Key Components of a Robust COBIT 2019 Assessment Spreadsheet

To illustrate, consider a template sheet for process . The sheet would list dozens of activities from the COBIT 2019 framework, each mapped to a capability level. An assessor, likely an IT manager or process owner, would go through each activity and assign a rating of N, P, L, or F. The tool’s formulas would then process these inputs to automatically determine a capability level for APO01, answering the question: "Is our management framework process at a capability Level 1 (Initial), Level 2 (Managed), or higher?" This eliminates subjective guesswork and provides a defensible, data-driven maturity score.

For example, your organization might have Level 3 capability for APO13 (Managed Security) but Level 2 capability for APO12 (Managed Risk). The focus area maturity would be determined by the lowest capability level among the processes in that focus area.

Step-by-Step Guide to Conducting an Assessment Using the XLS Tool

This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.

However, performing a maturity assessment across 40 governance and management objectives and thousands of activities is a data-intensive task. This is where the spreadsheet comes in.

Don't try to assess all 40 objectives at once. Use the COBIT 2019 Design Factors to identify the most "high-priority" objectives for your business.

The COBIT 2019 Maturity Assessment Tool XLS is a Microsoft Excel-based tool that helps organizations assess their current IT governance and management maturity level. The tool provides a structured approach to evaluating an organization's IT governance and management practices against the COBIT 2019 framework. It enables organizations to:

Domain Maturity Level = Minimum capability level across all processes in that focus area

: Identifying the difference between the "Current Capability Level" and the "Target Capability Level" suggested by the Design Toolkit. Prioritization Roadmap

4 Management Objectives.

As one ISACA article notes: "The value of this tool is that it provides a convenient means of quickly assessing and assigning relevant roles to practices across the 40 COBIT objectives." For maturity assessment, this allows you to identify exactly which stakeholders need to be interviewed or surveyed for each process.