Before diving into the Excel tool, we must understand the metric. COBIT 2019 moved away from the outdated "Capability Maturity Model Integration (CMMI)" levels (0 to 5) used in COBIT 5. Instead, it aligns with ISO/IEC 15504 (also known as ISO 15504 or SPICE).
The new maturity model uses six capability levels:
A maturity assessment measures your organization’s actual performance against these levels for each of the 40 governance and management objectives in COBIT 2019 (e.g., APO01 – Managed IT Management Framework, DSS02 – Managed Service Requests and Incidents, etc.).
Review the Dashboard sheet. Identify "Quick Wins" (High target maturity, low current maturity). For example: If target is Level 4 but current is Level 1, you have a severe capability deficit requiring a transformation program.
COBIT 2019 uses the Process Capability Model defined in ISO/IEC 15504 (now ISO 33000): Cobit 2019 Maturity Assessment Tool Xls
Each level has specific process attributes (e.g., PA 1.1 Process performance, PA 2.2 Work product management).
Assessment is done by rating each attribute as:
A proper tool (Excel-based) must calculate capability per process and aggregate to an overall maturity level, but never convert directly from old “maturity levels” without attribute scoring.
The Excel file is not the finish line; it is the start line. Once you have your XLS filled out:
Instead of generic processes, the tool maps COBIT 2019 core components to entertainment-specific capabilities: Before diving into the Excel tool, we must
| COBIT Component | Lifestyle & Entertainment Adaptation | |----------------|--------------------------------------| | EDM01 – Ensure governance framework | Content governance & IP protection | | APO01 – Managed IT management framework | Agile content delivery pipelines | | BAI03 – Managed solutions identification | AI/ML for personalization engines | | DSS01 – Managed operations | 24/7 streaming / live event uptime | | MEA01 – Managed performance monitoring | Viewer engagement & churn metrics |
In my experience analyzing these spreadsheets, three errors occur most frequently:
The "Documentation Trap" Raters often look at the existence of a policy (Work Product) and rate the process highly. However, COBIT 2019 focuses heavily on Base Practices. You may have a "Change Management Policy" (Work Product), but if developers are bypassing the CAB (Base Practice failure), your rating should be low. The tool is designed to catch this discrepancy between documentation and reality.
The "Leapfrogging" Myth Organizations often want to jump from Level 1 (Performed) to Level 4 (Predictable). The XLS logic does not allow this. You cannot achieve Level 3 if you haven't mastered Level 2. If your process is not defined (L3), it cannot possibly be measured and optimized (L4). The spreadsheet calculation logic enforces this hierarchy. Each level has specific process attributes (e
Subjectivity without Evidence A spreadsheet filled out in a boardroom by "gut feel" is useless. The tool should be populated by the process owners with tangible evidence. If the cell in the XLS says "Fully Achieved," there should be a hyperlink to the audit log or the policy document proving it.
In the modern "lifestyle and entertainment" era, we struggle with one thing: boundaries. We check Slack during Netflix pauses. We answer emails during gaming load screens. We feel guilty streaming a show because a project is behind schedule.
Why? Because your personal "process maturity" is at Level 1 (Initial/Ad Hoc).
COBIT 2019 defines maturity levels from 0 (Non-existent) to 5 (Optimized). Most of our work-from-home lives are stuck at Level 2: “Processes have been developed but are not yet linked to outcomes.”
That spreadsheet you use to audit your IT department? You can fork it for your personal life.