CMMI Institute (ISACA) Strategic Partner

CMMI Appraisals + ISO 9001 Certification

One scope. One preparation. One coordinated path to your CMMI maturity level rating and ISO 9001 certification.

LAYERMARK — CMMI Institute Strategic CMMI Partner
Arrange a Callback
A 30-minute call with a lead appraiser maps your scope, target level, and timeline.
We reply within one business day. Your details are used only to arrange the conversation.
1 of 3CMMI Institute Strategic Partners worldwide, among 300+ partner organizations
10Sponsored lead appraisers in our pool.
8CMMI domains appraised, plus CMMI AIM (AI Maturity), published June 2026
Maturity Level 2 through High Maturity. Remote or on-site, from Washington, DC.
Why organizations pursue CMMI

A rating answers the question an RFP can't.

Federal agencies and enterprise buyers increasingly require a CMMI maturity level rating before they'll rely on you, because a rating settles what a proposal cannot: does this company run standardized processes that genuinely live in the organization, or processes that sit on a shelf?

An appraisal proves your delivery is real, repeatable, and independent of any single person. Along the way it institutionalizes the measurement infrastructure your leadership needs anyway, and most of that data already sits in the software your teams use every day.

Bid eligibility
Stay credible on CMMI-gated contracts, task orders, and recompetes.
Delivery that survives turnover
Process independence from any one individual. Key-person risk, removed.
Measurable profitability
Measures that let leadership see efficiency, rework, and margin.
A system ISO also accepts
One management system that satisfies ISO 9001 at the same time.
The idea that changes the project

You shouldn't “prepare for CMMI.” You should be ready for your own business objectives.

The biggest mistake organizations make is treating CMMI as a documentation project. We come in, run a gap analysis, and confirm you're already doing what the best practices describe.

Our first conversation deliberately uses no CMMI vocabulary at all: we ask how you plan, estimate, monitor, and govern your work, and we map that to the model ourselves. Most organizations delivering software or services already do most of what the model asks, so nobody has to reinvent the wheel.

CMMI does not prescribe how you must work. The model is a catalog of proven best practices against which your existing, long-standing ways of working are mapped and appraised. Where a process is real but not written down yet, your practitioners describe what they already do, and modern AI tooling turns that narration into documented procedure faster than it has ever been.

“No customer should prepare for CMMI. That's one of the big errors. They say, ‘We have to prepare our CMMI documents, we have to be CMMI-ready.’ No. You have to be your company's own business-objective ready. I will just come in and do a gap analysis to make sure you're doing everything which is written in the best practices.”
Yujel Tepekoy, Director, CMMI Appraisal & Consulting Services
The maturity levels, in plain language

What each rating actually claims about you

Most buyer requirements specify Level 2 or Level 3. Level 3 is the most commonly required benchmark for federal work.

ML1
Execution
You perform the work and hold the artifacts that prove it.
ML2
Repeatability
Teams repeat the work consistently, and a measurement infrastructure takes shape beneath it. A realistic first-time target.
ML3Most requested
Habitual Performance
The way your organization works has become the way it works, every time. Practices are habitual and organizational, supported by measures that feed management decisions.
ML4–5
High Maturity
Statistical management and continuous optimization, for organizations competing on predictability.
Our appraisal roadmap

Prepared before it counts

Typical end to end 3–6 months · renewals move faster
PHASE 01
Gap Analysis
Output: a heat map

We listen to how your teams actually deliver, catalog your engagements, and map performance against every practice area in scope. You receive a heat map: exactly where you stand, with concrete guidance for every gap.

The two gaps we find almost everywhere, measurement reporting and written risk management, are typically closed with data and knowledge you already have.

PHASE 02
Gap Remediation
At your pace, with guidance

You close gaps at your own pace, with our guidance throughout. A focused mini gap analysis verifies closure, with no full-blown repeat.

PHASE 03
Readiness Reviews
4–5 structured sessions

Structured spot-checks: where is the process, where is the artifact. This is our deliberate safeguard: we do not take clients into an official appraisal until readiness confirms they're prepared.

PHASE 04
Benchmark Appraisal
Official & rating-bearing

Conducted to the CMMI Institute's Method Definition Document by a lead appraiser from our sponsored pool and a qualified appraisal team. Once scope is submitted, the CMMI Institute returns a random sampling assignment: specific projects examined for specific practice areas, so no one can prepare favored examples.

Because of Phases 1–3, that randomness holds no surprises. Small single-site organizations typically complete the benchmark in five to six days.

Interviews without the disruption

Before readiness reviews, a simple role-mapping exercise identifies which of your people can speak to which practice area, and our appraisers book time directly with the right individuals.

For first-time journeys
The Evaluation Appraisal

A deep-dive gap analysis and hands-on preparation engagement, led by a certified lead appraiser rather than a general consultant. In a formal appraisal, the appraiser may identify a deficiency but is prohibited from advising how to fix it. Here, that guidance is exactly what you're getting. Delivered as a five-day block or spread across four to eight weeks of short working sessions, with consulting access throughout, and no hourly meter.

Post-award deadline

Won a contract vehicle that requires CMMI? Your clock is running.

Federal vehicle and task-order awards increasingly carry post-award maturity deadlines, and a year to reach a required level is common. The earlier the gap analysis, the more comfortable the deadline.

Start with a scoping call
01Evaluation appraisal: deep-dive gap analysis
02Remediation with our guidance
03Readiness reviews
04Benchmark appraisal
Gap analysis to benchmark-ready runs one to six months, depending on how much genuine process you already run. Maturity Level 2 is a realistic, unheroic first-time target.
One preparation, two credentials

An organization that is CMMI-ready is essentially ISO-ready.

ISO 9001's process and artifact requirements substantially overlap CMMI's, in a much lighter fashion. So we run your ISO 9001 certification under exactly the same scope as your CMMI appraisal, in parallel: no separate, full-blown ISO effort, and your certificate can be issued before, after, or together with your benchmark appraisal.

The mechanism: one integrated process library

The process assets built during CMMI preparation are your ISO 9001 process set, with no parallel documentation decks, so ordinary day-to-day work satisfies both your next ISO audit and your next appraisal.

Domain-matched pairings
Development+ ISO 9001
Services+ ISO 9001 / ISO 20000
Security+ ISO 27001
Broader ISO portfolio
ISO 14001 · Environment ISO 45001 · Health & Safety ISO 22301 · Continuity ISO 56002 · Innovation
Where each framework sits
CMMC verifies compliance against NIST SP 800-171/172.
ISO certifies that a standard is met.
CMMI measures capability in service of organizational performance.
What we appraise

All eight CMMI domains

From Maturity Level 2 through High Maturity. Adding a second domain adds one to two appraisal days, not a second appraisal.

Development
You control project management and requirements of what you build. Formerly CMMI-DEV.
Services
Your customer directs the work and you deliver against it. Formerly CMMI-SVC.
Supplier Management
Sourcing, supplier agreements, and delivered supplier performance. Formerly CMMI-SPM.
Security
Security practices appraised alongside delivery, and the natural pair for ISO 27001.
Safety
Safety-critical engineering and operational assurance.
Data
Data management and quality as an appraised capability.
People
Workforce capability and empowerment.
Virtual Work Environment
Distributed and remote delivery, appraised as its own capability.
New CMMI AIM (AI Maturity), published June 2026, extends the model for organizations building and governing AI-assisted delivery.
Learn more about CMMI-AIM →
Build your appraisal team

CMMI Practitioner training, in-house

A CMMI appraisal is conducted by a team: your lead appraiser from LAYERMARK's pool, plus at least three appraisal team members holding the CMMI Practitioner credential, earned through the official three-day Building Organizational Capability (BOC) course and examination, delivered through our CMMI Academy by one of the world's leading instructors.

We can also supply certified external appraisal team members, provided at cost, though we recommend at least one in-house Practitioner: the value keeps compounding after the appraisal.

Schedule training at CMMI Academy
Building Organizational Capability (BOC)

The official three-day, instructor-led CMMI Practitioner course, covering all eight CMMI domains. Followed by the CMMI Practitioner examination: 120 questions, four hours, open book. Passing confers the ISACA CMMI Practitioner credential, which qualifies holders to serve as appraisal team members.

3 days Online or on-site Credential valid 3 years
High Maturity Concepts

For organizations moving toward Levels 4 and 5: statistical management, process performance models, and optimization.

Why LAYERMARK

Standing, method, and no meter running

1 of 3 Strategic Partners worldwide

The highest partnership tier, among 300+ partner organizations, working directly with ISACA leadership and top-tier lead appraisers.

Choose your lead appraiser

Ten sponsored lead appraisers plus affiliates. Request one, change anytime. Never locked in, never calendar-constrained.

Readiness-first method

Four to five readiness reviews before anything official. Our clients pass because they walk in prepared.

One effort, two credentials

Same-scope ISO certification in parallel, on one integrated process library.

Package pricing, no hourly meter

Lead-appraiser consulting is not billed by the hour to appraisal clients.

Remote or on-site, any industry

Technology, healthcare, manufacturing, finance, defense, professional services, staffing.

Questions we answer daily

Frequently asked

Anything not covered here, a lead appraiser will answer directly in a 30-minute scoping call.

Is CMMI a certification? +

Formally, no. Organizations are appraised and receive a maturity level rating from the CMMI Institute, valid on a three-year cycle. If you searched “CMMI certification,” you're in the right place: the benchmark appraisal is the official path to the rating buyers ask for.

How long does a CMMI appraisal take? +

Typically three to six months end to end, depending on readiness. The official benchmark appraisal itself runs five to six days for a small single-site organization.

How much does a CMMI appraisal cost? +

It depends on organizational size, sites, domains, and target maturity level. We price as a package, including readiness reviews, with no hourly consulting charges, and quote after a short scoping conversation.

Can appraisals and training be done remotely? +

Yes. CMMI benchmark appraisals and training courses can both be delivered fully remotely, or on-site if you prefer.

We hold ISO 9001. Why would we add CMMI? +

ISO 9001 certifies that a quality management system exists, and a single auditor checks documentation. CMMI appraises how mature your delivery actually is: a qualified team examines real engagements selected at random by the CMMI Institute. Buyers that require CMMI are asking for that deeper evidence. If you hold ISO already, much of your preparation carries over.

We were appraised three years ago. What's different at renewal? +

Your artifacts must be recent, roughly the last six months, not the prior cycle's. And the CMMI Associate credential was retired in June 2026 with no bridge path, so prior appraisal team members must complete the current Practitioner training to serve again. Start the training clock early; renewals otherwise stay light.

Who conducts the appraisal? +

A CMMI Institute-certified lead appraiser from LAYERMARK's sponsored pool, plus a minimum of three qualified appraisal team members: yours, ours, or a mix.

Which maturity level should we target? +

Most buyer requirements specify Level 2 or Level 3. Level 3, habitual and organization-wide performance, is the most commonly required benchmark for federal work. We'll advise during scoping.

Development or Services: which one is us? +

Development means you control the project management and requirements of what you build. If your customer directs most of the work and you deliver against it, you're Services. Many organizations combine both, and a second domain adds only one to two days to the appraisal, not a second appraisal.

We're a services business: what counts as a “project”? +

For services firms, the projects declared to the CMMI Institute are typically your core service lines; your individual client engagements then serve as the evidence that the process is applied consistently. It's a natural fit for consulting, staffing, and managed-services models.

Will the appraisal disrupt our whole company? +

No. Role mapping means appraisers interview the right person for each practice area in targeted sessions, not all-hands meetings, and readiness reviews are short, scheduled spot-checks.

We're too small for CMMI, aren't we? +

Small, single-site businesses are a core client profile. A three-member appraisal team is workable, the benchmark runs five to six days, and preparation can spread across four to eight weeks of short working sessions instead of consuming full consecutive weeks.

Get in touch

Ready to scope your appraisal?

A 30-minute conversation with a lead appraiser is enough to map your scope, target level, timeline, and whether the same-scope ISO package fits.

EmailEmail address
Office1050 Connecticut Ave NW, Suite 500
Washington, DC 20036
Arrange a Callback
We reply within one business day. Your details are used only to arrange the conversation.