COBIT 5 IMPLEMENTATION SYLLABUS

Transcription

1 COBIT 5 IMPLEMENTATION SYLLABUS 2013 Version 1.0 (Status Live) Page 0 Owner: Chief Examiner

2 1. Introduction The COBIT 5 Implementation Guide provides the main guidance for a practical approach to implementing the Governance of Enterprise Information Technology or (GEIT) based on a continual improvement life cycle that should be tailored to suit an enterprise s specific needs. The syllabus is based specifically on this guide issued by ISACA. It is downloadable from the ISACA website: And supported by an Implementation tool kit which is also available for download at ISACA. This is a -Level training course that focuses on how to apply COBIT 5 (the framework and Enabling Process guides) and how to analyse the results. It is a mandatory requirement for all candidates to have passed the COBIT 5 Foundation Exam before applying for and attending this training and certificate course. The target audience for this document: Exam Board Exam Panel Accredited Training Organisations ATOs should read this document with the Curriculum document which gives details on what is to be taught as opposed to what is being tested/examined (the syllabus) as that document contains more details of the topics and sub topics (called training modules) that support the vanilla training material. So for example included in the curriculum will be topics around mapping stakeholder needs, enterprise goals through to pain points and trigger events, not all of these will be tested. 2. COBIT 5 Implementation Certificate 2.1 Purpose The primary purpose of the syllabus is to provide a basis for the accreditation of a COBIT 5 Implementation certificate. 2.2 The target audience for this training certificate is: Consultants who want to learn how to implement, or use COBIT 5 for different scenarios for a client initiative. IT practitioners who want practitioner-level training and an appreciation of how to use COBIT 5 for different organisational scenarios. Business managers who want to have a more practical appreciation of how to apply COBIT 5 to specific business problems, pain points, trigger events and risk scenarios. 2.3 High Level Performance Definition of a Successful COBIT 5 Implementation candidate. On completion of this training and exam candidates will be able to apply the COBIT 5 good practice continual improvement lifecycle approach to GEIT, tailored to suit the needs of a specific enterprise. In particular: Analyse the enterprise drivers Apply the implementation challenges, their root causes and success factors Assess current process capability Version 1.0 (Status Live) Page 1 Owner: Chief Examiner

3 Determine target process capability Scope and plan improvements Consider practical implementation factors Identify and avoid potential pitfalls Leverage the latest good practices Apply the COBIT 5 continual improvement lifecycle approach to address these requirements and establish and maintain a sustainable approach to governing and managing enterprise IT as normal business practice. 3. Learning Outcomes Assessment Model A classification widely used when designing assessments for certification and education is the Bloom s Taxonomy of Educational Objectives. This classifies learning objectives into six ascending learning levels, each defining a higher degree of competencies and skills. (Bloom et al,1956, Taxonomy of Educational Objectives). APMG have incorporated this into a Learning Outcomes Assessment Model which is used to provide a simple and systematic means for assessing and classifying the learning outcomes for APMG qualifications. This structured approach helps to ensure: A clear delineation in learning level content between different qualification levels Learning outcomes are documented consistently across different areas of the guidance Exam questions and papers are consistent and are created to a similar level of difficulty. The Foundation certificate examines learning outcomes at levels 1 (knowledge) and 2 (comprehension). The level examines learning levels 3 (Application) and 4 (analysis). 1. Knowledge 2. Comprehension 3. Application 4. Analysis Generic Definition from APMG Learning Outcomes Assessment Model Know key facts, terms and concepts from the manual/guidance Understand key concepts from the manual/guidance Be able to apply key concepts relating to the syllabus area for a given scenario Be able to identify, analyse and distinguish between appropriate and inappropriate use of the method/guidance for a given scenario. COBIT 5 Learning Outcome Assessment Model To know the facts, terms, concepts, and principles, including tools, techniques, roles and responsibilities from the COBIT 5 Framework Understand the concepts, principles, processes, features, organizational factors and roles and can explain how these are applied to justify, design and implement the COBIT 5 framework, using the Implementation guidance Be able to apply the 7 phases of the Life Cycle, including Challenges and Success Factors, for a given scenario Be able to identify, analyse and distinguish between appropriate and inappropriate use of the 7 Phases of the Implementation Life Cycle for a given scenario. Version 1.0 (Status Live) Page 2 Owner: Chief Examiner

4 Foundation 4. Syllabus Presentation For each syllabus area, learning outcomes for each learning level are identified. Each learning outcome is then supported by a description of the requirements that a candidate is expected to meet to demonstrate that the learning outcome has been achieved at the qualification level indicated. These are shown as syllabus topics. All Foundation level requirements must be met before a candidate can move onto the Implementation training programme. Foundation level knowledge and understanding will not be repeated in this course, but can be used when demonstrating application and analysis of specific learning outcomes. : CS [2] Level Topic QUAL (XX) Theme [1] Know facts, terms and concepts relating to the syllabus area. [3] Specifically to recall: 01 [4] 01 [5] [6] [7] [8] Key to the table 1 Unit of learning, e.g. chapter of the reference guide or course module. 2 A unique 2 character code identifying the syllabus area. 3 Learning Outcome (topic header shown in bold) A statement of what a candidate will be expected to know, understand or do. 4 Level Classification of the learning outcome against the APMG OTE Learning Outcomes Assessment Model. 5 Topic Reference Number of the topic within the learning level. 6 Topic Description Description of what is required of the candidate to demonstrate that a learning outcome has been achieved at the qualification level indicated 7 Foundation/ Shows at which qualification level the topic is assessed. 8 Primary Reference The main reference supporting the topic. Version 1.0 (Status Live) Page 3 Owner: Chief Examiner

5 6. Learning Areas For The Implementation Syllabus Syllabus Title Area IP Initiate the programme (What are the drivers? - Phase 1) DP Define Problems & Opportunities (Where are we now and where do we want to be? - Phases 2 & 3) PE Plan & Execute the programme (What needs to be done & How do we get there? - Phases 4 & 5) RB Realise Benefits and Review effectiveness (Did we get there and how do we keep the momentum going? - Phases 6 & 7) This syllabus informs the design of the exam and provides accredited training organizations (ATO s) with a more detailed breakdown of what the exam will assess. Details on the exam structure and content follow: Important Points The following points about the use of the syllabus should be noted: COBIT 5 Implementation Guide The COBIT 5 Implementation guide references provided should be considered to be indicative rather than comprehensive, i.e. there may be other valid references within the guidance. The main reference guides for the COBIT 5 Implementation exam are found in: COBIT 5 Implementation Guide The COBIT 5 Toolkit (contains tools that will be referenced and used in the training) Syllabus Exclusions None Version 1.0 (Status Live) Page 4 Owner: Chief Examiner

6 7. Detailed Implementation Syllabus IP : Initiate The Programme (What are the drivers? Phase 1 Challenges) Level Topic Be able to apply key concepts relating to the Phase 1 Drivers required to initiate a COBIT 5 Implementation for a given scenario. Specifically to identify: The root causes associated with the key Phase 1 challenges The Critical Success factors associated with the key Phase 1 challenges 4 Page Page 27 9 Level Topic Be able to apply key concepts relating to the Phase 1 Drivers required to initiate a COBIT 5 Implementation for a given scenario. Specifically to identify: The key roles and responsibilities required to support this phase The challenges, their root causes and success factors in the initiation Phase The need to act by recognising the Continual Improvement (CI) tasks required to perform this phase. 4 page & 18 4 pages 27 & Version 1.0 (Status Live) Page 5 Owner: Chief Examiner

7 IP : Initiate The Programme (What are the drivers? Phase 1 Challenges) The desire to change by establishing the Change Enablement (CE) tasks necessary to perform this phase The Programme Management (PM) tasks, inputs and outputs required to initiate the programme. Be able to identify, analyse and distinguish between appropriate and inappropriate application of the Phase 1 Drivers required to initiate a COBIT 5 Implementation for a given scenario. Specifically to analyse with reasons: Whether the key roles identified in 0301 are appropriate to support the activities of this phase Whether the challenges, their root causes and critical success factors identified at 0302 are appropriate for this initiation phase given the scenario factors Whether the (CI) tasks undertaken during Phase 1 recognise the need to act during this phase. And whether the appropriate roles have been involved in their selection, development and maintenance throughout this phase Whether the (CE) tasks undertaken during Phase 1 establishes the desire to change during this phase. And whether the appropriate roles have been involved in their selection, development and maintenance throughout this phase Whether the (PM) tasks, inputs and outputs undertaken during Phase 1 supports the programme initiation phase. And whether the appropriate roles have been involved in their selection, development and maintenance throughout this phase page and 18 4 pages 27 & 28 Figure page page page 40 Version 1.0 (Status Live) Page 6 Owner: Chief Examiner

8 DP : Define Problems and Opportunities (Where are we now? And where do we want to be? Phase 2 and Phase 3) Level Topic Be able to apply key concepts relating to the Phase 2 and Phase 3 problems and opportunities required to define a COBIT 5 Implementation for a given scenario. Specifically to identify: The roles and responsibilities required to define problems and opportunities (Phase 2). 6 Pages 42/44 s 20/ The roles and responsibilities required to define the road map (Phase 3) The specific challenges, their root causes and success factors for the scenario The Continual Improvement (CI) tasks required to assess the current state for the programme (Phase 2) The Continual Improvement (CI) tasks required to analyse the gaps and define the target state for the programme (Phase 3) The Change Enablement (CE) tasks necessary to form a powerful implementation team for the programme (Phase 2). 6 Pages 44/46 Figures 24/26 4 Page Version 1.0 (Status Live) Page 7 Owner: Chief Examiner

9 DP : Define Problems and Opportunities (Where are we now? And where do we want to be? Phase 2 and Phase 3) The Change Enablement (CE) tasks necessary to describe and communicate the desired outcomes for the programme (Phase 3) The Programme Management (PM) tasks, inputs and outputs required to define the problems and opportunities for the programme (Phase 2) The Programme Management (PM) tasks, inputs and outputs required to define the road map for the programme (Phase 3). Be able to identify, analyse and distinguish between appropriate and inappropriate application of the Phase 2 and Phase 3 tasks as they relate to the problems and opportunities defined for a given scenario. Specifically to analyse with reasons: Whether the key roles identified at 0301 are appropriate to support the activities of Phase Whether the key roles identified at 0302 are appropriate to support the activities of Phase Whether the challenges, their root causes and critical success factors identified at 0303 are appropriate for these two phases given the scenario factors Pages 42/44 s 20/22 6 Pages 44/46 s 24/26 4 Page Version 1.0 (Status Live) Page 8 Owner: Chief Examiner

10 DP : Define Problems and Opportunities (Where are we now? And where do we want to be? Phase 2 and Phase 3) Whether the (CI) tasks undertaken during Phase 2 are appropriate to assess the current state, for the given scenario factors Whether the (CI) tasks undertaken during Phase 3 are appropriate to analyse the gaps and define the target state for the given scenario factors Whether the (CE) tasks undertaken during Phase 2 and Phase 3 have been appropriately applied to form the implementation team for the given scenario factors Whether the (CE) tasks undertaken during Phase 3 have been appropriately applied to communicate the desired outcome for the given scenario factors Whether the (PM) tasks, inputs and outputs undertaken during Phase 2 support the definition of problems and opportunities for the given scenarios Whether the (PM) tasks, inputs and outputs undertaken during Phase 3 support the definition of a road map for the given scenarios Figure Figure Figure 25 Version 1.0 (Status Live) Page 9 Owner: Chief Examiner

11 PE : Plan & Execute The Programme (What needs to be done and How do we get there? Phases 4 & 5) Level Topic Be able to understand the Challenges, Root Causes and their Critical Success Factors associated with Phases 4 and 5, Planning and Execution. Specifically to identify: The Root Causes for the challenges associated with these phases The Critical Success factors for the challenges associated with these phases. Be able to apply key concepts relating to the Phase 4 and 5 Tasks required to plan and execute a COBIT 5 Implementation for a given scenario. Specifically to identify: The Key roles and responsibilities required for planning the implementation (Phase 4) The Key roles and responsibilities required to execute the plan for the implementation (Phase 5) The specific challenges, their root causes and success factors for the scenario. 4 Pages 31/32 Figures 11/12 4 Pages 31/32 Figures 11/12 s 47/49 s 28/30 s 49/ 51 s 32/34 4 Pages 30/31/ 32 s 11/12 Version 1.0 (Status Live) Page 10 Owner: Chief Examiner

12 PE : Plan & Execute The Programme (What needs to be done and How do we get there? Phases 4 & 5) The Continual Improvement (CI) tasks required to design and build improvements (Phase 4) The Continual Improvement (CI) tasks required to implement improvements (Phase 5) The Change Enablement (CE) tasks that empower role players to identify what needs to be done (Phase 4) The Change Enablement (CE) tasks to enable operation and use of the improvements (Phase 5) The Programme Management (PM) tasks, inputs and outputs that support the development of the plan (Phase 4) The Programme Management (PM) tasks, inputs and outputs that support the execution of the plan (Phase 5). Be able to identify, analyse and distinguish between appropriate and inappropriate application of the Phase 4 and Phase 5 tasks as they relate to the planning and execution of the programme for a given scenario. Specifically to analyse with reasons: s s Version 1.0 (Status Live) Page 11 Owner: Chief Examiner

13 PE : Plan & Execute The Programme (What needs to be done and How do we get there? Phases 4 & 5) Whether the key roles selected at 0301 are appropriate to support the planning activities for Phase Whether the key roles selected at 0302 are appropriate to support the execution of the planning activities for Phase Whether the challenges, their root causes and critical success factors identified at 0303 are appropriate for these two phases given the scenario factors Whether the (CI) tasks undertaken during Phase 4 are appropriate to design and build the improvements for the given scenario factors Whether the (CI) tasks undertaken during Phase 5 are appropriate to implement the improvements for the given scenario factors Whether the (CE) tasks undertaken during Phase 4 have been appropriately applied so that role players are empowered for the given scenario factors Whether the (CE) tasks undertaken during Phase 5 have been appropriately applied so that the operation and use of the improvements have been appropriately enabled for the given scenario factors. s 47/49/ s 28/30 s 49/ 51 s 32/34 4 Pages 30/31/ 32 Figures 11/ Version 1.0 (Status Live) Page 12 Owner: Chief Examiner

14 PE : Plan & Execute The Programme (What needs to be done and How do we get there? Phases 4 & 5) Whether the (PM) tasks, inputs and outputs undertaken during Phase 4 are appropriate for the planning of the programme, for the given scenario factors Whether the (PM) tasks, inputs and outputs undertaken during Phase 5 are appropriate for the execution of the programme, for the given scenario factors Version 1.0 (Status Live) Page 13 Owner: Chief Examiner

15 RB : Realise Benefits and Review Effectiveness of the Improvements (Did we get there and How can we keep the momentum going? Phases 6 and 7) Level Topic Be able to understand the Root Causes and Critical Success Factors associated with Phases 6 and 7, Realise Benefits and Review effectiveness. Specifically to identify: The root causes for the challenges associated with these phases The success factors for the challenges associated with these phases. Be able to apply key concepts relating to the Phase 6 and 7 Tasks related to realising benefits and keeping the momentum going for a given scenario. Specifically to identify: The Key roles and responsibilities required for realising the benefits at Phase The Key roles and responsibilities required for keeping the momentum going at Phase The specific challenges, their root causes and success factors for the scenario. 4 Page Page s 51/53 s 36/38 s 53/ 55 s 40/42 4 Page Version 1.0 (Status Live) Page 14 Owner: Chief Examiner

16 RB : Realise Benefits and Review Effectiveness of the Improvements (Did we get there and How can we keep the momentum going? Phases 6 and 7) The Continual Improvement (CI) tasks required to operate and measure the improvements (Phase 6) The Continual Improvement (CI) tasks required to monitor and evaluate the improvements (Phase 7) The Change Enablement (CE) tasks that embed new approaches (Phase 6) The Change Enablement (CE) tasks that sustain new approaches for the improvements (Phase 7) The Programme Management (PM) tasks, inputs and outputs that support the realisation of benefits of the improvements (Phase 6) The Programme Management (PM) tasks, inputs and outputs that support the effective review of the programme effectiveness (Phase 7). Be able to identify, analyse and distinguish between appropriate and inappropriate application of the Phase 6 and Phase 7 tasks as they relate to the realisation of benefits and the effective review of the programme for a given scenario. Specifically to analyse with reasons: Version 1.0 (Status Live) Page 15 Owner: Chief Examiner

17 RB : Realise Benefits and Review Effectiveness of the Improvements (Did we get there and How can we keep the momentum going? Phases 6 and 7) Whether the key roles selected are appropriate to support the activities for realising the benefits (Phase 6) Whether the key roles selected are appropriate to support the activities for reviewing the activities (Phase 7) Whether the challenges, their root causes and critical success factors identified at 0303 are appropriate for these two phases given the scenario factors Whether the (CI) tasks undertaken during Phase 6 are appropriate to allow benefits realisation for the given scenario factors Whether the (CI) tasks undertaken during Phase 7 are appropriate to allow monitoring and evaluation of the improvements for the given scenario factors Whether the (CE) tasks undertaken during Phase 6 have been appropriately applied to allow new approaches to be embedded for the given scenario factors Whether the (CE) tasks undertaken during Phase 7 have been appropriately applied to allow new approaches to be sustained for the given scenario factors. s 51/53 s 36/38 s 53/ 55 s 40/42 4 Page 33 Figure s s 52/54 s 37/ Version 1.0 (Status Live) Page 16 Owner: Chief Examiner

18 RB : Realise Benefits and Review Effectiveness of the Improvements (Did we get there and How can we keep the momentum going? Phases 6 and 7) Whether the (PM) tasks, inputs and outputs undertaken during Phase 6 are appropriate to support the realisation of benefits for the given scenario factors Whether the (PM) tasks undertaken during Phase 7 are appropriate to support the effective review of the programme for the given scenario factors. s 52 s 37 s Version 1.0 (Status Live) Page 17 Owner: Chief Examiner