procurement use it to make those relationships more disciplined and predictable.
