A CIO of a global enterprise has been mandated by the board to change the IT organizational structure from a divisional model to a centralized model…

The capability levels are a measure of how well an enterprise performs its information and

technology governance and management processes in terms of process attributes such as process

performance, process definition, process deployment, process measurement, process control,

process optimization etc. The capability levels range from 0 (incomplete) to 5 (optimizing), indicating

the degree of maturity and effectiveness of an enterprise’s information and technology governance

and management processes. The capability levels are most likely to increase as a result of identifying

specific design factors that increase the importance of certain governance and management

objectives. The design factors are the characteristics or conditions that influence how an enterprise

designs and implements its information and technology governance system using COBIT 2019. The

design factors include aspects such as enterprise strategy archetype; enterprise goals; IT-related

goals; risk profile; IT deployment; threat landscape; compliance requirement; operating

environment; size of enterprise; culture; stakeholders; etc. By identifying specific design factors that

increase the importance of certain governance and management objectives, an enterprise can tailor

its information and technology governance system to suit its context and needs. This will also help to

improve its capability levels for those governance and management objectives that are prioritized by

the design factors. For example, if an enterprise identifies that its IT deployment design factor is

cloud-based or hybrid-based, it may increase the importance of certain governance and

management objectives such as managed availability and capacity (BAI04), managed service

agreements (APO09), managed security services (DSS05), etc., which are relevant for managing

cloud-based or hybrid-based IT solutions. By tailoring its information and technology governance

system to address those governance and management objectives more effectively, the enterprise

can also increase its capability levels for those processes.

Reference: : COBIT 2019 Design Guide: page 33-48 : COBIT 2019 Process Assessment Model: page 11-

13