Flashcards in AG: 2-Process Reference Model (PAM) Summary Deck (20):
What are the basic early steps in COBIT 5 assessment?
- Mapping: enterprise processes and terminology to the COBIT processes
- Scoping: the enterprise should choose which IT processes to assess
- Check: COBIT (goals cascade, principles, the other six enablers) for harmonies
Which factors affect the selection of target capability level of each process in COBIT Assessment?
- business goals
- stakeholder needs
- risk and resourcing considerations
- Scoping (to reduce the complexity, effort and cost of the assessment)
What are the sole purpose of the assessment indicators?
Assessment indicators in the COBIT PAM provide the basis for determining whether process attributes have been achieved and hence the process capability levels
What are the 4 logical basic questions associated with the assessment indicator of capability level 1?
- Is there a process with this purpose?
- Are these outcomes being achieved?
- Is there evidence that appropriate base practices being undertaken?
- Is there evidence that these work products (or equivalents) are being produced?
What is the major difference between assessment (Performance) indicator at level 1 and the (Capability) indicator from level 1 to 5?
- The indicators at capability level 1 are specific for each process
- The assessments of capability levels 2 through 5 are based on generic process indicators of performance
What does the (generic) word mean in the generic (assessment/process/capability) indicators?
These are called generic because they apply across all processes at each level of capability globally, irrespective of process purpose, enterprise type, size or line of business
What are the benefits & costs associated with higher (capability/process/assessment) indicators?
- lower risk of the process failing to meet its intended purpose
- more costly the process is to operate.
What are the 2 basic elements of each performance attribute (PA1: Process Performance)?
- Base Practices (BP)
- Work Products (WP)
What are the 4 basic elements of each generic process attribute?
- List of expect results from full achievement of the attribute
What are the 2 basic elements of each (generic) process attribute (PA1 to PA9)?
- Generic Practices (GP)
- Generic Work Products (GWP)
What are the meaning of the following terms?
- Core/primary processes
- Progressive implementation of the processes
WPs for some processes provide higher capability requirements for other processes. This will result in a progressive implementation of processes. The initial focus on any process assessment is the core (sometimes called primary) processes, which are primarily part of the BAI and DSS domains. Processes in the APO and MEA domains are required to support improvement in the capability of these core processes past level 1
What is the link between (results from attribute achievements) and (generic practices) and (generic work products)?
Each result is associated (or a result from) the implementation of a set of generic practices and the production of a set of generic work products
How many rating level exists in COBIT 5? What are their names and percentages?
- Not achieved (N up to 15%)
- Partial achieved (>15% to 50%)
- Largely achieved (>50% to 85%)
- Fully achieved (85% to 100%)
What is the true meaning of (Not Achieved) rating scale?
- little or no evidence of achievement of the attribute
What is the true meaning of (Partially Achieved) rating scale?
- some evidence of an approach to
- some achievement of the attribute
- some aspects of achievement may be unpredictable
What is the true meaning of (Largely Achieved) rating scale?
- evidence of a systematic approach to
- significant achievement of the attribute
- some weaknesses may exist
What is the true meaning of (Fully Achieved) rating scale?
- evidence of a complete and systematic approach to
- full achievement of the attribute
- No significant weaknesses exist
How COBIT 5 PAM ensure consistent degree of interpretation when deciding which ratings to be assigned to each attribute?
By using the 4 ranges percentages associated with rating levels
What is the added value of consistently applying the 4 rating levels according to their percentages ranges?
- allow each assessment to be based on a structured degree of formality
- enable the comparison of assessments across an enterprise or even across different enterprises
Note that: a degree of judgement needs to be applied in determining the level of achievement.