To ensure your XLS tool remains accurate, reliable, and functional across multiple assessment cycles, observe these spreadsheet design best practices:
While complex governance, risk, and compliance (GRC) software exists, an Excel-based spreadsheet remains the preferred entry point for many auditors, CIOs, and consultants.
| Aspect | COBIT 5 | COBIT 2019 | |--------|---------|-------------| | | 37 processes | 40 processes (added APO14 Managed Data, BAI11 Managed Projects, MEA04 Managed Assurance) | | Terminology | Uses verb "Manage" (e.g., "Manage Risk") | Uses adjective "Managed" (e.g., "Managed Risk") | | Process Assessment Model (PAM) | Formal PAM provided with indicators for nine attributes and six process capability levels | No official PAM for COBIT 2019; CMMI-based capability scheme recommended | | Governance Principles | 5 principles | 6 principles | | Assessment Basis | ISO/IEC 15504 (SPICE) | CMMI Development V2.0 | Cobit 2019 Maturity Assessment Tool Xls
Before assessing processes, use the tool to define your enterprise context. Input data regarding your IT strategy, threat landscape, and risk profile. This establishes the target maturity for each process (e.g., a high-risk company needs a higher maturity level in APO12 - Managed Risk and APO13 - Managed Security ). Phase 2: As-Is Assessment (Capability Scoring)
The process is data-driven, with established performance metrics and quantitative predictability. To ensure your XLS tool remains accurate, reliable,
Use the assessment findings to build an improvement roadmap. The XLS tool serves as your baseline metric. Plan periodic reassessments (e.g., bi-annually or annually) by duplicating the assessment tab to track maturity trends over time. Benefits of Using Excel for COBIT 2019 Assessments
Measures the performance of a collection of processes or the entire enterprise governance system. The COBIT 2019 Rating Scale The tool evaluates practices against six distinct levels: This establishes the target maturity for each process (e
Do not attempt to assess all 40 governance and management objectives simultaneously. Use the Design Factors tab in your XLS tool to scope down the assessment to the most critical processes driving your business strategy. Step 2: Gather Evidence and Conduct Interviews
Measures how well a specific process is performing and achieving its purpose. It is scored on a scale from 0 to 5.
Integrated spreadsheets to define clear roles for who is Responsible, Accountable, Consulted, and Informed for each process. Maturity Levels (0-5)