Back to Assessments & Documents
Software Engineering and DevOps Active

DevOps Engineering Maturity Assessment

A 43-question diagnostic across 8 domains that evaluates how software is built, tested and released: engineering strategy and developer experience, source control and review, continuous integration, testing, deployment,...

Overview

A 43-question diagnostic across 8 domains that evaluates how software is built, tested and released: engineering strategy and developer experience, source control and review, continuous integration, testing, deployment, environments and platform, AI in engineering, and delivery performance. Written for the engineering leader who needs to answer: can we deliver changes quickly, safely and repeatably?

Detailed Description

DevOps engineering is the daily practice behind fast, safe delivery: small changes integrated often, tested automatically, deployed through pipelines and measured end to end.

This assessment follows the order in which that practice is built: an engineering strategy, owned standards and a platform mandate; repositories, short-lived branches, review, architecture runway and inner source; integration, build speed, artifacts, pipelines as code and current dependencies; a test strategy with contract, data, reliability, escaped defect and performance testing; delivery pipelines with release separation, rollback, database changes and progressive delivery; self-service, ephemeral and consistent environments on a platform run as a product; governed use of AI assistants and agents; and delivery measures, benchmarks, improvement and skills.

It is a deep dive in the DevOps and Reliability family. Questions marked (Bridge) check the link to the model that owns a neighboring practice without repeating it: Agile Delivery Foundations, DevSecOps, Capacity Performance Management, SRE, DevOps and ITSM Convergence, Change Management, Vibe Coding Security and Governance, and Learning, Skills and Capability. Each question is scored on whether the practice is documented, implemented and effective.

Assessment Details

Audience

Head of Engineering, CTO, VP Engineering. Secondary: platform and DevOps leads, tech leads, QA leads and engineering managers.

Purpose

Shows where build, test and release practice slows delivery or lets defects through, and which engineering investments will most improve speed and stability.

Effort

Initial assessment: 4 to 6 hours of facilitated sessions with engineering, platform and quality leads. Evidence gathering: repository settings, pipeline definitions and run history, test reports, deployment records and survey results.

Cadence

Annually, and after a major platform, toolchain or team structure change.

Framework Alignment

ISO/IEC/IEEE 32675:2022 ISO/IEC/IEEE 29119-1:2022 ISO/IEC 25010:2023 ISO/IEC/IEEE 12207:2026 DORA Capabilities CNCF Platform Engineering Maturity Model Team Topologies 2nd Edition SAFe 6.0 SLSA v1.2 Scrum Guide 2020 NIST AI 600-1 COBIT 2019

KPIs

  • Change Fail Rate - Share of production deployments causing a failure that needs remediation. Target: 15% or lower.
  • Lead Time - Median time from commit to production. Target: 24 hours or less.
  • Escaped Defects - Share of defects first found in production. Target: 10% or lower.
  • Self-Service Share - Share of environment and resource requests completed through self-service. Target: 80% or higher.
  • Mainline Health - Share of working hours in which the mainline build is passing. Target: 95% or higher.

Dependencies

Agile Delivery Foundations (v1.9.6): owns the Definition of Done engineering minimum (bridge question 1.3). DevSecOps (v6.9.6): composition scanning and agent permissions (bridge questions 3.5 and 7.5). Capacity Performance Management (v6.9.6): performance targets and capacity use of test results (bridge question 4.6). SRE, DevOps and ITSM Convergence (v3.9.6): progressive delivery and platform rules (bridge questions 5.5 and 6.6). Change Management (v8.9.6): standard change models (bridge question 5.6). Vibe Coding Security and Governance (v3.9.6): AI coding policy (bridge question 7.1); Learning, Skills and Capability (v5.9.6): skills (bridge question 8.5).

Assessment Outline

(8 domains · 43 questions)
  1. 1

    1 Engineering Strategy and Developer Experience

    Engineering strategy, standards ownership, the Definition of Done engineering minimum, the platform team mandate and developer experience

    • 1.1 Engineering Strategy 1 questions
    • 1.2 Engineering Standards Ownership 1 questions
    • 1.3 Definition of Done Engineering Minimum (Bridge) 1 questions
    • 1.4 Platform Team Mandate 1 questions
    • 1.5 Developer Experience 1 questions
  2. 2

    2 Source Control, Design and Code Review

    Repository standards, short-lived branches, code review, architecture runway and inner source

    • 2.1 Repository Standards 1 questions
    • 2.2 Short-Lived Branches 1 questions
    • 2.3 Code Review Practice 1 questions
    • 2.4 Architecture Runway 1 questions
    • 2.5 Inner Source 1 questions
  3. 3

    3 Continuous Integration and Build

    Continuous integration, build speed and reliability, artifact management, pipelines as code and dependency currency

    • 3.1 Continuous Integration 1 questions
    • 3.2 Build Speed and Reliability 1 questions
    • 3.3 Artifact Management 1 questions
    • 3.4 Pipelines as Code 1 questions
    • 3.5 Dependency Currency and Scanning (Bridge) 1 questions
  4. 4

    4 Test Strategy and Automation

    Test strategy and automation, contract testing, test data, flaky test control, escaped defects and pipeline performance testing

    • 4.1 Test Strategy and Automation 1 questions
    • 4.2 Contract and Integration Testing 1 questions
    • 4.3 Test Data Management 1 questions
    • 4.4 Flaky Test Control 1 questions
    • 4.5 Escaped Defect Analysis 1 questions
    • 4.6 Pipeline Performance Testing (Bridge) 1 questions
  5. 5

    5 Deployment Pipeline and Release Engineering

    Continuous delivery, deployment and release separation, automated rollback, database changes, progressive delivery and pipeline changes as standard changes

    • 5.1 Continuous Delivery Pipeline 1 questions
    • 5.2 Deployment and Release Separation 1 questions
    • 5.3 Automated Rollback 1 questions
    • 5.4 Database Change Delivery 1 questions
    • 5.5 Progressive Delivery Implementation (Bridge) 1 questions
    • 5.6 Pipeline Changes as Standard Changes (Bridge) 1 questions
  6. 6

    6 Environments and Platform Engineering

    Self-service platform, ephemeral environments, environment parity, golden path adoption, platform as a product and infrastructure as code

    • 6.1 Governed Self-Service Platform 1 questions
    • 6.2 Ephemeral Environments 1 questions
    • 6.3 Environment Parity 1 questions
    • 6.4 Golden Path Adoption 1 questions
    • 6.5 Platform as a Product 1 questions
    • 6.6 Infrastructure as Code Delivery (Bridge) 1 questions
  7. 7

    7 AI in Software Engineering

    AI coding assistant governance, AI agent contributions, AI-generated tests and measuring the effect of AI on delivery

    • 7.1 AI Coding Assistant Governance (Bridge) 1 questions
    • 7.2 AI Agent Contributions 1 questions
    • 7.3 AI-Generated Tests 1 questions
    • 7.4 Measuring the Effect of AI on Delivery 1 questions
    • 7.5 AI Agent Pipeline Permissions (Bridge) 1 questions
  8. 8

    8 Delivery Performance and Improvement

    Software delivery performance measures, benchmarking, the engineering improvement backlog and maturity review

    • 8.1 Software Delivery Performance Measures 1 questions
    • 8.2 Engineering Benchmarking 1 questions
    • 8.3 Engineering Improvement Backlog 1 questions
    • 8.4 Engineering Maturity Review 1 questions
    • 8.5 Engineering Skills Development (Bridge) 1 questions

At a Glance

Category Software Engineering and DevOps
Type Free
Roles 5
Domains 8
Questions 43

Still have questions? Get in touch

ITSGovernance