COBIT 5 Assessor Guide: Using COBIT 5

This companion to the COBIT® Process Assessment Model (PAM): Using COBIT® 5 provides details on how to undertake an assessment, while the COBIT PAM provides details on the basis for the assessment. It is intended primarily to support those undertaking process assessments using the formal COBIT PAM. It can be used by team members involved in process assessments to understand what steps need to be taken and how those steps work together. It also can be used by internal auditors to enhance their existing audit scope. It is a valuable reference to the organization's management and stakeholders because it allows them to fully understand the expectations, outcomes and steps in undertaking an assessment. It:

• Details how to perform a capability assessment of an organization's current IT processes against COBIT 5 as the base reference document which should be used in tandem
• Defines roles and responsibilities for performing assessments
• Provides options for the scoping of assessments (i.e., selection of IT processes to be assessed)
• Defines the types of evidence that should be gathered
• Provides guidance on how to determine the capability level of an IT process
• Defines the elements of an assessment report and how the results of the assessment should be reported