What if you could see it coming? Using CMMI to Predict and Prevent Quality Failures in Medical Devices

July, 2025

Abstract

In the medical device industry, quality failures carry serious consequences—product recalls, regulatory penalties, and risks to patient safety. But what if organizations could detect the warning signs early?

This talk explores how Capability Maturity Model Integration (CMMI), a framework familiar to the SEA community, can be used not just for process improvement, but also as a preventive system for identifying and addressing quality risks before they lead to non-compliance.

By aligning CMMI practices with FDA and ISO requirements, medical device companies can build more resilient quality management systems—reducing variability, improving traceability, and surfacing issues earlier in the lifecycle. The result: safer products, stronger compliance, and fewer surprises.

Whether you’re working in medtech or applying these principles elsewhere, this session offers a compelling look at how capability enables foresight—and how foresight protects lives.

About the Presenter 

As President of Performance and Methods (P&M) Consulting, LLC, Lynn Penn consults with organizations, focusing on enhancement, institutionalization, and optimization of business operations.

As a Director at Lockheed Martin Corporation, Information Systems & Global Solutions (IS&GS), Lynn oversaw policies and process command media, process compliance via audits, and process improvement activities. She developed and managed compliance to multiple process methodologies including CMMI DEV, CMMI SVC, RMM, Lean Six Sigma, Agile, ISO 9001/AS9100, ISO 20000 and ISO 27001. 

Capability Maturity Model (CMM) involvement began with SW CMM and progressed to the current CMMI version 3.0. She has participated in multiple formal SPAs, CBA IPIs, Assessments using the Acquisition Model, Risk Evaluations and supported multiple Software Capability Evaluations per versions 1, 2, and 3. She has supported multiple assessments using People CMM, RMM, previous versions of CMMI DEV, CMMI SVC, DMM and current CMMI V3.0. She was a member of the CMMI V2.0 Core Team and continues to lead CMMI reviews and pilots. She is currently a Lead Appraiser with the Medical Device Discovery Appraisal Program.

Lynn has a BS in Mathematics from Villanova University, she has done graduate studies in Computer Science and Management Information Systems.  She is a certified ISO 9000 internal auditor at Lockheed Martin. She is also a Certified Greenbelt and Blackbelt in Six Sigma and Lean Techniques.

 She has published the book CMMI and Six Sigma: Partners in Process Improvement.

Past Presentations

Accelerating DSE: Driving Adoption and Transition at NAVAIR/NAWCWD

The August 2026 Tech Talk was presented by Jennifer Ambrecht and Wendy ChangAbstractWhile the engineering community is increasingly familiar with what Digital Systems Engineering (DSE) is, the true challenge often lies in execution, adoption, and cultural shift. This...

Why Battle-Tested Software Engineering Still Matters in the Age of AI

The June 2026 Tech Talk was presented by Mario BenitezAbstractWhile use of AI in developing and maintaining software is increasing globally, this use is relatively new, and proven practices for using AI effectively are still emerging. There are different ways to use...

The SEA Data Warehouse

The April 2026 Tech Talk announced the availability of the SEA Data WarehouseAbstractThe Data Warehouse Working Group was initiated in September 2022, with the purpose of advancing the state of the practice and the art of software engineering by providing a source of...

Agentic Coding: The Earthquake That Topples the Software Factory

The March 2026 Tech Talk was presented by Larry MaccheroneAbstractThe tectonic plates beneath software development are shifting. They are moving too fast to predict what the landscape will look like when the earthquake hits. Still, we are sure that the coming...

Why Program Increment Estimates Miss: Hidden Variables for Planning

The February 2026 Tech Talk was presented by Dr. Bill Nichols and Dr. Tapajit Dey AbstractWhat is a credible range of dates for when the work in a product increment might finish? Software development work includes many sources of uncertainty, including the size of the...

Lessons from Using LLMs to Check Software Security

The January 2026 Tech Talk was presented by Dr. Mark ShermanAbstractLarge language models (LLMs) like ChatGPT are transforming the landscape of software development and evaluation, although claims of AI replacing programmers are often overstated. This session delves...

Process Isn’t a Four-Letter Word

The November 2025 Tech Talk was presented by David TumaAbstractAgile methods emerged as a direct rebellion against the heavyweight processes of the 1990s. And the Team Software Process (TSP) did too, by brilliantly reimagining process in a lightweight, agile way that...

Agile Strategy: Onward and Upward

The September 2025 Tech Talk was presented by Linda Parker GatesAbstractThis talk describes the application of Agile principles to strategic planning. It explores how applying balanced Agile values — such as prioritizing individuals and interactions, delivering...

Engineering of Complex Systems at NAVAIR: We Must Do More With Less!

The June 2025 tech talk was presented by Jeff SchwalbAbstractAt NAVAIR, we are experiencing a dwindling engineering workforce at the same time that we are trying to meet increasing demands for support to our warfighters. We have a combination of efforts uplifting the...

Victims vs. Victors: Navigating Career Uncertainty with Resilience

The May 2025 tech talk was presented by David VanEppsAbstractSetbacks are inevitable. Travel freezes, budget cuts, hiring slowdowns, layoffs — challenges like these can shake our sense of stability. While we can’t always control what happens, we can control how we...

Applying STPA to Improve Safety and Reliability of AI-Enabled Systems

The April 2025 tech talk was presented by Timothy DavisonAbstractThis talk explores the application of System-Theoretic Process Analysis (STPA) to enhance the safety and reliability of AI-enabled systems. STPA provides a structured and scalable approach to identifying...

Drive Improved Holistic Business Results with Lean/Agile Practices

The February 2025 tech talk was presented by Fred KoosAbstractAgile practices have roots in Lean Thinking and the Toyota Production System. These are holistic approaches to improve business results. As the word “Agile” was coined in 2001, the applications were...

Clarify Your Acceptance Criteria with GIVEN-WHEN-THEN

The January 2025 tech talk was presented by Matt McConnellAbstractGherkin, also known as GIVEN-WHEN-THEN, is an effective method for writing Acceptance Criteria at many levels in software development. It treats the software as a black box, focusing on the inputs,...

A Powerfully Simple Planning Framework

The December 2024 tech talk was presented by Dr. Brad HodginsAbstractUsing this very effective five-step approach, teams and individuals can create a detailed plan that will enable them to track their progress as they execute that plan. Organizations run on schedules...

Share This