For each process, columns for:

Adopt a policy that only vendor-provided or security-reviewed assessment artifacts may be used for official COBIT 2019 maturity reporting; any externally sourced portable tools must pass legal verification, malware scanning, formula validation, and be placed under version control before being accepted for decision-making or audit evidence.

The core feature is the CMMI-based maturity scoring grid, simplified for non-technical users.