Attachment: IT Governance Book Figure 49: RACI matrix in phase two of COBIT – Where are we now?

The tasks of the COBIT activties are clear, and the assigned responsibilities are as well, but the organisation needs to apply this best-practice approach of RACI to its own needs. For example, the task to assess current performance of critical processes can be done in different ways, based on different methods. Some organisations will already have performance-assessment models in place (e.g., CMMI [CMMI Institute 2016]); others may have none.