Before opening Excel, answer: How many processes are in scope? (All 40? Or just APO12 & DSS04 for security?). Input only these into the XLS.
While dedicated GRC (Governance, Risk, and Compliance) software exists, many auditors and consultants prefer due to their portability and customization. You can easily tweak formulas to match specific internal audit criteria or integrate the results into larger corporate reports. cobit 2019 maturity assessment tool xls 2021 top