COBIT 5 IMPLEMENTATION SYLLABUS

(1)

COBIT® 5 IMPLEMENTATION

SYLLABUS

(2)

1. Introduction

“The COBIT 5 Implementation Guide” provides the main guidance for a practical approach to implementing the ‘Governance of Enterprise Information Technology or (GEIT)’ based on a continual improvement life cycle that should be tailored to suit an enterprise’s specific needs.

The syllabus is based specifically on this guide issued by ISACA.

 It is downloadable from the ISACA website: www.isaca.org

 And supported by an Implementation tool kit which is also available for download at ISACA. This is a ‘Practitioner-Level training course’ that focuses on ‘how’ to apply COBIT 5 (the framework and Enabling Process guides) and ‘how’ to analyse the results.

It is a mandatory requirement for all candidates to have passed the COBIT 5 Foundation Exam before applying for and attending this training and certificate course.

The target audience for this document:

 Exam Board

 Exam Panel

 Accredited Training Organisations

ATOs should read this document with the ‘Curriculum’ document which gives details on ‘what is to be taught’ as opposed to ‘what is being tested/examined’ (the syllabus) as that document contains more details of the topics and sub topics (called training modules) that support the vanilla training material. So for example included in the curriculum will be topics around mapping stakeholder needs, enterprise goals through to pain points and trigger events, not all of these will be tested.

2. COBIT 5 Implementation Certificate

2.1 Purpose

The primary purpose of the syllabus is to provide a basis for the accreditation of a COBIT 5 Implementation certificate.

2.2 The target audience for this training certificate is:

 Consultants who want to learn how to implement, or use COBIT 5 for different scenarios for a client initiative.

 IT practitioners who want practitioner-level training and an appreciation of how to use COBIT 5 for different organisational scenarios.

 Business managers who want to have a more practical appreciation of how to apply COBIT 5 to specific business problems, pain points, trigger events and risk scenarios.

2.3 High Level Performance Definition of a Successful COBIT 5 Implementation

candidate

.

On completion of this training and exam candidates will be able toapply the COBIT 5 good practice continual improvement lifecycle approach to GEIT, tailored to suit the needs of a specific enterprise. In particular:

 Analyse the enterprise drivers

(3)

 Determine target process capability

 Scope and plan improvements

 Consider practical implementation factors

 Identify and avoid potential pitfalls

 Leverage the latest good practices

 Apply the COBIT 5 continual improvement lifecycle approach to address these requirements and establish and maintain a sustainable approach to governing and managing enterprise IT as “normal business practice”.

3. Learning Outcomes Assessment Model

A classification widely used when designing assessments for certification and education is the Bloom’s Taxonomy of Educational Objectives. This classifies learning objectives into six ascending learning levels, each defining a higher degree of competencies and skills. (Bloom et al,1956, Taxonomy of Educational Objectives).

APMG have incorporated this into a Learning Outcomes Assessment Model which is used to provide a simple and systematic means for assessing and classifying the learning outcomes for APMG qualifications.

This structured approach helps to ensure:

 A clear delineation in learning level content between different qualification levels

 Learning outcomes are documented consistently across different areas of the guidance

 Exam questions and papers are consistent and are created to a similar level of difficulty.

The Foundation certificate examines learning outcomes at levels 1 (knowledge) and 2

(comprehension). The Practitioner level examines learning levels 3 (Application) and 4 (analysis). 1. Knowledge 2. Comprehension 3. Application 4. Analysis Generic Definition from APMG Learning Outcomes Assessment Model

Know key facts, terms and concepts from the manual/guidance

Understand key concepts from the manual/guidance

Be able to apply key concepts relating to the syllabus area for a given scenario Be able to identify, analyse and distinguish between appropriate and inappropriate use of the method/guidance for a given scenario. COBIT 5 Learning Outcome Assessment Model

To know the facts, terms, concepts, and principles, including tools, techniques, roles and responsibilities from the COBIT 5 Framework Understand the concepts, principles, processes, features, organizational factors and roles and can explain how these are applied to justify, design and implement the COBIT 5 framework, using the

Implementation guidance

Be able to apply the 7 phases of the Life Cycle, including Challenges and Success Factors, for a given scenario Be able to identify, analyse and distinguish between appropriate and inappropriate use of the 7 Phases of the Implementation Life Cycle for a given scenario.

(4)

4. Syllabus Presentation

For each syllabus area, learning outcomes for each learning level are identified. Each learning outcome is then supported by a description of the requirements that a candidate is expected to meet to demonstrate that the learning outcome has been achieved at the qualification level indicated. These are shown as syllabus topics.

All Foundation level requirements must be met before a candidate can move onto the Implementation training programme. Foundation level knowledge and understanding will not be repeated in this course, but can be used when demonstrating application and analysis of specific learning outcomes.

Syllabus Area Code

CS[2]

Syllabus Area :

QUAL Syllabus Area (XX) Theme [1]

F ou nd ati on P rac ti tion er P rim ary Refe ren c es Level Topic

Know facts, terms and concepts relating to the syllabus area. [3] Specifically to recall: 01 [4] 01 [5] [6] [7] [8] 01 02

Key to the Syllabus Area table

1 Syllabus Area Unit of learning, e.g. chapter of the reference guide or course module.

2 Syllabus Area Code A unique 2 character code identifying the syllabus area. 3 Learning Outcome

(topic header shown in bold)

A statement of what a candidate will be expected to know, understand or do.

4 Level Classification of the learning outcome against the APMG OTE Learning Outcomes Assessment Model.

5 Topic Reference Number of the topic within the learning level.

6 Topic Description Description of what is required of the candidate to demonstrate that a learning outcome has been achieved at the qualification level indicated

7 Foundation/Practitioner Shows at which qualification level the topic is assessed. 8 Primary Reference The main reference supporting the topic.

(5)

6. Learning Areas For The Implementation Syllabus

Syllabus Area Code

Syllabus Area Title

IP Initiate the programme (What are the drivers? - Phase 1)

DP Define Problems & Opportunities (Where are we now and where do we want to be? - Phases 2 & 3)

PE Plan & Execute the programme (What needs to be done & How do we get there? - Phases 4 & 5)

RB Realise Benefits and Review effectiveness (Did we get there and how do we keep the momentum going? - Phases 6 & 7)

This syllabus informs the design of the exam and provides accredited training organizations (ATO’s) with a more detailed breakdown of what the exam will assess. Details on the exam structure and content follow:

Important Points

The following points about the use of the syllabus should be noted: COBIT 5 Implementation Guide

The COBIT 5 Implementation guide references provided should be considered to be indicative rather than comprehensive, i.e. there may be other valid references within the guidance. The main

reference guides for the COBIT 5 Implementation exam are found in:

 COBIT 5 Implementation Guide

 The COBIT 5 Toolkit (contains tools that will be referenced and used in the training) Syllabus Exclusions

(6)

7. Detailed Implementation Syllabus

Syllabus Area Code

IP

Syllabus Area:

Initiate The Programme (What are the drivers? – Phase 1 Challenges) P rac ti tion er P rim ary Refe ren c es Level Topic

Be able to apply key concepts relating to the Phase 1 Drivers required to initiate a COBIT 5 Implementation for a given scenario.

Specifically to identify:

02 01 The root causes associated with the key Phase 1 challenges

 Chapter 4 Page 27 figure 9 02 02 The Critical Success factors associated with the key Phase 1

challenges  Chapter 4 Page 27 figure 9 Level Topic

Be able to apply key concepts relating to the Phase 1 Drivers required to initiate a COBIT 5 Implementation for a given scenario.

03 01 The key roles and responsibilities required to support this phase.

 Chapter 4 page 40 figure 16 & 18 03 02 The challenges, their root causes and success factors in the

initiation Phase 1.  Chapter 4 pages 27 & 28 figure 9 03 03 The ‘need to act’ by recognising the Continual Improvement (CI)

tasks required to perform this phase.

 Chapter 6 page 40 figure 17

(7)

Syllabus Area Code

IP

Syllabus Area:

Initiate The Programme (What are the drivers? – Phase 1 Challenges) P rac ti tion er P rim ary Refe ren c es

03 04 The ‘desire to change’ by establishing the Change Enablement (CE) tasks necessary to perform this phase.

 Chapter 6 page 40 figure 17 03 05 The Programme Management (PM) tasks, inputs and outputs

required to initiate the programme.

 Chapter 6 page 40 figure 17 Be able to identify, analyse and distinguish between appropriate and inappropriate

application of the Phase 1 Drivers required to initiate a COBIT 5 Implementation for a given scenario.

Specifically to analyse with reasons:

04 01 Whether the key roles identified in 0301 are appropriate to support the activities of this phase.

 Chapter 4. page 40 figure 16 and 18 04 02 Whether the challenges, their root causes and critical success

factors identified at 0302 are appropriate for this initiation phase

given the scenario factors. 

Chapter 4 pages 27 & 28 Figure 9 04 03 Whether the (CI) tasks undertaken during Phase 1 recognise ‘the

need to act’ during this phase. And whether the appropriate roles have been involved in their selection, development and maintenance throughout this phase.



Chapter 6 figure 17 page 40 04 04 Whether the (CE) tasks undertaken during Phase 1 ‘establishes

the desire to change’ during this phase. And whether the appropriate roles have been involved in their selection, development and maintenance throughout this phase.



Chapter 6 figure 17 page 40 04 05 Whether the (PM) tasks, inputs and outputs undertaken during

Phase 1 ‘supports the programme initiation phase’. And whether the appropriate roles have been involved in their selection, development and maintenance throughout this phase.

 Chapter 6 figure 17 page 40

(8)

Syllabus Area Code

DP

Syllabus Area:

Define Problems and Opportunities (Where are we now? And where do we want to be? – Phase 2 and Phase 3)

P rac ti tion er P rim ary Refe ren c es Level Topic

Be able to apply key concepts relating to the Phase 2 and Phase 3 problems and opportunities required to define a COBIT 5 Implementation for a given scenario. Specifically to identify:

03 01 The roles and responsibilities required to define problems and opportunities (Phase 2).  Chapter 6 Pages 42/44 figures 20/22

03 02 The roles and responsibilities required to define the road map (Phase 3).  Chapter 6 Pages 44/46 Figures 24/26 03 03 The specific challenges, their root causes and success factors

for the scenario.

 Chapter 4 Page 29 figure 10 03 04 The Continual Improvement (CI) tasks required to ‘assess the

current state’ for the programme (Phase 2).

 Chapter 6 page 42 figure 21 03 05 The Continual Improvement (CI) tasks required to ‘analyse the

gaps’ and ‘define the target state’ for the programme (Phase 3).

 Chapter 6 page 45 figure 25 03 06 The Change Enablement (CE) tasks necessary to ‘form a

powerful implementation team’ for the programme (Phase 2).

(9)

Syllabus Area Code

DP

Syllabus Area:

P rac ti tion er P rim ary Refe ren c es

03 07 The Change Enablement (CE) tasks necessary to ‘describe and communicate the desired outcomes’ for the programme (Phase

3).  Chapter 6 page 45 figure 25 03 08 The Programme Management (PM) tasks, inputs and outputs

required to ‘define the problems and opportunities’ for the

programme (Phase 2).  Chapter 6 page 43 figure 21 03 09 The Programme Management (PM) tasks, inputs and outputs

required to ‘define the road map’ for the programme (Phase 3).

application of the Phase 2 and Phase 3 tasks as they relate to the problems and opportunities defined for a given scenario.

Specifically to analyse with reasons:

04 01 Whether the key roles identified at 0301 are appropriate to support the activities of Phase 2.

 Chapter 6 Pages 42/44 figures 20/22 04 02 Whether the key roles identified at 0302 are appropriate to

support the activities of Phase 3.

 Chapter 6 Pages 44/46 figures 24/26 04 03 Whether the challenges, their root causes and critical success

factors identified at 0303 are appropriate for these two phases

Chapter 4 Page 29 figure 10

(10)

Syllabus Area Code

DP

Syllabus Area:

04 04 Whether the (CI) tasks undertaken during ‘Phase 2’ are appropriate to assess the current state, for the given scenario

factors.  Chapter 6 page 42 figure 21 04 05 Whether the (CI) tasks undertaken during ‘Phase 3’ are

appropriate to analyse the gaps and define the target state for

the given scenario factors. 

Chapter 6 page 45 figure 25 04 06 Whether the (CE) tasks undertaken during ‘Phase 2 and Phase

3’ have been appropriately applied to form the implementation team for the given scenario factors.

 Chapter 6 page 43 figure 21 04 07 Whether the (CE) tasks undertaken during ‘Phase 3’ have been

appropriately applied to communicate the desired outcome for the given scenario factors.

 Chapter 6 page 45 Figure 25 04 08 Whether the (PM) tasks, inputs and outputs undertaken during

‘Phase 2’ support the definition of problems and opportunities for

the given scenarios. 

Chapter 6 page 43 Figure 21 04 09 Whether the (PM) tasks, inputs and outputs undertaken during

‘Phase 3’ support the definition of a road map for the given

scenarios.  Chapter 6 page 45 Figure 25

(11)

Syllabus Area Code

PE

Syllabus Area:

Plan & Execute The Programme (What needs to be done and How do we get there? – Phases 4 & 5)

Be able to understand the Challenges, Root Causes and their Critical Success Factors associated with Phases 4 and 5, Planning and Execution.

02 01 The Root Causes for the challenges associated with these phases.  Chapter 4 Pages 31/32 Figures 11/12 02 02 The Critical Success factors for the challenges associated with

these phases.  Chapter 4 Pages 31/32 Figures 11/12 Be able to apply key concepts relating to the Phase 4 and 5 Tasks required to plan

and execute a COBIT 5 Implementation for a given scenario. Specifically to identify:

03 01 The Key roles and responsibilities required for planning the implementation (Phase 4).  Chapter 6 pages 47/49 figures 28/30 03 02 The Key roles and responsibilities required to execute the plan

for the implementation (Phase 5).

 Chapter 6 pages 49/ 51 figures 32/34 03 03 The specific challenges, their root causes and success factors

for the scenario.

 Chapter 4 Pages 30/31/ 32 figures 11/12

(12)

Syllabus Area Code

PE

Syllabus Area:

03 04 The Continual Improvement (CI) tasks required to design and build improvements (Phase 4).

 Chapter 6 page 48 figure 29 03 05 The Continual Improvement (CI) tasks required to implement

improvements (Phase 5).  Chapter 6 page 50 figure 32 03 06 The Change Enablement (CE) tasks that ‘empower role players’

to identify what needs to be done (Phase 4).

 Chapter 6 pages 48 figure 29 03 07 The Change Enablement (CE) tasks to enable operation and use

of the improvements (Phase 5).

 Chapter 6 pages 50 figure 32 03 08 The Programme Management (PM) tasks, inputs and outputs

that support the development of the plan (Phase 4).

that support the execution of the plan (Phase 5).

application of the Phase 4 and Phase 5 tasks as they relate to the planning and execution of the programmefor a given scenario.

(13)

Syllabus Area Code

PE

Syllabus Area:

04 01 Whether the key roles selected at 0301 are appropriate to support the planning activities for Phase 4.

 Chapter 6 pages 47/49/ figures 28/30 04 02 Whether the key roles selected at 0302 are appropriate to

support the execution of the planning activities for Phase 5.

 Chapter 6 pages 49/ 51 figures 32/34 04 03 Whether the challenges, their root causes and critical success

factors identified at 0303 are appropriate for these two phases given the scenario factors.

 Chapter 4 Pages 30/31/ 32 Figures 11/12 04 04 Whether the (CI) tasks undertaken during Phase 4 are

appropriate to design and build the improvements for the given

scenario factors.  Chapter 6 page 48 figure 29 04 05 Whether the (CI) tasks undertaken during Phase 5 are

appropriate to implement the improvements for the given

scenario factors.  Chapter 6 page 50 figure 32 04 06 Whether the (CE) tasks undertaken during Phase 4 have been

appropriately applied so that role players are empowered for the

given scenario factors. 

Chapter 6 page 48 figure 29 04 07 Whether the (CE) tasks undertaken during Phase 5 have been

appropriately applied so that the operation and use of the improvements have been appropriately enabled for the given scenario factors.  Chapter 6 page 50 figure 32

(14)

Syllabus Area Code

PE

Syllabus Area:

04 08 Whether the (PM) tasks, inputs and outputs undertaken during Phase 4 are appropriate for the planning of the programme, for

the given scenario factors. _

Chapter 6 page 48 figure 29 04 09 Whether the (PM) tasks, inputs and outputs undertaken during

Phase 5 are appropriate for the execution of the programme, for the given scenario factors.

(15)

Syllabus Area Code

RB

Syllabus Area:

Realise Benefits and Review Effectiveness of the

Improvements (Did we get there and How can we keep the momentum going? – Phases 6 and 7)

Be able to understand the Root Causes and Critical Success Factors associated with Phases 6 and 7, Realise Benefits and Review effectiveness.

02 01 The root causes for the challenges associated with these phases.  Chapter 4 Page 33 figure 13 02 02 The success factors for the challenges associated with these

phases.  Chapter 4 Page 33 figure 13 Be able to apply key concepts relating to the Phase 6 and 7 Tasks related to

realising benefits and keeping the momentum going for a given scenario. Specifically to identify:

03 01 The Key roles and responsibilities required for realising the benefits at Phase 6.  Chapter 6 pages 51/53 figures 36/38 03 02 The Key roles and responsibilities required for ‘keeping the

momentum going’ at Phase 7.

 Chapter 6 pages 53/ 55 figures 40/42 03 03 The specific challenges, their root causes and success factors

for the scenario.

 Chapter 4 Page 33 figure 13

(16)

Syllabus Area Code

RB

Syllabus Area:

03 04 The Continual Improvement (CI) tasks required to operate and measure the improvements (Phase 6).

 Chapter 6 page 52 figure 37 03 05 The Continual Improvement (CI) tasks required to monitor and

evaluate the improvements (Phase 7).

 Chapter 6 page 54 figure 41 03 06 The Change Enablement (CE) tasks that embed new

approaches (Phase 6).  Chapter 6 page 52 figure 37 03 07 The Change Enablement (CE) tasks that sustain new

approaches for the improvements (Phase 7).

that support the realisation of benefits of the improvements (Phase 6).  Chapter 6 page 52 figure 37 03 09 The Programme Management (PM) tasks, inputs and outputs

that support the effective review of the programme effectiveness (Phase 7).  Chapter 6 page 54 figure 41 Be able to identify, analyse and distinguish between appropriate and inappropriate

application of the Phase 6 and Phase 7 tasks as they relate to the realisation of benefits and the effective review of the programme for a given scenario. Specifically to analyse with reasons:

(17)

Syllabus Area Code

RB

Syllabus Area:

04 01 Whether the key roles selected are appropriate to support the activities for realising the benefits (Phase 6).

 Chapter 6 pages 51/53 figures 36/38 04 02 Whether the key roles selected are appropriate to support the

activities for reviewing the activities (Phase 7).

 Chapter 6 pages 53/ 55 figures 40/42 04 03 Whether the challenges, their root causes and critical success

factors identified at 0303 are appropriate for these two phases

Chapter 4 Page 33 Figure 13 04 04 Whether the (CI) tasks undertaken during Phase 6 are

appropriate to allow benefits realisation for the given scenario factors.  Chapter 6 page 52 figure 37 04 05 Whether the (CI) tasks undertaken during Phase 7 are

appropriate to allow monitoring and evaluation of the improvements for the given scenario factors.

 Chapter 6 pages 54 figure 41 04 06 Whether the (CE) tasks undertaken during Phase 6 have been

appropriately applied to allow new approaches to be embedded for the given scenario factors.

 Chapter 6 pages 52/54 figures 37/41 04 07 Whether the (CE) tasks undertaken during Phase 7 have been

appropriately applied to allow new approaches to be sustained for the given scenario factors.

(18)

Syllabus Area Code

RB

Syllabus Area:

04 08 Whether the (PM) tasks, inputs and outputs undertaken during Phase 6 are appropriate to support the realisation of benefits for

Chapter 6 pages 52 figures 37 04 09 Whether the (PM) tasks undertaken during Phase 7 are

appropriate to support the effective review of the programme for

Chapter 6 pages 54 figure 41