Analysis study of the relation in between ITIL,COBIT,TOGAF and CMMI

Information Technology Management and Standards Homework I, 24.03.15
Analysis study of the relation in between ITIL,COBIT,TOGAFand CMMI
Analysis study of the relation in between
ITIL,COBIT,TOGAF and CMMI
Istanbul University
Computer Engineering Departmant
Information Technology Management and Standards Homework I
1358100014 Havva ÇİMEN
This paper consists of two parts Definations-Details and Conclusions
Definations and Details of Study
Information Technology Infrastructure Library (ITIL) describes Best Practice in IT service
management. It provides a framework for the governance of IT and focuses on the continual
measurement and improvement of the quality of IT service delivered, from both a business and a
customer perspective. This focus is a major factor in ITIL‟s worldwide success and has contributed to
its prolific usage and to the key benefits obtained by those organizations deploying the techniques and
processes throughout their organizations.
Control Objectives for Information and Related Technology (COBIT) is a framework created
by ISACA for information technology (IT) management and IT governance. It is a supporting toolset
that allowsmanagers to bridge the gap between control requirements, technical issues and business
risks.
COBIT and ITIL have been used by information technology professionals in the IT service
management (ITSM) space for many years. Used together, COBIT and ITIL provide guidance for the
governance and management of IT-related services by enterprises, whether those services are provided
in-house or obtained from third parties such as service providers or business partners.
Enterprises need to govern and manage their information and related technology assets and resources,
and those arrangements customarily include both internal and external services to satisfy specific
stakeholder needs. COBIT aims primarily to guide enterprises on the implementation, operation and,
where required, improvement of their overall arrangements relating to governance and management of
enterprise IT (GEIT). ITIL provides guidance and good practice for IT service providers for the
execution of IT service management from the perspective of enabling business value.
COBIT is broader than ITIL in its scope of coverage (GEIT). It is based on five principles (meeting
stakeholder needs; covering the enterprise end to end; applying a single, integrated framework;
enabling a holistic approach; and separating governance from management) and seven enablers
(principles, policies and frameworks; processes; organizational structures; culture, ethics and behavior;
information; services, infrastructure and applications; people, skills and competencies).
Information Technology Management and Standards Homework I, 24.03.15
Analysis study of the relation in between ITIL,COBIT,TOGAFand CMMI
ITIL focuses on ITSM and provides much more in-depth guidance in this area, addressing five stages
of the service life cycle: service strategy, service design, service transition, service operation and
continual service improvement.
The distinction between the two is sometimes described as “COBIT provides the „why‟; ITIL provides
the „how.‟” While catchy, that view is simplistic and seems to force a false “one or the other” choice.
It is more accurate to state that enterprises and IT professionals who need to address business needs in
the ITSM area would be well served to consider using both COBIT and ITIL guidance. Leveraging the
strengths of both frameworks, and adapting them for their use as appropriate, will aid in solving
business problems and supporting business goals achievement.
The Open Group Architecture Framework (TOGAF) is a framework, a detailed method and a set
of supporting tools for developing an enterprise architecture. TOGAF is developed and maintained by
members of The Open Group, working within the Architecture Forum
Specifically, use of TOGAF will:
• Enable users to implement and gain the benefits of genuinely open systems solutions at reduced cost
• Simplify the related processes of open systems design, planning, product procurement, and
implementation
• Help the IT function to better communicate its goals and strategy to corporate management
Both frameworks are a set of best or good practices. Furthermore, they both contain an extended
version of Deming‟s quality cycle. In TOGAF it is referred to as the „Architecture Development
Method (ADM)‟ and in ITIL it is dubbed the „IT Service Lifecycle‟. Another similarity between the
frameworks is that they both originated in IT, thus explaining to a large degree why integration of both
frameworks with the business is not yet a common practice.
detail of connection between ITIL and TOGAF of the figüre 4.
Besides a number of similarities between the frameworks, there are also a number of differences.
Although both frameworks contain a quality loop, these loops do not completely overlap. Figure 4
depicts which parts of the two frameworks are actually connected. The two main differences are:
• Developing business architecture is part of the TOGAF framework (as demonstrated in Phase A).
The scope of ITIL is limited to developing an effective and efficient IT department, whilst developing
business architecture is out of scope in ITIL.
Information Technology Management and Standards Homework I, 24.03.15
Analysis study of the relation in between ITIL,COBIT,TOGAFand CMMI
• Running IT operations and delivering actual IT services are within the scope of ITIL (as
demonstrated in the Service Operation volume). TOGAF does not cover the development and
maintenance of a run time environment. How services are actually produced and delivered is not
covered in TOGAF. After an IT solution has become part of the operational environment, it turns into
(part of) one or more services, with which TOGAF is not concerned.
İf we will analyze the relationship between COBIT and TOGAF we can mention as follows.
COBIT convers most of the activities of TOGAF
 Describes them only at high level
 Provides a slighlty different view on activities and deliverables
 Convers only the IT-perspective; enterprise architecture also includes
Cobit adds informations to the TOGAF activities
 Relates them to generic It-related goals and accompaying metrics
 Adds architecture-specific process goals and accompaying metrics
 Adds responsibilities for TOGAF activities in the from of RACI chart
Cobit outs togaf ino context by relating architecture processes to all other IT- processes
Capability Maturity Model Integration (CMMI) is a process improvement training and appraisal
program and service administered and CMMI can be used to guide process improvement across a
project, division, or an entire organization. CMMI defines the following maturity levels for processes:
Initial, Managed, Defined, Quantitatively Managed, Optimizing.
When we talk about difference between ITIL and CMMI;
The basic difference between CMMI and ITIL lies in application. While CMMI is focused toward
software development, maintenance, and product integration, ITIL is broader in scope and provides a
framework for IT service management and operations including a hardware life cycle.
CMMI is geared specifically to software development organizations and focuses on continuous
improvement, whereas ITIL addresses IT operations issues such as security, change and configuration
management, capacity planning, troubleshooting, and service desk functions.
While the application of CMMI helps the organization gain competency and expertise in software or
product development, ITIL applications help align the entire IT process and resources of the
organization to business processes.
When we talk about Structure of the CMMI;
CMMI is a descriptive approach that orders process areas along a maturity model with maturity levels.
A CMMI model is not a process but a description of effective process characteristics.
Unlike CMMI, ITIL is not descriptive and orders the processes in sets. CMMI for instance,
recommends requirement analysis but does not specify how to do a requirement analysis. ITIL on the
other hand, provides specifics on how to undertake the requirement analysis.
When we talk about similarities between CMMI and ITIL;
Both CMMI and ITIL are process maturity frameworks that follow a similar and structured approach.
Both emphasize development of processes to improve product development and customer satisfaction
and support the coordination of multi-disciplinary activities related to a project.
Information Technology Management and Standards Homework I, 24.03.15
Analysis study of the relation in between ITIL,COBIT,TOGAFand CMMI
Although both CMMI and ITIL are similar in structure, the amount of duplication is, however, small
and there is no contradiction between the two models, making it possible to apply both CMMI / ITIL
models simultaneously in an organization. CMMI is the de facto quality standard for software
development, integration, deployment, and maintenance processes in organizations and ITIL is the
first choice of organizations for standards related to operations and the infrastructure side of IT.
Implementation of CMMI / ITIL also aids organizations in reducing the cost of quality, improving
turnaround times, and arriving at a precise estimate of efforts required that helps in costing products.
Conclusions of Study











ITIL was designed as a service managament framework to help you understand how you
support processses, how you deliver services
COBIT was designed as an IT governance model, particularly and initially with audit in mind
to give you control objectives and control practices on how that process should behave
The difference between the two is, COBIT tells you what you should be doing, while ITIL
tells you how you should be doing it
Put them together, and you have a very powerful model of what you need to be doing and how
you need to be doing it, when it comes to your process management
ITIL can be seen as an architecture for IT serivice managament. Both
frameworks(ITIL,COBIT) provide guidance for design
Togaf desciribes design at an enterprise arhitecture level ITIL desciribes design at a solution
(arhitecture) level.
An architecture developed with TOGAF requires input from as well as provides input for ITIL
processes.
The repositories that support ITIL and TOGAF are related and should build upon each other
CMMI is the de facto quality standard for software development, integration, deployment, and
maintenance processes in organizations and ITIL is the first choice of organizations for
standards related to operations and the infrastructure side of IT.
ITIL and CMMI best apply to different parts of the IT organization
Use CMMI in application development
Use CMMI in ICT infrastructive projects
Use ITIL im IT operations and services
CMMI,COBIT and ITIL provide complementary models for different IT functions:
Use CMMI and ITIL implement practices that support COBIT control objectives
Apply CMMI or IITIL to appropriate parts of the IT organization
I think, draw from all standarts when designing and implementing processes to ensure a
more complete and robust implementation.
References
https://www.wikipedia.org/
Digite.com. CMMI to ITIL: An obvious graduation?
FoxIT. Introduction to The IT Infrastructure Library (ITIL).
Serge Thorn. ITIL and CMMI synergies
CMMI FAQ - http://www.cmmifaq.info/
http://www.opengroup.org
http://www.best-management-practice.com
"CMMI for Service", Software Engineering Software, 2010
P.HILL and K. Turbitt, "Combine ITIL and COBIT to Meet Business Challenges", ITGI