A maturity model of an enterprise's quality engineering infrastructure, taking into account a risk-based approach and the requirements of international standards

Abstract

The article is devoted to the development and validation of a maturity model for the engineering quality infrastructure of an enterprise that incorporates a risk-based approach and the requirements of international standards in the context of digital transformation and increasing product complexity. The aim of the study is to create a comprehensive five-level maturity model that integrates process-based and risk-based approaches with the provisions of ISO 9001:2015, ISO 31000:2018, and ISO/IEC 25010, designed for self-assessment and strategic development of quality systems. The study applied methods of systems analysis, synthesis, and comparative review of the CMMI-DEV and TMMi models and relevant standards, as well as unstructured questionnaires and in-depth interviews with 64 experts from 45 industrial and IT enterprises to identify key process areas, artifacts, and metrics of the engineering quality infrastructure. Based on these data, a five-level structure (Fragmentary, Formalized, Integrated, Data-driven, Optimizing) and a 112-item questionnaire were developed and tested on a sample of 128 enterprises. Statistical processing (cluster analysis, correlation analysis, ANOVA in IBM SPSS Statistics) made it possible to distribute enterprises across maturity levels and reveal a strong negative correlation between maturity level and defect density and mean time to incident resolution $(r=-0.96$ and $r=-0.92$). It is shown that the key barrier is the transition to the integrated level, which ensures multiple improvements in quality KPIs, while further movement toward the data-driven and optimizing levels is associated with the formation of a data-driven culture and deep integration of quantitative risk management. It is additionally demonstrated that the use of ISO/IEC 25010 as the basis for the metric system significantly reduces the time required to transition between maturity levels. The practical significance of the model as a tool for self-assessment, benchmarking, and development planning, its theoretical contribution to the concept of the life cycle of quality systems, and directions for further research, including industrys - specific adaptation and the creation of software tools for automated assessment, are discussed.