Dear Experts,

Kindly clarify my doubts.

Am working in CMMI LEVEL 3 company.

My role is : Software Quality analyst

apart from SQA Audit management asked me to plan for Internal Audit.
While planning, i referred previous files for internal audits, in that they have audit the following process/departments

1. Project Team
3. SQA
4. Training
5. IT and Vendor

My doubt is for IT and Vendor what is the applicable CMMI Process?

As of my knowledge i dont find any specific PA for IT Team. whereas for Vendor Management we can refer SAM Process area.

In our company we dont have any defined procedure for System admin (IT) Team.

Kindly advice me how to audit that department.

I have to give suggestion to the management on this as one of the SEPG Member.

Kindly let me know whether My suggestion is right

1. Define a procedure for IT department activities
2. Determine the interface activities with other process areas / department and include that too in the procedure