COBIT 5 ASSESSOR SYLLABUS 2013

Transcription

1 COBIT 5 ASSESSOR SYLLABUS 2013 Versin 1.0 (Status Live) Page 0 Owner: Chief Examiner

2 1. Intrductin The Assessr Guide: Using COBIT 5 prvides the main guidance n perfrming a prcess capability assessment, the rles, respnsibilities and cmpetences required and the key steps required, frm assessment initiatin t reprting f the assessment results. The Prcess Assessment Mdel (PAM): using COBIT 5 which is the mdel used by assessr t perfrm an assessment is used by candidate t reference the prcess cntent t be used in the assessment. The syllabus is based n these tw guides. Nte that fundatin questins based n the COBIT PAM will nt be retested. The Assessr training and certificatin is a -Level training and certificatin curse that fcuses n hw t apply the PAM and hw t analyse the results. It is a mandatry requirement fr all candidates t have passed the COBIT 5 Fundatin Exam befre applying fr and attending this training and certificate curse. The target audience fr this dcument: Exam Bard Exam Panel Accredited Training Organisatins ATOs shuld read this dcument with the Curriculum dcument which gives details n what is t be taught as ppsed t what is being tested/examined as that dcument cntains mre details f the tpics and sub tpics (called training mdules) that supprt the vanilla training material. S fr example included in the curriculum will be tpics like using the self-assessment apprach which is NOT tested r the differences between the COBIT 4.1 and COBIT 5 PAMs. 2. COBIT 5 Assessr Certificate 2.1 Purpse The primary purpse f the syllabus is t prvide a basis fr the accreditatin f a COBIT Assessr Certificate. It dcuments the learning utcmes related t the use f the COBIT 5 Assessr apprach and cnfirms whether the candidate has achieved sufficient understanding f hw t apply and scpe COBIT 5 prcess capability apprach in a scenari situatin. A successful practitiner candidate will be able t becme an assessr r a lead assessr and apply fr full ISACA certificatin if they can supply further prf f the cmpetences required by ISACA: (detailed cmpetences and rles are utlined in the curriculum). 2.2 The target audience fr this certificatin is: Internal & external Auditrs wh want t add prcess capability assessments t the scpe f their audits. IT auditrs wh want t add prcess capability assessments t the scpe f their audits. Cnsultants wh want t be allwed t perfrm independent prcess assessments n behalf f their clients. Versin 1.0 (Status Live) Page 1 Owner: Chief Examiner

3 2.3 High Level Perfrmance Definitin f a Successful COBIT 5 Assessr candidate Upn the successful cmpletin f this training curse, candidates will knw: Hw t perfrm a prcess capability assessment using the Assessr Guide: using COBIT 5 Hw t apply the Prcess Assessment Mdel (PAM) in perfrming a prcess capability assessment. Specifically: T use the Prcess Reference Mdel (PRM), in particular t be able t apply the 37 prcesses utlined in the PRM. T apply and analyse the measurement mdel in assessing prcess capability levels. T apply and analyse the capability dimensin using generic criteria utlined in the PAM. Be able t identify and assess the rles and respnsibilities in the prcess capability assessment prcess. Be able t perfrm and assess the 7 steps utlined in the Assessr Guide specifically hw t: Initiate a prcess assessment. Scpe an assessment, using the tls prvided and the PAM fr the selectin f the apprpriate prcesses. Plan & Brief the teams. Cllect & Validate the data. D a prcess attribute rating. Reprt the findings f the assessment. 3. Learning Outcmes Assessment Mdel A classificatin widely used when designing assessments fr certificatin and educatin is the Blm s Taxnmy f Educatinal Objectives. This classifies learning bjectives int six ascending learning levels, each defining a higher degree f cmpetencies and skills. (Blm et al, 1956, Taxnmy f Educatinal Objectives). APMG have incrprated this int a Learning Outcmes Assessment Mdel which is used t prvide a simple and systematic means fr assessing and classifying the learning utcmes fr APMG qualificatins. This structured apprach helps t ensure: A clear delineatin in learning level cntent between different qualificatin levels Learning utcmes are dcumented cnsistently acrss different areas f the guidance Exam questins and papers are cnsistent and are created t a similar level f difficulty. The COBIT 5 Fundatin certificate examines learning utcmes at levels 1 (knwledge) and 2 (cmprehensin). The COBIT 5 Assessr Certificate is psitined at level and examines learning levels 2 (understanding) 3 (applicatin) and 4 (analysis). Versin 1.0 (Status Live) Page 2 Owner: Chief Examiner

4 Fundatin Generic Definitin frm APMG Learning Outcmes Assessment Mdel COBIT 5 Learning Outcme Assessment Mdel 1. Knwledge 2. Cmprehensin 3. Applicatin 4. Analysis Knw key facts, terms Understand key and cncepts frm the cncepts frm the manual/guidance manual/guidance T knw the facts, terms, cncepts, and principles, including tls, techniques, rles and respnsibilities frm the COBIT 5 Framewrk Guidance and the COBIT Prcess Assessment Mdel (PAM). Understand the cncepts, principles, prcesses, features, rganizatinal factrs and rles and can explain hw these are applied t justify, design and implement the COBIT 5 framewrk and the COBIT Prcess Assessment mdel (PAM). Be able t apply key cncepts relating t the syllabus area fr a given scenari Be able t apply the PAM & Assessr Guide t: i. Perfrm a prcess capability assessment apprpriately ii. Scpe and tailr the rganisatinal prcesses apprpriately Fr a given prject scenari. Be able t identify, analyse and distinguish between apprpriate and inapprpriate use f the methd/guidance fr a given scenari. Be able t identify, analyse and distinguish between apprpriate and inapprpriate use f the methd applied t the assessment f prcess capability f an rganisatin fr a given prject scenari. 4. Syllabus Presentatin Fr each syllabus area, learning utcmes fr each learning level are identified. Each learning utcme is then supprted by a descriptin f the requirements that a candidate is expected t meet t demnstrate that the learning utcme has been achieved at the qualificatin level indicated. These are shwn as syllabus tpics. All Fundatin level requirements must be met befre a candidate can mve nt the Assessr training prgramme. Fundatin level knwledge and understanding will nt be repeated in this curse, but will be used when demnstrating applicatin and analysis learning utcmes. Syllabus Area AI [2] Syllabus Area : QUAL Syllabus Area (XX) Theme [1] Knw facts, terms and cncepts relating t the syllabus area. [3] Specifically t recall: 01 [4] 01 [5] [6] [7] [8] Key t the Syllabus Area table 1 Syllabus Area Unit f learning, e.g. chapter f the reference guide r curse mdule. 2 Syllabus Area A unique 2 character cde identifying the syllabus area. Versin 1.0 (Status Live) Page 3 Owner: Chief Examiner

5 3 Learning Outcme (tpic header shwn in bld) A statement f what a candidate will be expected t knw, understand r d. 4 Level Classificatin f the learning utcme against the APMG OTE Learning Outcmes Assessment Mdel. 5 Tpic Reference Number f the tpic within the learning level. 6 Tpic Descriptin Descriptin f what is required f the candidate t demnstrate that a learning utcme has been achieved at the qualificatin level indicated 7 Fundatin/ Shws at which qualificatin level the tpic is assessed. 8 Primary Reference The main reference supprting the tpic. Each f the syllabus areas is presented in a similar frmat as fllws: 5. Learning Areas Fr The Assessr Syllabus Syllabus Area RR AI SC PB DC DV PR AR Syllabus Area Title Rles, Respnsibilities and Cmpetences Initiate an Assessment Scpe an Assessment Plan an Assessment and Brief the teams and management Data Cllectin Data Validatin Analyse and rate the prcess attributes & capability levels Prepare and present assessment reprts This syllabus infrms the design f the exam and prvides accredited training rganizatins (ATO s) with a mre detailed breakdwn f what the exam will assess. Details n the exam structure and cntent fllw: Imprtant Pints The fllwing pints abut the use f the syllabus shuld be nted: COBIT 5 Assessr Guides The COBIT 5 Assessment prgramme guide references prvided shuld be cnsidered t be indicative rather than cmprehensive, i.e. there may be ther valid references within the guidance. The main fllwing reference guides will be used fr the COBIT 5 Assessr certificatin: Assessr Guide: using COBIT 5; The syllabus will cmprise prject scenari questins based n this guide. Assessr Guide Tl Kit Prcess Assessment Mdel (PAM): using COBIT 5; used t access the detailed cntent required t d an assessment. Syllabus Exclusins Nne Versin 1.0 (Status Live) Page 4 Owner: Chief Examiner

6 6. Detailed Assessr Syllabus Syllabus Area RR Assessr Rles & Respnsibilities Be able t understand the Key Rles, & Respnsibilities in a COBIT Assessment Assignment: The different respnsibilities fr each f the fllwing rles: Spnsr Lead Assessr Assessr C-rdinatr The cmpetency requirements fr assessrs. Be able t apply key cncepts relating t the Rles and Respnsibilities fr a given scenari The key rles and respnsibilities required fr the assessment assignment An apprpriate assessment team structure required t perfrm an assessment assignment. Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Rles & Respnsibilities fr a given scenari situatin. 3 Assessr Guide Page 21,3.3 Figure 13 3 Assessr Guide Page page 22 figure 13 3 page 22 figure 13 & chapter Key Issues Whether the crrect rles and respnsibilities have been identified fr the assessment assignment Whether the crrect team has been created taking int cnsideratin: The apprpriate knwledge f the COBIT Assessment Prgramme The degree f independence required depending n the class f assessment. 3 page 22 figure 13 3 page 21 & 22 & chapter Key Issues Versin 1.0 (Status Live) Page 5 Owner: Chief Examiner

7 Syllabus Area AI Assessment Initiatin Be able t understand the Assessment Classes in a COBIT Assessment Assignment: Specifically t understand: The recmmended steps required t be fllwed The key differences in the 3 classes f assessment t be used in a prcess capability assessment Class One Class tw Class Three Be able t apply key cncepts relating t the Assessment Initiatin Phase fr a given scenari The apprpriate infrmatin fr a pre-assessment questinnaire The recmmended steps required t be fllwed What class f assessment is apprpriate fr the specific prblems utlined in the scenari. 1 page 8, 1.4 and 4 Figure 17 page page page 27 appendi x D4 page 50 4 Figure 17 page 26 Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Assessment Initiatin Phase fr a given scenari situatin Whether the pre-assessment questinnaire is cmplete in terms f prviding the apprpriate understanding t the assessr, spnsr and management team Whether the recmmended steps in the Assessment Initiatin phase are apprpriate Whether the apprpriate assessment class was selected fr the scenari and whether the management team and spnsr were invlved in the selectin decisin page 27 25/26. Versin 1.0 (Status Live) Page 6 Owner: Chief Examiner

8 Syllabus Area SC Scping the Assessment Be able t apply key cncepts relating t the Scping Prcess fr a given scenari The recmmended prcess selectin steps used t scpe the assessment What prcesses frm the PAM shuld be selected fr the specific prblems utlined in the scenari The initial mapping f the rganisatin s prcesses t the COBIT PRM. Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Scping Prcess fr a given scenari situatin Whether the recmmended prcess selectin steps were used Whether the apprpriate prcesses were selected fr the prblems utlined in the scenari and whether the management team, assessr and spnsr were invlved in the selectin decisin Whether the initial mappings f the rganisatin s prcess t COBIT 5 were dne apprpriately & PAM PRM 3.2, 3.3, 3.4 Scping Tl Kit 25 PPAM Page 11 Figure 3 25 and PAM PRM chapters 3.2, 3.3, Versin 1.0 (Status Live) Page 7 Owner: Chief Examiner

9 Syllabus PB Area Planning the Assessment & Briefing the Teams Be able t apply key cncepts relating t the Planning and Briefing Phase fr a given scenari The apprpriate infrmatin t be included in the assessment plan The recmmended steps t fllw in the assessment planning phase The recmmended steps t fllw in the briefing phase. Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Planning and Briefing Phase fr a given scenari situatin page 28 Appendix D page page Whether the assessment plan is cmpleted apprpriately and whether the spnsr and management team were invlved in the final decisin Whether the planning recmmended steps have been fllwed Whether the briefing recmmended steps have been fllwed page 28 Appendi x D page page 29 Versin 1.0 (Status Live) Page 8 Owner: Chief Examiner

10 Syllabus Area DC Data Cllectin Be able t understand the in a COBIT Assessment the Data Cllectin phase. Specifically t understand: The primary surces f the evidence fr the prcesses t be assessed, specifically: The prcess Purpse Prcess Outcmes Base Practices Wrk Prducts Be able t apply key cncepts relating t the Data Cllectin Phase fr a given scenari page The instances f prcess perfrmance that is uniquely identifiable and defines what infrmatin can be gathered in a repeatable manner The evidence t be cllected fr the selected prcesses based n the level 1 being assessed: Prcess Outcmes Base Practices Wrk Prducts The evidence t be cllected fr Levels 2 t 5: Generic Practices Generic Wrk Prducts The Recmmended steps in perfrming the data cllectin phase. Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Data Cllectin Phase fr a given scenari situatin page 29, PAM 2 pages page 30 ; PAM page 30 ; PAM page Whether the instances f prcess perfrmance have been identified apprpriately Whether the evidence cllected fr Level 1 is accurate and cmplete page Page 30 and PAM 3 Versin 1.0 (Status Live) Page 9 Owner: Chief Examiner

11 Syllabus Area DC Data Cllectin Whether the evidence cllected fr Level s 2 t 5 is accurate and cmplete Whether the recmmended steps fr data cllectin have been fllwed Page 30 and PAM Versin 1.0 (Status Live) Page 10 Owner: Chief Examiner

12 Syllabus DV Area Data Validatin Be able t apply key cncepts relating t the Data Validatin Phase fr a given scenari The recmmendatins fr reviewing and frming cnclusins f the data cllected by the lead assessr The deficiencies have been addressed taking int cnsideratin any prblems with the availability f data The Recmmended steps in perfrming the data validatin phase. Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Data Validatin Phase fr a given scenari situatin Whether the cllected data has been reviewed fr cmpleteness and sufficiency by the lead assessr and whether the cnclusins have been validated Whether the deficiencies and data cllectin prblems identified have been apprpriately addressed and reprted t the spnsr Whether the recmmended steps fr data validatin have been fllwed page 31; PAM 2 pages page 31; PAM 3 apprpriate prcess cntent page page page page 31 Versin 1.0 (Status Live) Page 11 Owner: Chief Examiner

13 Syllabus PR Area Prcess Attribute Rating Be able t apply key cncepts relating t the Prcess Attribute Rating Phase fr a given scenari The apprpriate rating fr each f the prcesses being assessed at Level 1: N Nt achieved 0 t 15% achievement P Partially achieved >15% t 50% achievement L Largely achieved >50% t 85% achievement F Fully achieved >85% t 100% achievement The apprpriate generic cntent fr the prcesses being assessed at Level 2 t 5 (based n the PAM generic cntent): N Nt achieved 0 t 15% achievement P Partially achieved >15% t 50% achievement L Largely achieved >50% t 85% achievement F Fully achieved >85% t 100% achievement That the capability level is being achieved based n the ratings at 0301 and The recmmended steps in rating the prcess attribute. Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Prcess Attribute Rating Phase fr a given scenari situatin Whether the rating fr Level 1 has been assessed crrectly and the evidence that supprts the ratings at 0301 is apprpriate Whether the rating fr Levels 2 t 5 has been assessed crrectly and the evidence that supprts the ratings at 0302 is apprpriate Whether Capability levels achieved based n the ratings at 0301 and 0302 are crrect and apprpriate Whether the recmmended steps in the attribute rating prcess are apprpriate page 32 PAM chapter 4 Pages page page 32 PAM chapter 4 Pages page page page 32 Versin 1.0 (Status Live) Page 12 Owner: Chief Examiner

14 Syllabus AR Area Assessment Reprting Be able t understand the Assessment reprting phase in a COBIT Assessment Assignment The minimum cntent required fr an assessment reprt. Be able t apply key cncepts relating t the Assessment Reprting Phase fr a given scenari The apprpriate infrmatin using the recmmended cmpsitin, fr inclusin int the assessment reprt The recmmended steps in prducing an assessment reprt Be able t identify, analyse and distinguish between apprpriate and inapprpriate applicatin f the Assessment Reprting Phase fr a given scenari situatin Whether the reprt is cmplete and with all the recmmended cntent, and whether the reprt has been prvided t the spnsr Whether the reprting steps have been applied crrectly page 33& appendix D page page page 33 D page 34 Versin 1.0 (Status Live) Page 13 Owner: Chief Examiner