DevOps Mindset

Module 03 of 12

CALMS: A Lens for Diagnosing Any Team

Five letters — Culture, Automation, Lean, Measurement, Sharing — that let you look at any organization and say precisely what's missing.

9 min read

By now you understand the wall (Module 1) and why the whole flow matters more than any one team's performance (Module 2). CALMS is the tool that turns those ideas into something you can actually point at. It was coined by Jez Humble, co-author of "The DevOps Handbook," as a five-part checklist for assessing how ready — or how far along — an organization is in adopting DevOps. Think of it less as a to-do list and more as a diagnostic: when a team's delivery process feels broken, CALMS gives you five specific angles to ask "which of these is actually missing?" instead of reaching for a vague fix like "we need better communication."

CCultureAAutomationLLeanMMeasurementSSharingCALMSdiagnose, don't checklist
The five CALMS dimensions — none of them works in isolation.

Culture

Culture comes first in the acronym on purpose. It means shared responsibility for outcomes — developers who care whether their code runs well at 3 AM, operations staff who understand what the code is trying to do, and a psychological environment where admitting a mistake doesn't end a career (we'll dig into this specifically in the Blameless Postmortems module). No amount of tooling fixes a culture where Ops considers a production incident "Dev's fault" and Dev considers an outage "Ops' problem to page for." This is why culture is listed first: automation applied on top of a blaming, siloed culture just makes the same dysfunction happen faster.

Automation

Automation is the most visible letter — it's what most people picture when they hear "DevOps tools": CI pipelines, automated testing, infrastructure provisioning, automated deployments. The purpose of automation in this framework isn't speed for its own sake. It's removing manual, repetitive, error-prone steps so that humans spend their attention on judgment calls instead of typing the same deploy commands for the fiftieth time, and so the same process runs identically every time instead of depending on which person happens to be doing it that day.

Automation without the Culture letter is a classic failure mode: a team automates its build pipeline but Dev and Ops still don't talk to each other, so the automated pipeline just encodes the same siloed handoff, only faster and with a YAML file instead of a person in the middle.

Lean

Lean, borrowed from Lean Manufacturing (think Toyota Production System), is about eliminating waste in the value stream: minimizing how much half-finished work is in flight at once, making work visible instead of hidden in someone's head or inbox, and reducing the number of handoffs between people and teams. This is systems thinking from Module 2, operationalized — every unnecessary handoff or every pile of code waiting for review is "waste" in the Lean sense, even if no individual step is being done badly.

Measurement

You cannot improve what you don't measure, but the letter here is stricter than that: it means measuring the things that actually matter for delivery and stability — not vanity metrics like lines of code written or number of tickets closed. We'll spend an entire module on this later (DORA Metrics), because "what should we even measure" turns out to be a deep and well-researched question with a specific, evidence-backed answer.

Sharing

Sharing means knowledge — about the system, about incidents, about tools and hard-won lessons — flows freely across team boundaries instead of pooling inside silos. A team that solves a nasty production problem and never tells anyone else has "succeeded" locally while leaving every other team to rediscover the same problem the hard way. Sharing is also what makes on-call sustainable: if only one person understands a system, that person can never take a vacation without the system's reliability suffering.

CALMS isn't a checklist to complete once. It's a lens: whenever a delivery process feels stuck, ask which of the five letters is actually the weak point, instead of assuming the answer is always "more automation."

Using CALMS as a diagnostic, not a scorecard

The trap most teams fall into is treating CALMS as five boxes to tick — "we have CI, so Automation is done." That misses the point. A team can have excellent automation and still fail at DevOps because Culture is broken (Dev and Ops still blame each other when the automated pipeline itself breaks) or because Sharing is broken (only one engineer understands the pipeline, and they just quit). The useful move is to walk through all five letters whenever something is going wrong and ask, honestly, which one is the actual constraint — the same systems-thinking question from Module 2, now with five specific lenses to apply it through.

Think it through

Real situations, no single "correct" checkbox — reason about it first, then compare your thinking to ours.

Scenario 1

A team has invested heavily in automation: fully automated CI/CD, one-click deploys, automated rollback. Despite this, releases are still stressful — the on-call engineer who deploys is often not the person who wrote the change, doesn't fully understand it, and is reluctant to page the original author for help because "they're not on-call, it's not their problem."

Using CALMS, which letter is this team actually missing, despite strong automation?

Scenario 2

A company tracks "number of deploys per week" as its primary DevOps success metric and rewards teams that increase it. One team starts splitting single logical changes into many tiny deploys specifically to inflate the count, without any real change in how fast value reaches users.

Which CALMS letter is being gamed here, and what does it suggest about the metric itself?

Check your understanding

Answer all questions, then submit to see explanations.

1. Who coined the CALMS framework, and in what context?

2. Why is "Culture" listed first in CALMS rather than "Automation"?

3. The "Lean" letter in CALMS is most directly related to which earlier concept in this course?

4. What is the main risk of treating CALMS as a checklist instead of a diagnostic?