We can do that with GQM as well, but the way we do it is different. In other words, GQM is both a philosophy and a framework for software metrics. The GQM+Strategies approach was developed by Victor Basili and a group of researchers from the Fraunhofer Society. Prashanth H. Southekal brings over 20 years of digital technologies experience from companies such as SAP, Accenture, Deloitte, P&G, and General Electric. He has delivered numerous cross-functional projects across various industry sectors and helped business enterprises monetize their data. He has presented scholarly works in high quality publications and conferences, as well as published numerous books and articles on data and information management.
- You should compare your results with your expectations and criteria and draw conclusions and recommendations for your quality goal.
- Because of their completeness, GQM’s questions help you stay focused on what matters.
- In today’s era of digital transformation, data and information are more important than ever.
- Product Management Resources Be the best product manager you can be.
- “You can very quickly build a picture of what’s actually connected to your network, then look at your CMDB and realise it’s about 10% complete,” says James.
With every question added in the scenario, a set of data is used to answer the question in a quantitative manner. Prashanth has given a very practical guide to implement data culture in an organization. The book Data for Business Performance talks about building the organization of the future and the role of data.
Goals (conceptual level): Define the purpose, vision, and objectives of an initiative.
To do this on an ongoing basis, James suggests listening passively for all ARP requests on your network, and looking for IP addresses. “You can very quickly build a picture of what’s actually connected https://www.globalcloudteam.com/ to your network, then look at your CMDB and realise it’s about 10% complete,” says James. James notes that many of the challenges around asset management are not technical, but cultural or political.

Below is the GQM for “Improve Company website”, shown graphically. The shaded areas represent progress over time towards questions. GQM’s multiplicity of questions for any Goal permit a more fine-grained understanding of progress towards it. Define an objective and choose a few key results that if satisfied, indicate you got there. Look at the examples above and notice how their Key Results are basically arbitrary.
GQM stepwise
Finally, you identify and collect metrics that provide answers to your questions and evidence for your goal. When undertaking an Agile transformation, there is a need to collect data to demonstrate progress and show improvement, but where does one even start? Common Agile metrics approaches do well at measuring team velocity and throughput but can sometimes overlook the requirements of executive sponsors, product management, and other key stakeholders. As James noted, though, it can be a lot of effort to build out such a programme – many goals, more questions, and even more metrics. That’s where Continuous Controls Monitoring becomes invaluable. It automates your cybersecurity measurement programme, using automation, and advanced data science to create accurate and trustworthy metrics.

Presumably some research was done to justify them, but it isn’t obvious. By contrast, GQM questions are intended to be a fairly complete inquiry into the Goal. Because of their completeness, GQM’s questions help you stay focused on what matters. The “meaningful, audacious, and inspiring” criteria of an OKR Objective can also be applied to a GQM Goal.
Using Goal-Question-Metric (GQM) Approach to Assess Security in Cloud Storage
For now, I encourage you to take a look at the links above and familiarise yourself with the GQM framework. Product Management Resources Be the best product manager you can be. Sorry, a shareable link is not currently available for this article.
The metrics obtained will assist organizations to meet their requirements for a cloud storage security framework. The GQM approach is a framework that helps you plan, monitor, and improve your software quality by linking your quality goals to specific questions and metrics. The idea is to start with a high-level goal that expresses what you want to achieve or improve in terms of quality, such as usability, reliability, or performance. Then, you formulate a set of questions that help you understand and evaluate how well you are meeting your goal.
Applying the ‘Goal Question Metric’ method to cybersecurity measurement
It combines leading data management theory with step-by-step implementation and real-life examples, and is a must-read for those wanting to derive more value from their corporate data. The chief contribution of GQM over McCall’s model is the explicit introduction of goals coordinates based upon viewpoint, purpose, issue and object. The explicitness of the goal coordinates creates a wider perspective for goals. In McCall’s Software Quality Model, I discussed a paper tying quality factors to quality criteria.
You can start with a small number to get a yard stick measurement, then add and refine over time. It’s a very pragmatic approach that allows you to start now and start simple, but then continually improve. “Defining very discreetly the object of measurement can help to refine and constrain our metrics.” Examples of objects might be product, process, service, resource, or even a person. In the interpretation phase, you evaluate and report your findings based on your metrics and questions. You should compare your results with your expectations and criteria and draw conclusions and recommendations for your quality goal. You should also communicate your results to your stakeholders and discuss the implications and actions for your software project.
Questions (operational level): How will this initiative achieve its goals?
GQM, the initialism for goal, question, metric, is an established goal-oriented approach to software metrics to improve and measure software quality. Data can tell us important stories when we process it by proven and structured approaches. Dr. Southekal’s book presents such an approach based on the GQM what is goal question metric method for transforming business data into an enterprise asset. This book is a valuable resource for organizations willing to become real data-driven organizations. The main reason we use goal metrics at all is to obtain information about why an initiative was important and how it achieved its goals.

I see GQM’s notion of goal as a superset because a goal might include resource, time, defects, etc. Here, goals create quality factors, an extension of the original concept to explicitly include a wider varienty of objects. Questions connect the object of measurement to a quality issue.
GQM Approach: Agile Metrics
I like the complement between architectural quality attributes, McCall’s quality model, where criteria is identified to measure attributes, and the GQM idea of tying viewpoint to metric. Goals are developed from policy and strategy, process and product descriptions and viewpoint to develop the measurement. The contrast between OKRs and GQM is even more pronounced when applied to the “Improve Company Website” example. By considering all feasible questions rather than selecting a few key results, we generate a roadmap rather than a shorter-term approach.

Leave a Reply