COBIT has three dimensions of maturity. What do they mean?
The three dimensions, as explained in the COBIT framework, are capability, performance and control. They can be used to be more precise when assessing maturity for a given IT process in a specific situation. The application of these dimensions is left to the COBIT user to decide depending on how detailed and precise the maturity assessment needs to be and the scope of the assessment target area. • Capability is the level of maturity required in the process to meet business requirements (ideally driven by clearly defined business and IT goals). The COBIT maturity models focus on capability and help an enterprise recognize the capability that best fits specific process requirements. • Coverage is a measure of performance, i.e., how and where the capability needs to be deployed based on business need, and investment decisions based on costs and benefits. For example, a high level of security may have to be focused upon only for the most critical enterprise systems. • Control is a measure
