The Global Software Capability team was given the challenge of benchmarking its internal software groups and decided to use a CMMI based framework in conjunction with ISO standards, such as ISO12207, in order to achieve its goal. Following this approach, they were able to demonstrate success and deliver value back into the business through identifying internal strengths and weaknesses of the audit subjects. Since then, it has become apparent that the same approach could be used in order to assess some supply chain activities and identify the key risks they could be exposed to. The presentation will discuss the approach that was taken and some of the challenges faced during the journey.