Professional Documents
Culture Documents
Isaca'S Cobit Assessment Programme (Based On COBIT 5)
Isaca'S Cobit Assessment Programme (Based On COBIT 5)
Presented by:
Session Objectives
Process Assessment
Model
Assessment Process
This figure is reproduced from ISO 15504-2:2003 with the permission of ISO at www.iso.org. Copyright remains with ISO.
This figure is reproduced from ISO 15504-2:2003 with the permission of ISO at www.iso.org. Copyright remains with ISO.
Predictable Level
The process is enacted consistently
Level 44 Predictable
Predictable process
process
PA
PA4.1
4.1 Process
Process measurement
measurement attribute
attribute
within defined limits.
PA
PA4.2
4.2 Process
Process control
controlattribute
attribute
Established
A defined process is used based on a Level
Level 33 Established
Established process
process
standard process. PA
PA3.1
3.1 Process
Process definition
definitionattribute
attribute
PA 3.2
PA 3.2 Process
Process deploymentattribute
deployment attribute
Level Managed
Level 22 Managed
Managed process
process The process is managed and work
PA
PA2.1
2.1 Performance
Performance management
managementattribute
attribute
products are established, controlled
PA
PA2.2
2.2 Work
Work product
productmanagement
managementattribute
attribute and maintained.
Level
Level 11 Performed
Performed process
process Performed
PA
PA1.1
1.1 Process
Process performance
performance attribute
attribute The process is implemented and
achieves its process purpose.
Incomplete
Level
Level 00 Incomplete
Incomplete process
process The process is not implemented or fails to
achieve its purpose.
Copyright ISACA 2014. All rights reserved Slide 11
Process Attributes (example)
PA 4.2 Control L F
Level 4 - Predictable /
PA 4.1 Measurement F
PA 3.2 Deployment L F F
Level 3 - Established /
PA 3.1 Definition F
L F F F F
Level 1 - Performed PA 1.1 Process performance /
F
Level 0 - Incomplete L/F = Largely or Fully F= Fully
This figure is reproduced from ISO 15504-2:2003 with the permission of ISO at www.iso.org. Copyright remains with ISO.
Copyright ISACA 2014. All rights reserved Slide 15
COBIT Assessment Process
Overview
This figure is reproduced from ISO 15504-2:2003 with the permission of ISO at www.iso.org. Copyright remains with ISO.
Attributes
ISO
COBIT 5
This figure is reproduced from ISO 15504-2:2003 with the permission of ISO at www.iso.org. Copyright remains with ISO. Slide 17
Process Attribute Rating
This figure is reproduced from ISO 15504-2:2003 with the permission of ISO at www.iso.org. Copyright remains with ISO.
1 Initiation
2 Planning the assessment
3 Briefing
4 Data collection
5 Data validation
6 Process attributes rating
7 Reporting the results
Actions are taken to ensure that the data are accurate and
sufficiently cover the assessment scope, including:
Seeking information from firsthand, independent sources
Using past assessment results
Holding feedback sessions to validate the information collected
Some data validation may occur as the data is being
collected.
Assessed
Assessed
Assessed
This figure is reproduced from ISO 15504-4 2006 with the permission of ISO at www.iso.org. Copyright remains with ISO.
This figure is reproduced from ISO 15504-4 2006 with the permission of ISO at www.iso.org. Copyright remains with ISO.
Assessor competencies:
Knowledge, skills and experience:
With the process reference model; process assessment model,
methods and tools; and rating processes
With the processes/domains being assessed
Personal attributes that contribute to effective performance
Contact Information:
research@isaca.org