IVI Framework Viewer

IT Capability Maturity Framework (18.10)

The IT Capability Maturity Framework (IT-CMF) enables decision-makers to identify and develop the IT capabilities they need in the organization to deliver agility, innovation and business value.

For a complete introduction to IT-CMF and its structure, see Introduction to IT-CMF.

Structure

Managing IT like a Business
AAAccounting and Allocation

The Accounting and Allocation (AA) capability is the ability to define and manage the policies, processes, and tools used for calculating the costs of IT and distributing them across the organization.

BPBusiness Planning

The Business Planning (BP) capability is the ability to produce an approved document that provides implementable detail for the IT strategy, setting out the IT function's tactical objectives, the operational services to be provided, and the financial and other resources and constraints that apply in the coming planning period. The Business Planning (BP) capability covers:

  • Allocating responsibility to specific employees for IT business planning.
  • Managing appropriate financial and non-financial resources and their capacities for ongoing IT business planning activities.
  • Specifying the requirements for each activity in the IT business plan.
  • Seeking the support of relevant stakeholders for the IT business plan.
  • Reviewing the IT business plan against actual performance.
BPMBusiness Process Management

The Business Process Management (BPM) capability is the ability to identify, design, document, monitor, optimize, and assist in the execution of both existing and new organizational processes. The Business Process Management (BPM) capability covers:

  • Implementing process improvement initiatives and driving cultural change for business process improvement.
  • Selecting, developing, and applying methods, governance models, technologies, skills, roles, and communication materials that support management of the organization's processes.
  • Developing and applying graphical representations of processes—for example, process architecture diagrams.
  • Adopting technologies that automate and assist with the execution of business process management.
CFPCapacity Forecasting and Planning

The Capacity Forecasting and Planning (CFP) capability is the ability to model and forecast demand for IT services, infrastructure, facilities, and people. The Capacity Forecasting and Planning (CFP) capability covers:

  • Collecting capacity-related strategic and operational information.
  • Designing and advancing IT capacity forecasting models to demonstrate how business forecasts might impact the resources required by the IT function.
  • Modelling the current and future capacity requirements across all IT-related resources — for example, services, infrastructure, facilities, and people.
  • Communicating insights from capacity planning to the relevant stakeholders.
DSMDemand and Supply Management

The Demand and Supply Management (DSM) capability is the ability to manage the IT services portfolio in such a way that there is a balance between the demand for and the supply of IT services. The Demand and Supply Management (DSM) capability covers:

  • Analysing and managing the existing and future business demand for IT services.
  • Analysing and managing the existing and future supply of IT services.
  • Proposing responses to address gaps between the demand for and supply of IT services, for both the short term and the long term.
  • Fostering collaboration between IT and other business units to manage the IT services portfolio.
  • Understanding trade-offs between satisfying demand and the cost of supply — for example, by using emerging technologies or by changing the nature of the demand.
EIMEnterprise Information Management

The Enterprise Information Management (EIM) capability is the ability to establish effective systems for gathering, analysing, disseminating, exploiting, and disposing of data and information. The data can be held in any medium – all forms of digital storage, film, paper, or any other recording mechanism used by the organization.

GOVGovernance

The Governance (GOV) capability is the ability to evaluate, direct, and monitor the current and future use of an organization's IT resources in support of strategic objectives.

GITGreen Information Technology

The Green Information Technology (GIT) capability is the ability to minimize the environmental impact of IT, and to make the best use of technology to minimize environmental impact across the organization.

IMInnovation Management

The Innovation Management (IM) capability is the ability to manage all aspects of innovation to the benefit of the organization and its stakeholders.

LDPLeadership

The IT Leadership (LDP) capability is the ability to guide the organization in making the optimal use of technology and related assets to drive business value.

ODPOrganization Design and Planning

The Organization Design and Planning (ODP) capability is the ability to manage the IT function's internal structure and its interfaces with other business units, suppliers, and business partners.

OCMOrganizational Change Management

The Organizational Change Management (OCM) capability is the ability to plan for and manage IT-related change, and to support organizations as they go through it. OCM covers gaining and maintaining commitment to change, implementing and evaluating the impact of change, and embedding sustainable change processes in the organization.

RMRisk Management

The Risk Management (RM) capability is the ability to identify, assess, prioritize, treat, and monitor the exposure to and the potential impact of IT-related risks that can directly affect the business. Risks include traditional IT risks and those more specific to the transformational changes brought about by new and emerging technologies; they include those mainly associated with IT security, data protection and information privacy, business operations, continuity of business and recovery from declared disasters, IT investment and project/service delivery, and IT service contracts and suppliers.

SAIService Analytics and Intelligence

The Service Analytics and Intelligence (SAI) capability is the ability to define and quantify the relationships between IT infrastructure, IT services, and IT-enabled business processes.

SSMSourcing and Supplier Management

The Sourcing and Supplier Management (SSM) capability is the ability to evaluate, select, integrate, and manage IT suppliers in line with defined sourcing and supplier management strategies.

SPStrategic Planning

The Strategic Planning (SP) capability is the ability to formulate a long-term vision and translate it into an actionable strategic plan for the IT function.

Managing the IT Budget
BGMBudget Management

The Budget Management (BGM) capability is the ability to oversee and adjust the IT budget to ensure that it is spent effectively.

BOPBudget Oversight and Performance Analysis

The Budget Oversight and Performance Analysis (BOP) capability is the ability to compare actual IT expenditure against budgeted IT expenditure over extended time periods. Where appropriate, it offers management the opportunity to reprofile or reprioritize budget forecasts and allocations.

FFFunding and Financing

The Funding and Financing (FF) capability is the ability to determine the funding level required for IT and to allocate it appropriately.

Managing the IT Capability
CAMCapability Assessment Management

The Capability Assessment Management (CAM) capability is the ability of the organization to conduct current state evaluations and plan improvements for its portfolio of IT capabilities. Current state evaluations involve gathering and documenting data about the specific IT capabilities in the organization. The results then inform the planning and execution of improvement actions to deal with any deficiencies. The Capability Assessment Management (CAM) capability covers:

  • Selecting an overarching capability framework and mapping other frameworks used in the organization to it.
  • Managing continuous improvement of the organization’s IT capabilities.
  • Securing appropriate senior management sponsorship for IT capability improvement.
  • Promoting organizational buy-in and incentivizing participation in capability improvement evaluation and planning.
  • Planning, preparing, and conducting capability evaluations.
  • Setting IT capability targets and defining development roadmaps for key IT capabilities.
DAData Analytics

The Data Analytics (DA) capability is the ability to specify analytical objectives, to identify data sets likely to enable those objectives, to apply analytical methods and techniques appropriate to those objectives, and to interpret, communicate, and exploit the analytical results to deliver value for the organization.

EAMEnterprise Architecture Management

The Enterprise Architecture Management (EAM) capability is the ability to envision, plan, design, lead, manage, and control organizations, systems, and/or processes in current, transitionary, and future states, and the relationships between them. Architecture conceptualizations may be layered to represent specific types of relationships — for example, those between applications, business services, internal IT services, security, networking, data storage, and so on.

ISMInformation Security Management

The Information Security Management (ISM) capability is the ability to manage approaches, policies, and controls that safeguard the integrity, confidentiality, accountability, usability, and availability of information.

KMKnowledge Management

The Knowledge Management (KM) capability is the ability to identify, capture, classify, analyse, share, and exploit knowledge to improve organizational performance.

PAMPeople Asset Management

The People Asset Management (PAM) capability is the ability to meet the organization's requirements for an effective IT workforce.

PDPPersonal Data Protection

The Personal Data Protection (PDP) capability is the ability to develop and deploy policies, systems, and controls for processing personal and sensitive personal data relating to living persons in all digital, automated, and manual forms. It ensures that the organization safeguards the right to privacy of individuals whose information it holds, and that the organization uses personal data strictly for specified purposes agreed with the data subjects.

PGMProgramme Management

The Programme Management (PGM) capability is the ability to assemble and assign resources to identify, select, approve, oversee, and deliver value from programme co-ordinated components (i.e. subprogrammes and projects). Managing the programme will prioritize, monitor, track, analyse, and report on programmes and programme components. It will also leverage component synergies.

PMProject Management

The Project Management (PM) capability is the ability to assign resources to initiate, plan, execute, monitor, control, and close projects that deliver project objectives within agreed variances of cost, timeliness, quality, and scope of works. Projects are temporary (PMI, 2017b) and may deliver temporary or semi-permanent infrastructure, new capabilities, unique or new products or services, learning and awareness that a business can leverage.

REMRelationship Management

The Relationship Management (REM) capability is the ability to analyse, plan, maintain, and enhance relationships between the IT function and the rest of the business.

SRPService Provisioning

The Service Provisioning (SRP) capability is the ability to manage IT services to satisfy business requirements. This includes ongoing activities relating to operations, maintenance, and continuous service improvement, and also transitional activities relating to the introduction of services, their deployment, and their eventual decommissioning.

SDSolution Delivery

The Solutions Delivery (SD) capability is the ability to design, develop, validate, and deploy IT solutions that effectively address the organization's business requirements and opportunities.

TIMTechnical Infrastructure Management

The Technical Infrastructure Management (TIM) capability is the ability to manage an organization's IT infrastructure across its complete life cycle of:

  • Transitional activities including building, deploying, and decommissioning.
  • Operational activities including day-to-day operations, maintenance, and continuous improvement.
UEDUser Experience Design

The User Experience Design (UED) capability is the ability to proactively consider the needs of users at all stages in the life cycle of IT services and solutions.

UTMUser Training Management

The User Training Management (UTM) capability is the ability to provide training that will improve user proficiency in the use of business applications and other IT-supported services.

Managing IT for Business Value
BARBenefits Assessment and Realisation

The Benefits Assessment and Realization (BAR) capability is the ability to establish an outcomes focus for the selection and management of IT-enabled business change initiatives to ensure that their potential value is delivered. BAR addresses the cultural and behavioural change needed to create and to sustain value from those initiatives. In this way, BAR ensures that business benefits are planned, dynamically adjusted, and actually achieved.

PPMProject Portfolio Management

The Project Portfolio Management (PPM) capability is the ability to select, approve and balance project portfolio components (projects, programmes, or sub-portfolios) to deliver the organization's strategic objectives and its operational needs. Managing the project portfolio will prioritize, monitor, track, analyse, report, and as necessary, terminate project portfolio components that plan to, or that currently consume organizational resources.

TCOTotal Cost of Ownership

The Total Cost of Ownership (TCO) capability is the ability to identify, compare, and control all direct and indirect costs associated with IT assets and IT-enabled business services.

Changelog for 18.10