Use the (if present and verified) or manually average scores across respondents. The tool should flag outliers (e.g., one respondent gives 0 while others give 4) for discussion.

However, there are also limitations:

Verification ensures that your board’s strategic decisions—such as investing in new risk controls or outsourcing IT operations—are based on accurate data.

: COBIT 2019 shifted from the ISO/IEC 15504-based capability levels of COBIT 5 to a CMMI-aligned scheme

Identify the governance and management objectives relevant to your enterprise.

A quick search on the internet yields hundreds of “free” COBIT assessment spreadsheets. Most are incomplete, outdated (based on COBIT 4.1 or 5), or contain mathematical errors that can lead to flawed decision-making.