Maturity Measurement Tool AI - v0.1

Maturity Measurement
Do you agree?
Tool
Process
Name
COBIT
Process
ID
Maturity Level 1 Maturity Level Calculation
To some degree
Not atAall VALU
Completely
little E
Nr Statement Weight 0.00 0.33 0.66 1.00
There is an awareness of the need to define requirements and identify
1 technology solutions. 0 0.00 Level Compliance Contribution Value
Individual groups meet to discuss needs informally, and requirements are
2 sometimes documented. 0 0.00 1 #DIV/0! 0.33 #DIV/0!
Solutions are identified by individuals based on limited market awareness or in
3 response to vendor offerings. 0 0.00 2 #DIV/0! 0.66 #DIV/0!
4 There is minimal structured research or analysis of available technology. 0 0.00 3 #DIV/0! 1.00 #DIV/0!
5 0 0.00 4 #DIV/0! 1.33 #DIV/0!
6 0 0.00 5 #DIV/0! 1.66 #DIV/0!
7 0 0.00 Maturity Level = #DIV/0!
8 0 0.00
9 0 0.00 Alternatively, use all 1s for Contribution column or
10 0 0.00 even another distribution in function of the objective.
11 0 0.00
12 0 0.00 Use ticks 4 for compliance value (4 on the keyboard)
Total Weight 0 Compliance #DIV/0!
Do you agree?
Process
Name
Process
ID
Maturity Level 2 To some
degree
Not at
all A Completely
VALU
little E
Some intuitive approaches to identify IT solutions exist and vary across the
1 business. 0 0.00
Solutions are identified informally based on the internal experience and
2 knowledge of the IT function. 0 0.00
3 The success of each project depends on the expertise of a few key individuals. 0 0.00
4 The quality of documentation and decision making varies considerably. 0 0.00
Unstructured approaches are used to define requirements and identify
5 technology solutions. 0 0.00
6 0 0.00
7 0 0.00
8 0 0.00
9 0 0.00
10 0 0.00
11 0 0.00
12 0 0.00
Do you agree?
Process
Name
To some
Process
ID
Maturity Level 3 degree
Not at
all A Completely
VALU
little E
Nr Statement Weight
0.00 0.33 0.66 1.00
1 Clear and structured approaches in determining IT solutions exist. 0 0.00
The approach to the determination of IT solutions requires the consideration of

alternatives evaluated against business or user requirements, technological
2 opportunities, economic feasibility, risk assessments and other factors. 0 0.00
The process for determining IT solutions is applied for some projects based on
factors such as the decisions made by the individual staff involved, the amount of
management time committed, and the size and priority of the original business
3 requirement. 0 0.00
4 Structured approaches are used to define requirements and identify IT solutions. 0 0.00
5 0 0.00
6 0 0.00
7 0 0.00
8 0 0.00
9 0 0.00
Copyright 2007 IT Governance Institute. All Rights reserved.

Maturity Measurement Tool
10 0 0.00
11 0 0.00
12 0 0.00

Maturity Measurement Tool
Do you agree?
Process
Name
To some
COBIT
Process
ID
Maturity Level 4 degree Maturity Level Calculation
Not at
all A Completely
VALU
little E
An established methodology for identification and assessment of IT solutions
1 exists and is used for most projects. 0 0.00
2 Project documentation is of good quality and each stage is properly approved. 0 0.00
3 Requirements are well articulated and in accordance with predefined structures. 0 0.00
4 Solution alternatives are considered, including the analysis of costs and benefits. 0 0.00
5 The methodology is clear, defined, generally understood and measurable. 0 0.00

There is a clearly defined interface between IT management and business in the
6 identification and assessment of IT solutions. 0 0.00
7 0 0.00
8 0 0.00
9 0 0.00
10 0 0.00
11 0 0.00
12 0 0.00
Do you agree?
Process
Name
Process
5
To some
ID Maturity Level
degree
Not at Completely
all A VALU
little E
The methodology for identification and assessment of IT solutions is subjected to
1 continuous improvement. 0 0.00 x
The acquisition and implementation methodology has the flexibility for large- and
2 small-scale projects. 0 0.00
The methodology is supported by internal and external knowledge databases
3 containing reference materials on technology solutions. 0 0.00
The methodology itself produces documentation in a predefined structure that
4 makes production and maintenance efficient. 0 0.00
New opportunities are often identified to utilise technology to gain competitive
advantage, influence business process reengineering and improve overall
5 efficiency. 0 0.00
Management will detect and act if IT solutions are approved without

6 consideration of alternative technologies or business functional requirements. 0 0.00
7 0 0.00
8 0 0.00
9 0 0.00
10 0 0.00
11 0 0.00
12 0 0.00

Do you agree?
Process
Name
Process
ID
Maturity Level 1
To some degree
Not atAall Completely
little
There is an awareness that a process for acquiring and maintaining applications
1 is required. 0
Approaches to acquiring and maintaining application software vary from project
2 to project. 0
Some individual solutions to particular business requirements are
likely to have been acquired independently, resulting in inefficiencies with
3 maintenance and support. 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Total Weight 0 Compliance
Do you agree?
Process
Name
Process
ID
degree
Not at
all A Completely
little
There are different, but similar, processes for acquiring and maintaining
1 applications based on the expertise within the IT function. 0
The success rate with applications depends greatly on the in-house skills and
2 experience levels within IT. 0
Maintenance is usually problematic and suffers when internal knowledge has
3 been lost from the organisation. 0
There is little consideration of application security and availability in the design or
4 acquisition of application software. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
A clear, defined and generally understood process exists for the acquisition and
1 maintenance of application software. 0
2 This process is aligned with IT and business strategy. 0
An attempt is made to apply the documented processes consistently across
3 different applications and projects. 0
The methodologies are generally inflexible and difficult to apply in all cases, so
4 steps are likely to be bypassed. 0
5 Maintenance activities are planned, scheduled and co-ordinated. 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little

There is a formal and well-understood methodology that includes a design and
specification process, criteria for acquisition, a process for testing and
1 requirements for documentation. 0 x
Documented and agreed approval mechanisms exist to ensure that all steps are
2 followed and exceptions are authorised. 0 x
Practices and procedures have evolved to be well suited to the organisation,

3 used by all staff and applicable to most application requirements. 0 x
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
5
To some
ID Maturity Level
degree
Not at Completely
all A
little
Application software acquisition and maintenance practices are aligned with the
1 defined process. 0
The approach is componentbased, with predefined, standardised applications
2 matched to business needs. 0
3 The approach is enterprisewide. 0
The acquisition and maintenance methodology is well advanced and enables
rapid deployment, allowing for high responsiveness and flexibility in responding
4 to changing business requirements. 0
The application software acquisition and implementation methodology is

subjected to continuous improvement and is supported by internal and external
5 knowledge databases containing reference materials and good practices. 0
The methodology creates documentation in a predefined structure that makes
6 production and maintenance efficient. 0
7 0
8 0
9 0
10 0
11 0
12 0

o you agree?
COBIT
o some degree
Maturity Level Calculation
VALU
Completely
E
0.33 0.66 1.00
0.00 Level Compliance Contribution Value

0.00 1 #DIV/0! 0.33 #DIV/0!
0.00 2 #DIV/0! 0.66 #DIV/0!

0.00 3 #DIV/0! 1.00 #DIV/0!
0.00 4 #DIV/0! 1.33 #DIV/0!
0.00 5 #DIV/0! 1.66 #DIV/0!
0.00 Maturity Level = #DIV/0!
0.00
0.00 Alternatively, use all 1s for Contribution column or
0.00 even another distribution in function of the objective.
0.00
0.00 Use ticks 4 for compliance value (4 on the keyboard)
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
COBIT
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00

0.00 x
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
Do you agree?
Process
Name
Process
ID
Maturity Level 1
To some degree
little
There are changes made to infrastructure for every new application, without any
1 overall plan. 0
Although there is an awareness that the IT infrastructure is important, there is no
2 consistent overall approach. 0
3 Maintenance activity reacts to short-term needs. 0
4 The production environment is the test environment. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
ID
degree
Not at
all A Completely
little
There is a consistency amongst tactical approaches when acquiring and
1 maintaining the IT infrastructure. 0
Acquisition and maintenance of IT infrastructure are not based on any defined
strategy and do not consider the needs of the business applications that must be
2 supported. 0
There is an understanding that the IT infrastructure is important, supported by
3 some formal practices. 0
4 Some maintenance is scheduled, but it is not fully scheduled and co-ordinated. 0

5 For some environments, a separate test environment exists. 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
A clear, defined and generally understood process exists for acquiring and
1 maintaining IT infrastructure. 0
The process supports the needs of critical business applications and is aligned to
2 IT and business strategy, but it is not consistently applied. 0
3 Maintenance is planned, scheduled and co-ordinated. 0
4 There are separate environments for test and production. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little

The acquisition and maintenance process for technology infrastructure has
developed to the point where it works well for most
1 situations, is followed consistently and is focused on reusability. 0
2 The IT infrastructure adequately supports the business applications. 0
3 The process is well organised and proactive. 0
The cost and lead time to achieve the expected level of scalability, flexibility and
4 integration are partially optimised. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
5
To some
ID Maturity Level
degree
Not at Completely
all A
little
The acquisition and maintenance process for technology infrastructure is
proactive and closely aligned with critical business
1 applications and the technology architecture. 0
Good practices regarding technology solutions are followed, and the organisation
2 is aware of the latest platform developments and management tools. 0
Costs are reduced by rationalising and standardising infrastructure
3 components and by using automation. 0
A high level of technical awareness can identify optimum ways to proactively

4 improve performance, including consideration of outsourcing options. 0
5 The IT infrastructure is seen as the key enabler to leveraging the use of IT. 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0

o you agree?
COBIT
o some degree
VALU
Completely
E
0.33 0.66 1.00

0.00 1 #DIV/0! 0.33 #DIV/0!
0.00 2 #DIV/0! 0.66 #DIV/0!
0.00 3 #DIV/0! 1.00 #DIV/0!
0.00 4 #DIV/0! 1.33 #DIV/0!
0.00 5 #DIV/0! 1.66 #DIV/0!
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
COBIT
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00 x
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
Do you agree?
Process
Name
Process
ID
Maturity Level 1
To some degree
little
There is awareness that process documentation is needed. Documentation is

1 occasionally produced and is inconsistently distributed to limited groups. 0
2 Much of the documentation and many of the procedures are out of date. 0
3 Training materials tend to be one-off schemes with variable quality. 0
There is virtually no integration of procedures across different systems and
4 business units. 0
5 There is no input from business units in the design of training programmes. 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
ID
degree
Not at
all A Completely
little
Similar approaches are used to produce procedures and documentation, but they
1 are not based on a structured approach or framework. 0
There is no uniform approach to the development of user and operating
2 procedures. 0
Training materials are produced by individuals or project teams, and quality
3 depends on the individuals involved. 0
Procedures and quality of user support vary from poor

4 to very good, with very little consistency and integration across the organisation. 0
Training programmes for the business and users are provided or facilitated, but
5 there is no overall plan for training rollout or delivery. 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
There is a clearly defined, accepted and understood framework for user
1 documentation, operations manuals and training materials. 0
Procedures are stored and maintained in a formal library and can be accessed
2 by anyone who needs to know them. 0
3 Corrections to documentation and procedures are made on a reactive basis. 0

Procedures are available offline and can be accessed and maintained in
4 case of disaster. 0
A process exists that specifies procedure updates and training materials to be an
5 explicit deliverable of a change project. 0
Despite the existence of defined approaches, the actual content varies because
6 there is no control to enforce compliance with standards. 0
7 Users are informally involved in the process. 0
Automated tools are increasingly used in the generation and
8 distribution of procedures. 0
9 Business and user training is planned and scheduled. 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little

There is a defined framework for maintaining procedures and training materials
1 that has IT management support. 0
The approach taken for maintaining procedures and training manuals covers all
systems and business units, so that processes can be viewed from a business
2 perspective. 0
Procedures and training materials are integrated to include interdependencies
3 and interfaces. 0
Controls exist to ensure adherence to standards, and procedures are developed
4 and maintained for all processes. 0
Business and user feedback on documentation and training is collected and
5 assessed as part of a continuous improvement process. 0
Documentation and training materials are usually at a predictable and good level
6 of reliability and availability. 0
An emerging process for using automated procedure documentation and
7 management is implemented. 0
Automated procedure development is increasingly integrated with application

8 system development facilitating consistency and user access. 0
Business and user training is responsive to the needs of the
business. IT management is developing metrics for the development and delivery
9 of documentation, training materials and training programmes. 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
5
To some
ID Maturity Level
degree
5
To some
degree
Not at Completely
all A
little
The process for user and operational documentation is constantly improved
1 through the adoption of new tools or methods. 0
The procedure materials and training materials are treated as a constantly
evolving knowledge base that is maintained electronically using up-to-date
knowledge management, workflow and distribution technologies, making it
2 accessible and easy to maintain. 0
Documentation and training material is updated to reflect organisational,
3 operational and software changes. 0
The development of documentation and training materials and the delivery of

training programmes are fully integrated with the business and business
process definitions, thus supporting organisationwide requirements, rather than
4 only IT-oriented procedures. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0

o you agree?
COBIT
o some degree
VALU
Completely
E
0.33 0.66 1.00

0.00 1 #DIV/0! 0.33 #DIV/0!
0.00 2 #DIV/0! 0.66 #DIV/0!
0.00 3 #DIV/0! 1.00 #DIV/0!
0.00 4 #DIV/0! 1.33 #DIV/0!
0.00 5 #DIV/0! 1.66 #DIV/0!
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
COBIT
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00 x
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
Do you agree?
Process
Name
Process
ID
Maturity Level 1
To some degree
little
The organisation recognises the need to have documented policies and
procedures that link IT acquisition to the business organisation’s overall
1 procurement process. 0
Contracts for the acquisition of IT resources are developed and managed by

project managers and other individuals exercising their professional judgement
2 rather than as a result of formal procedures and policies. 0
There is only an ad hoc relationship between corporate acquisition and contract
3 management processes and IT. 0
Contracts for acquisition are managed at the conclusion of projects rather than
4 on a continuous basis. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
ID
degree
Not at
all A Completely
little
There is organisational awareness of the need to have basic policies and
1 procedures for IT acquisition. 0
Policies and procedures are partially integrated with the business organisation’s
2 overall procurement process. 0
3 Procurement processes are mostly utilised for large and highly visible projects. 0
Responsibilities and accountabilities for IT procurement and contract

4 management are determined by the individual contract manager’s experience. 0
The importance of supplier management and relationship management is
5 recognised; however, it is addressed based on individual initiative. 0
6 Contract processes are mostly utilised by large or highly visible projects. 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
1 Management institutes policies and procedures for IT acquisition. 0
Policies and procedures are guided by the business organisation’s
2 overall procurement process. 0
3 IT acquisition is largely integrated with overall business procurement systems. 0

4 IT standards for the acquisition of IT resources exist. 0
Suppliers of IT resources are integrated into the organisation’s project
5 management mechanisms from a contract management perspective. 0
IT management communicates the need for appropriate acquisitions and
6 contract management throughout the IT function. 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
1 IT acquisition is fully integrated with overall business procurement systems. 0
2 IT standards for the acquisition of IT resources are used for all procurements. 0
Measurements on contract and procurement management are taken relevant to
3 the business cases for IT acquisition. 0
4 Reporting on IT acquisition activity that supports business objectives is available. 0

Management is usually aware of exceptions to the policies and procedures for IT
5 acquisition. 0
Strategic management of relationships is developing. IT management
enforces the use of the acquisition and contract management process for all
6 acquisitions by reviewing performance measurement. 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
5
To some
ID Maturity Level
degree
Not at Completely
all A
little
A
little
Management institutes resources’ procurement thorough processes for IT
1 acquisition. 0
Management enforces compliance with policies and procedures for IT
2 acquisition. 0
Measurements on contract and procurement management are taken that are
3 relevant to the business cases for IT acquisitions. 0
Good relationships are established over time with most suppliers and partners,
4 and the quality of relationships is measured and monitored. 0
5 Relationships are managed strategically. 0
IT standards, policies and procedures for the acquisition of IT resources are
6 managed strategically and respond to measurement of the process. 0
IT management communicates the strategic importance of appropriate
7 acquisition and contract management throughout the IT function. 0
8 0
9 0
10 0
11 0
12 0

o you agree?
COBIT
o some degree
VALU
Completely
E
0.33 0.66 1.00
0.00 1 #DIV/0! 0.33 #DIV/0!

0.00 2 #DIV/0! 0.66 #DIV/0!
0.00 3 #DIV/0! 1.00 #DIV/0!
0.00 4 #DIV/0! 1.33 #DIV/0!
0.00 5 #DIV/0! 1.66 #DIV/0!
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00

0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
COBIT
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
VALU
E
0.33 0.66 1.00
0.00 x
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
Do you agree?
Process
Name
Process
ID
Maturity Level 1
To some degree
little
1 It is recognised that changes should be managed and controlled. 0
2 Practices vary and it is likely that unauthorised changes take place. 0
There is poor or non-existent documentation of change, and configuration
3 documentation is incomplete and unreliable. 0
Errors are likely to occur together with interruptions to the production
4 environment caused by poor change management. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
ID
degree
Not at
all A Completely
little
There is an informal change management process in place and most changes

1 follow this approach; however, it is unstructured, rudimentary and prone to error. 0
Configuration documentation accuracy is inconsistent and only limited planning
2 and impact assessment takes place prior to a change. 0
3 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
There is a defined formal change management process in place, including
categorisation, prioritisation, emergency procedures, change authorisation and
1 release management, and compliance is emerging. 0
2 Workarounds take place and processes are often bypassed. 0
3 Errors may still occur and unauthorised changes occasionally occur. 0
The analysis of the impact of IT changes on business operations is becoming

4 formalised, to support planned rollouts of new applications and technologies. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
The change management process is well developed and consistently followed for
1 all changes, and management is confident that there are minimal exceptions. 0
The process is efficient and effective, but relies on considerable manual
2 procedures and controls to ensure that quality is achieved. 0
All changes are subject to thorough planning and impact assessment to minimise
3 the likelihood of post-production problems. 0
4 An approval process for changes is in place. 0
Change management documentation is current and correct, with changes
5 formally tracked. 0
6 Configuration documentation is generally accurate. 0
IT change management planning and implementation are becoming more
integrated with changes in the business processes, to ensure that training,
7 organisational changes and business continuity issues are addressed. 0
There is increased co-ordination between IT change management and business
8 process redesign. 0
There is a consistent process for monitoring the quality and performance of the
9 change management process. 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
5
To some
ID Maturity Level
degree
Not at Completely
all A
little
The change management process is regularly reviewed and updated to stay in
1 line with good practices. 0
2 The review process reflects the outcome of monitoring. 0
3 Configuration information is computer-based and provides version control. 0
Tracking of changes is sophisticated and includes tools to detect unauthorised
4 and unlicensed software. 0
IT change management is integrated with business change management to
ensure that IT is an enabler in increasing productivity and creating new business
5 opportunities for the organisation. 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0

o you agree?
COBIT
o some degree
VALU
Completely
E
0.33 0.66 1.00

0.00 1 #DIV/0! 0.33 #DIV/0!
0.00 2 #DIV/0! 0.66 #DIV/0!
0.00 3 #DIV/0! 1.00 #DIV/0!
0.00 4 #DIV/0! 1.33 #DIV/0!
0.00 5 #DIV/0! 1.66 #DIV/0!
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
COBIT
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00

0.00 x
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
Do you agree?
Process
Name
Process
ID
Maturity Level 1
To some degree
little
There is an awareness of the need to verify and confirm that implemented
1 solutions serve the intended purpose. 0
Testing is performed for some projects, but the initiative for testing is left to the
2 individual project teams and the approaches taken vary. 0
3 Formal accreditation and sign-off are rare or non-existent. 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
ID
degree
Not at
all A Completely
little
There is some consistency amongst the testing and accreditation approaches,
1 but typically they are not based on any methodology. 0
The individual development teams normally decide the testing approach, and
2 there is usually an absence of integration testing. 0
3 There is an informal approval process. 0
4 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little
A formal methodology relating to installation, migration, conversion and
1 acceptance is in place. 0
IT installation and accreditation processes are integrated into the system life
2 cycle and automated to some extent. 0
Training, testing and transition to production status and accreditation are likely to
3 vary from the defined process, based on individual decisions. 0
The quality of systems entering production is inconsistent, with new systems

4 often generating a significant level of post-implementation problems. 0
5 0
6 0
7 0
8 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
To some
Process
ID
Not at
all A Completely
little

The procedures are formalised and developed to be well organised and practical
1 with defined test environments and accreditation procedures. 0
2 In practice, all major changes to systems follow this formalised approach. 0
Evaluation of meeting user requirements is standardised and measurable,
producing metrics that can be effectively reviewed and analysed by
3 management. 0
The quality of systems entering production is satisfactory to management even
4 with reasonable levels of post-implementation problems. 0
5 Automation of the process is ad hoc and project-dependent. 0
Management may be satisfied with the current level of efficiency despite the lack
6 of post-implementaiton evaluation. 0
7 The test system adequately reflects the live environment. 0
Stress testing for new systems and regression testing for existing systems are
8 applied for major projects. 0
9 0
10 0
11 0
12 0
Do you agree?
Process
Name
Process
5
To some
ID Maturity Level
degree
Not at Completely
all A
little
The installation and accreditation processes have been refined to a level of good
1 practice, based on the results of continuous improvement and refinement. 0
IT installation and accreditation processes are fully integrated into the system life
cycle and automated when appropriate, facilitating the most efficient training,
2 testing and transition to production status of new systems. 0
Well-developed test environments, problem registers and fault resolution

3 processes ensure efficient and effective transition to the production environment. 0
Accreditation takes place usually with no rework, and post-implementation
4 problems are normally limited to minor corrections. 0
Post-implementation reviews are standardised, with lessons learnt channelled

5 back into the process to ensure continuous quality improvement. 0
Stress testing for new systems and regression testing for modified systems are
6 consistently applied. 0
7 0
8 0
9 0
10 0
11 0
12 0

o you agree?
COBIT
o some degree
VALU
Completely
E
0.33 0.66 1.00

0.00 1 #DIV/0! 0.33 #DIV/0!
0.00 2 #DIV/0! 0.66 #DIV/0!
0.00 3 #DIV/0! 1.00 #DIV/0!
0.00 4 #DIV/0! 1.33 #DIV/0!
0.00 5 #DIV/0! 1.66 #DIV/0!
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
COBIT
Completely
VALU
E
0.33 0.66 1.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
o you agree?
Completely
VALU
E
0.33 0.66 1.00

0.00 x
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
0.00
Compliance #DIV/0!
Acquire and Implement
Acquire and Implement
5
AI1 1
AI2 1
AI3 1 4
AI4 1
AI5 1 3
AI6 1
Evaluated Maturity
AI7 1
Levels
2
0
AI1 AI2 AI3 AI4 AI5 AI6 AI7
Control
Objectives
nt
I4 AI5 AI6 AI7

ol
ves

Maturity Measurement Tool AI - v0.1

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Maturity Measurement Tool AI - v0.1

Transféré par

Droits d'auteur :

Formats disponibles

Maturity Measurement

12 0 0.00 Use ticks 4 for compliance value (4 on the keyboard)

Total Weight 0 Compliance #DIV/0!

Total Weight 0 Compliance #DIV/0!

The approach to the determination of IT solutions requires the consideration of

Copyright 2007 IT Governance Institute. All Rights reserved.

Total Weight 0 Compliance #DIV/0!

Copyright 2007 IT Governance Institute. All Rights reserved.

5 The methodology is clear, defined, generally understood and measurable. 0 0.00

Total Weight 0 Compliance #DIV/0!

Management will detect and act if IT solutions are approved without

Total Weight 0 Compliance #DIV/0!

Copyright 2007 IT Governance Institute. All Rights reserved.

Total Weight 0 Compliance

Total Weight 0 Compliance

5 Maintenance activities are planned, scheduled and co-ordinated. 0

Nr Statement Weight 0.00 0.33 0.66 1.00

Practices and procedures have evolved to be well suited to the organisation,

Total Weight 0 Compliance

The application software acquisition and implementation methodology is

Total Weight 0 Compliance

0.33 0.66 1.00

0.00 Level Compliance Contribution Value

0.00 2 #DIV/0! 0.66 #DIV/0!

0.00 Alternatively, use all 1s for Contribution column or

0.00 even another distribution in function of the objective.

0.00 Use ticks 4 for compliance value (4 on the keyboard)

0.33 0.66 1.00

0.33 0.66 1.00

0.33 0.66 1.00

Total Weight 0 Compliance

4 Some maintenance is scheduled, but it is not fully scheduled and co-ordinated. 0

Total Weight 0 Compliance

Nr Statement Weight 0.00 0.33 0.66 1.00

Total Weight 0 Compliance

A high level of technical awareness can identify optimum ways to proactively

Total Weight 0 Compliance

0.33 0.66 1.00

0.00 Level Compliance Contribution Value

0.00 Alternatively, use all 1s for Contribution column or

0.00 even another distribution in function of the objective.

0.00 Use ticks 4 for compliance value (4 on the keyboard)

0.33 0.66 1.00

0.33 0.66 1.00

0.33 0.66 1.00

There is awareness that process documentation is needed. Documentation is

5 There is no input from business units in the design of training programmes. 0

Total Weight 0 Compliance

Procedures and quality of user support vary from poor

Total Weight 0 Compliance

3 Corrections to documentation and procedures are made on a reactive basis. 0

9 Business and user training is planned and scheduled. 0

Total Weight 0 Compliance

Nr Statement Weight 0.00 0.33 0.66 1.00

Automated procedure development is increasingly integrated with application

Total Weight 0 Compliance

The development of documentation and training materials and the delivery of

Total Weight 0 Compliance

0.33 0.66 1.00

0.00 Level Compliance Contribution Value

0.00 Alternatively, use all 1s for Contribution column or

0.00 even another distribution in function of the objective.

0.00 Use ticks 4 for compliance value (4 on the keyboard)