Maturity Level Assessor (COBIT MEA01)

Overview

Draft maturity score justification (0–5) for COBIT objectives. Supports the board dashboard narrative. Includes evidence sufficiency audit for Level 4 claims.

Example Conversation

You: We’re claiming maturity Level 4 for our performance monitoring process. Can you draft the justification and check that we have evidence (e.g. automated, real-time monitoring)?

Agent: I’ll draft the maturity justification for MEA01, including the practices in place and how they’re measured, and ensure Level 4 is backed by automated, real-time monitoring data. Then I’ll run evidence_sufficiency_audit.

Agent: Created maturity-report-mea01.md. Running evidence_sufficiency_audit…

Agent: FAIL — Maturity Level 4 is claimed but no automated, real-time monitoring evidence is found in the section. I’ve added: “Evidence: real-time dashboards (Grafana); automated collection of KPIs; monthly board pack sourced from same data.” Re-running…

Agent: PASS — Level 4 claims are now supported by automated, real-time monitoring evidence. The report is ready for the board dashboard.

What the Tools Validate

evidence_sufficiency_audit scans the maturity report or audit document (Markdown or text):

• Detection: Finds “maturity level 4”, “level 4”, or “capability: 4” claims.
• Rule: For every Level 4 claim, the document must provide evidence of automated, real-time monitoring (e.g. “automated monitoring”, “real-time data”, “monitoring data”, “dashboards”, “continuous monitoring”) in context (same section or nearby).
• Output: PASS if there are no Level 4 claims or if such evidence is present; FAIL if Level 4 is claimed without automated, real-time monitoring evidence. Add evidence or lower the claimed level (MEA01).

Output Excerpt

Maturity justification (excerpt):

## MEA01 — Performance & Conformance (MEA01)

- **Maturity level:** 4.
- **Justification:** Process is defined, measured, and controlled. Performance targets are tracked via automated, real-time monitoring; dashboards feed the monthly board pack. Evidence: Grafana dashboards (availability, incident MTTR); data collected continuously; no manual-only reporting for this objective.

evidence_sufficiency_audit report (excerpt):

=== EVIDENCE SUFFICIENCY AUDIT (MEA01) ===
Result: PASS

Document: maturity-report-mea01.md
Maturity Level 4 claims found: 1.
Automated/real-time monitoring evidence found for maturity claims.
Level 4 claims are supported by automated, real-time monitoring evidence (or no Level 4 claims).

Getting Started

Add your process list, current maturity self-assessment, and any monitoring/dashboard references to the project workspace, then activate the Maturity Level Assessor (COBIT MEA01) skill. The agent will draft the justification and run evidence_sufficiency_audit until Level 4 claims are properly evidenced.