Assessing IT Governance Processes Using a COBIT5 Model

Abstract

COBIT5 process assessments are conducted to support process improvement and thus enable business-IT alignment. For providing an assessment, assessors engage in planning, data collection, and data validation activities. Typically, these activities are assisted by spreadsheet-like artifacts, that are used for recording the COBIT5 Process Assessment Model (PAM) entities, as well as the corresponding assessment evidence. However, spreadsheet-like artifacts are not an optimal solution for assisting assessment activities, since they do not form part of an integrated and up-to-date enterprise architecture (EA) repository. Contradicting the COBIT5 recommendation of using EA – namely for improving alignment, increase agility, and generate potential cost savings – COBIT5 assessors often do not practice what they preach, i.e. that they do not use EA in their own business activities. Some EA tool vendors provide solutions for addressing this gap, but they are proprietary and lack scientific validation, thus presenting interoperability and adoption barriers. In this paper, we propose a set of COBIT5 viewpoints, based on standard ArchiMate extensions to enable interoperability and ease adoption. We designed and tested the solution using a Design Science Research Methodology process model. We demonstrated the EA proposal in two public sector organizations, and evaluated its efficacy, consistency, and structural quality.