COBIT Assessor Guide: Using COBIT 5 & Toolkit

After completing check-out, your download will be available under MyISACA > Resources.

This companion to the COBIT® Process Assessment Model (PAM): Using COBIT® 5 provides details on how to undertake an assessment, while the COBIT PAM provides details on the basis for the assessment. It is intended primarily to support those undertaking process assessments using the formal COBIT PAM. It can be used by team members involved in process assessments to understand what steps need to be taken and how those steps work together. It also can be used by internal auditors to enhance their existing audit scope. It is a valuable reference to the organization's management and stakeholders because it allows them to fully understand the expectations, outcomes and steps in undertaking an assessment. It:

• Details how to perform a capability assessment of an organization's current IT processes against COBIT 5 as the base reference document which should be used in tandem
• Defines roles and responsibilities for performing assessments
• Provides options for the scoping of assessments (i.e., selection of IT processes to be assessed)
• Defines the types of evidence that should be gathered
• Provides guidance on how to determine the capability level of an IT process
• Defines the elements of an assessment report and how the results of the assessment should be reported

A simpler COBIT® Self-assessment Guide: Using COBIT® 5 as an alternative to the full ISO-compliant assessment outlines in this guide is also available. This can be used by organizations to perform a less rigorous assessment of the capability of their processes. It is based on the COBIT® Process Assessment Model (PAM): Using COBIT® 5, but does not include the same level of evidentiary requirements.