There is some evidence that tasks are performed, but there are no standardized procedures. Success relies on the effort and competence of specific individuals rather than repeatable steps. Handovers are messy, and results are unpredictable.
In the latest evolution of the framework, , the system for measuring performance has shifted toward a model inspired by Capability Maturity Model Integration (CMMI) . This shift distinguishes between "Capability Levels," which measure individual process performance, and "Maturity Levels," which assess the overall effectiveness of a specific focus area (like cybersecurity or DevOps). The 6 COBIT Maturity Levels (0–5) cobit maturity levels
A COBIT maturity assessment typically follows these steps: There is some evidence that tasks are performed,