IT-CMF - Innovation Value Institute (2016)

Theory Publication Information

Citation Information

Why Was the Model Created?

Beginning in the early 2000s with the transformation of Intel Corporation’s IT function, IT leaders recognized significant challenges in demonstrating technology value to business stakeholders. While frameworks existed for assessing software development maturity (CMM, CMMI) and IT service quality (ITIL), no comprehensive framework directly addressed the broader IT capability maturity question: how mature is our IT organization in creating business value?

The Innovation Value Institute (IVI) at Maynooth University, in collaboration with Intel and a consortium of 100+ leading organizations, recognized that existing maturity frameworks were fragmented and did not provide integrated assessment of the full spectrum of IT capabilities required for business value creation. Organizations lacked systematic way to evaluate whether their IT capabilities aligned with business strategy, supported innovation, managed risk appropriately, and delivered measurable value.

IT-CMF was created to establish comprehensive, business-value-focused maturity framework spanning the full range of IT management and capability domains. Unlike software-focused frameworks (CMMI) or service-focused frameworks (ITIL), IT-CMF explicitly connects IT capability maturity to business value creation. The framework emerged from collaborative research with over 100 consortium member organizations and IT leaders, ensuring framework relevance to real-world IT management challenges.

Core Concepts and Definitions

IT-CMF centers on several core concepts:

• IT Capability: Organizational ability to perform IT-enabled activities consistently and effectively. Capabilities span strategy, governance, delivery, and value management.
• Critical Capability: 36 specific IT capabilities identified as essential for IT organizations to deliver value. Critical Capabilities span four macro-capability categories.
• Maturity Level: Five-level scale (Initial, Basic, Intermediate, Advanced, Optimizing) describing progression in capability sophistication and business impact.
• Macro-Capability: Four broad IT management domains: Managing IT like a Business, Managing the IT Budget, Managing the IT Capability, Managing IT for Business Value.
• Business Value: Tangible and intangible benefits IT delivers to organization. IT-CMF explicitly emphasizes that IT capability maturity should drive measurable business value.
• IT Governance: Frameworks and processes ensuring IT decisions align with business strategy and organizational values. Governance is foundational to IT-CMF.
• Capability Assessment: Systematic evaluation of current capability maturity against defined capability levels. Assessment identifies improvement opportunities.

Preceding Models or Theories

IT-CMF built upon and extended several prior capability and IT management frameworks:

• Capability Maturity Model (CMM, Carnegie Mellon 1991):CMM established 5-level maturity model for software development processes. IT-CMF adapted CMM's maturity level structure while extending to IT management beyond software development.
• Capability Maturity Model Integration (CMMI, SEI 2002): CMMI extended CMM to systems and IT service management. IT-CMF incorporated CMMI concepts while creating broader IT capability framework.
• IT Infrastructure Library (ITIL, 1989 onwards): ITIL established best practices for IT service management. IT-CMF incorporated ITIL principles while expanding to broader IT value creation.
• COBIT (Control Objectives for Information and related Technology, ISACA 1996): COBIT provided IT governance and control framework. IT-CMF aligned with COBIT governance principles while emphasizing value creation.
• Balanced Scorecard (Kaplan & Norton, 1992): Balanced Scorecard framework for business performance measurement influenced IT-CMF's emphasis on IT business value measurement.
• IT Portfolio Management Approaches (1990s-2000s):IT portfolio management practices informed IT-CMF's emphasis on IT investment and business-IT alignment.

Describe The Model

IT-CMF provides comprehensive framework for assessing and improving IT capability maturity through integrated evaluation of 36 Critical Capabilities organized into four macro-capability categories, each evaluated against five maturity levels ranging from Initial to Optimizing.

Four Macro-Capabilities

IT-CMF organizes 36 Critical Capabilities into four macro-capability domains:

• Managing IT like a Business: Capabilities for treating IT as strategic business function requiring business discipline, strategy alignment, and governance. Includes 14 critical capabilities spanning governance, strategy, business relationship, and organizational design.
• Managing the IT Budget: Capabilities for financial management, investment justification, cost optimization, and IT spending alignment with business value. Includes 4 critical capabilities: Budget Management, Budget Oversight and Performance Analysis, Funding and Financing, and Portfolio Planning and Prioritization.
• Managing the IT Capability: Capabilities for IT delivery excellence including service management, architecture, quality, security, and risk management. Includes 15 critical capabilities for development, delivery, and operational excellence.
• Managing IT for Business Value: Capabilities for ensuring IT investments create demonstrable business value through benefit realization, performance management, and continuous value creation. Includes 3 critical capabilities: Benefits Assessment and Realization, Portfolio Management, and Total Cost of Ownership.

Five Maturity Levels

Each Critical Capability is assessed on five maturity levels:

• Level 1 - Initial: Approaches are inadequate and unstable. Scope is fragmented and incoherent. Repeatable outcomes are rare.
• Level 2 - Basic: Approaches are defined but inconsistencies remain. Scope is limited to a partial area of a business function or domain. Repeatable outcomes are achieved occasionally.
• Level 3 - Intermediate: Approaches are standardized and inconsistencies are addressed. Scope expands to cover a business function (typically IT) or domain area. Repeatable outcomes are often achieved.
• Level 4 - Advanced: Approaches can systematically flex for innovative adaptations. Scope covers the end-to-end organization and neighboring domain areas. Repeatable outcomes are very often achieved.
• Level 5 - Optimizing: Approaches demonstrate world-class attributes. Scope extends beyond the borders of the organization and neighboring domains. Repeatable outcomes are virtually always achieved.

Capability Architecture

Each Critical Capability is composed of Capability Building Blocks (CBBs) - the sub-components that define specific areas of practice within the capability. For each CBB, IT-CMF provides Practices-Outcomes-Metrics (POMs): representative practices to drive maturity, expected outcomes from implementing them, and metrics to monitor progress. Maturity levels are additive - each lower level provides the foundation for the next higher one.

Assessment Methodology

IT-CMF assessment involves systematic evaluation of each Critical Capability against maturity level definitions. Assessment methodology includes:

• Capability interviews: Structured interviews with IT leaders and practitioners assess current capability maturity across dimensions: awareness, process definition, standardization, metrics, and continuous improvement.
• Evidence gathering: Documentation, process artifacts, and measurements provide evidence of capability maturity level.
• Maturity scoring: Each capability is scored on five-level maturity scale. Scoring reflects both process maturity and business impact.
• Gap analysis: Assessment identifies gaps between current capability maturity and target capability maturity. Gaps inform improvement prioritization.
• Value alignment: Assessment evaluates how capability maturity contributes to business value creation and strategic alignment.

Key Differentiators from Prior Frameworks

• Business value focus: Unlike CMMI (software-focused) or ITIL (service-focused), IT-CMF explicitly emphasizes business value creation throughout framework. Every capability is evaluated in context of business value contribution.
• Comprehensive scope: IT-CMF spans from IT strategy and governance through service delivery through financial management through value realization. Framework comprehensively addresses IT management.
• Macro-capability integration: Four macro-capability categories ensure holistic evaluation of IT management. Macro-capability perspective prevents siloed capability assessments.
• Enterprise-scale research: IT-CMF developed through collaborative research involving 100+ large organizations. Framework reflects enterprise-scale IT management challenges and practices.
• Maturity-value correlation: IT-CMF explicitly establishes that capability maturity improvement correlates with business value increase. Framework emphasizes ROI on capability improvement investments.

Main Strengths

• Business-value alignment: IT-CMF explicitly connects IT capability maturity to business value creation. Framework provides language for business-IT conversations about IT effectiveness.
• Comprehensive framework: 36 Critical Capabilities comprehensively cover IT management domains. Framework addresses IT from strategy through delivery through value realization.
• Holistic assessment: Four macro-capability categories ensure holistic IT capability evaluation. Framework prevents siloed assessment of individual functions.
• Clear maturity progression: Five-level maturity model provides clear progression path for capability improvement. Maturity model enables organizations to establish realistic improvement roadmaps.
• Enterprise-focused: Framework developed specifically for large enterprises facing complex IT management challenges. Framework addresses enterprise-scale governance, cost management, and value realization challenges.
• Practitioner grounded: Framework development involved 100+ organizations, ensuring framework reflects real-world IT management practices and challenges.

Main Weaknesses

• Enterprise-focused limitation: Framework design emphasizes large enterprise IT organizations. Framework applicability to mid-market or small organizations may be limited.
• Assessment complexity: Comprehensive assessment of 36 Critical Capabilities is time-intensive. Assessment requires significant organizational commitment.
• Subjective maturity scoring: Capability maturity assessment involves subjective judgment. Different assessors may score capability maturity differently.
• Limited agile integration: Framework emphasis on standardization and process discipline may conflict with agile development practices. Integration with agile methods requires careful approach.
• Value measurement challenges: While framework emphasizes IT business value, measuring IT capability maturity impact on business value remains challenging. Business value causality attribution is complex.
• Implementation variation: IT-CMF implementation and interpretation varies across organizations. Framework provides comprehensive guidance but does not dictate specific implementation approaches.

Key Contributions

• Established business-IT value connection: IT-CMF established explicit connection between IT capability maturity and business value creation. Framework provided language for business-IT alignment conversations.
• Comprehensive IT capability taxonomy: 36 Critical Capabilities created comprehensive taxonomy of IT capabilities required for IT organizations. Taxonomy enabled common understanding of IT management domains.
• Holistic IT assessment framework: Four macro-capability categories enabled holistic IT assessment spanning strategy through delivery through value. Framework prevented siloed IT capability evaluation.
• Maturity-value correlation research: IT-CMF research established correlation between capability maturity improvement and business value increase. Research provided empirical foundation for capability improvement investment justification.
• Large-scale IT management research: IT-CMF development involved 100+ organizations providing large-scale research on enterprise IT management practices and challenges.
• IT governance advancement: IT-CMF elevated IT governance discipline emphasis. Framework established governance as foundational IT management capability.
• IT-CMF practitioner community: Framework created community of IT leaders and organizations focused on capability maturity improvement. Community enabled knowledge sharing and best practice dissemination.

Internal Validity

IT-CMF demonstrates strong internal validity as IT capability maturity framework:

• Design science research methodology: IT-CMF was developed using design science research, which creates and evaluates IT artefacts intended to solve organizational problems. IVI addresses utility by making pragmatic validation an integral part of its research approach.
• Open innovation development: The research process is based on open innovation principles where IT professionals across multiple industries and academic researchers jointly define the research agenda, perform research, and validate results. This provides an essential feedback loop ensuring relevance and rigor.
• Consortium validation: Framework development involved 100+ large organizations collaborating to validate framework relevance, with over 200 consulting engagements by Boston Consulting Group providing practical validation.
• Clear maturity progression: Five-level maturity model provides logical progression from Initial (inadequate and unstable) through Optimizing (world-class attributes), with maturity levels additive and evidence-based.
• Comprehensive capability coverage: Framework comprehensively addresses IT from strategy through delivery through value realization across 36 Critical Capabilities organized into four macro-capabilities.
• Iterative staged validation: Research is overseen by a Steering Board including industry leaders and academic researchers. Research is conducted in iterative stages with ongoing consortium validation.

External Validity

External validity considerations concern generalizability of IT-CMF across diverse organizational contexts:

• Enterprise applicability: Framework developed for large enterprise IT organizations. Applicability to enterprise context is strong, supported by 100+ large organization research.
• Mid-market applicability: Framework applicability to mid-market organizations is moderate. Mid-market organizations with smaller IT teams may find 36 capabilities overwhelming.
• Small organization limitations: Framework emphasis on comprehensive capability assessment and formalization may be less applicable to small organizations with limited IT staff.
• Industry variation: Framework applicability varies across industries. Financial services, healthcare, and government organizations benefit from governance and risk emphasis. Startup and technology companies may find framework less applicable.
• Organizational culture dependence: Framework effectiveness depends on organizational commitment to process discipline and continuous improvement. Organizations with process discipline culture benefit more from IT-CMF.
• Agile integration challenges: Organizations adopting agile methods report challenges with IT-CMF emphasis on standardization and process discipline. Framework adaptation required for agile environments.
• Digital transformation applicability: Digital transformation initiatives increasingly emphasize speed and innovation. IT-CMF advanced and optimizing levels provide digital transformation relevance.
• Geographic and cultural variation: Framework developed primarily with large Western organizations. Applicability to different geographic regions and organizational cultures varies.

Relevance to Technology Adoption

IT-CMF addresses technology adoption by establishing that technology decisions should align with IT capability maturity and business value creation objectives. Framework emphasizes that organizations must develop IT capabilities to effectively adopt and sustain new technologies. Technology adoption success depends on organizational readiness, governance maturity, change management capability, and business-IT alignment maturity.

Barriers to Capability-Aligned Technology Adoption Identified

• Immature technology governance: Organizations without mature technology governance lack decision frameworks for technology adoption. Governance immaturity leads to technology decisions based on enthusiasm rather than strategic alignment.
• Inadequate business-IT alignment: Technology adoption without business-IT alignment may not support business objectives. Alignment immaturity leads to technology investments not creating business value.
• Weak IT service management: Organizations without mature IT service management cannot effectively operationalize adopted technologies. Service management immaturity leads to technology adoption failures.
• Limited change management capability: Technology adoption requires capability to manage organizational change. Change management immaturity leads to adoption resistance and inadequate user transitions.
• Insufficient cost management: Technology adoption without mature cost management creates uncontrolled IT spending. Cost management immaturity leads to technology adoption overspend.
• Weak value realization discipline: Technology adoption without value realization discipline fails to demonstrate business value. Value realization immaturity leads to inability to justify continued investment.
• Inadequate organizational capability: Technology adoption requires organizational capability and capacity. Organizational capability immaturity leads to technology adoption overwhelm.

Leadership Actions the Framework Prescribes

• Assess current IT capability maturity: Conduct comprehensive assessment of current IT capability maturity across 36 Critical Capabilities. Assessment establishes baseline for improvement planning.
• Establish technology governance: Create governance structures and decision processes ensuring technology adoption aligns with business strategy and organizational capabilities.
• Define target capability maturity: Establish target capability maturity levels for adoption support capabilities. Target definition provides improvement objectives.
• Plan capability improvement: Develop phased plan for improving IT capability maturity in areas supporting technology adoption. Improvement plan aligns with technology adoption timeline.
• Strengthen business-IT alignment: Establish structures connecting business strategy to technology adoption decisions. Alignment ensures technology adoption supports business objectives.
• Develop service management capability: Build IT service management capability to operationalize and sustain adopted technologies. Service management capability reduces adoption failure risk.
• Enhance change management: Develop organizational change management capability supporting technology adoption. Change management capability increases adoption success.
• Establish value measurement: Create processes for measuring and demonstrating technology adoption business value. Value measurement provides justification for continued investment.

Following Models or Theories

IT-CMF influenced subsequent IT management frameworks and research:

As a 2016 framework with ongoing development by the Innovation Value Institute, IT-CMF is relatively recent. Documented adoption includes over 200 consulting engagements by Boston Consulting Group and deployment at organizations including BNY Mellon, Chevron, BP, and EY. The framework continues to be developed through IVI’s open innovation consortium model.

• AWS Cloud Adoption Framework for AI (2024): Cloud adoption frameworks increasingly assess organizational capability maturity as a prerequisite for technology adoption, reflecting IT-CMF’s emphasis on capability readiness.

References

1. Curley, M., Kenneally, J., & Carcary, M. (2016). IT capability maturity framework (IT-CMF): The body of knowledge guide (2nd ed.). Van Haren Publishing.
2. Kaplan, R. S., & Norton, D. P. (1992). The balanced scorecard: Measures that drive performance. Harvard Business Review, 70(1), 71-79.

Further Reading

1. Carcary, M., Doherty, E., & Heavin, C. (2014). The roadmap to value: Defining organisational value using the business value model. Journal of Decision Systems, 23(3), 345-365.
2. SEI (Carnegie Mellon Software Engineering Institute). (2010). CMMI for development: Version 1.3. Carnegie Mellon University Press.
3. Axelos. (2011). ITIL Foundation handbook. The Stationery Office.
4. ISACA. (2012). COBIT 5: A business framework for the governance and management of enterprise IT. ISACA Publications.
5. Ross, J. W., Weill, P., & Robertson, D. C. (2006). Enterprise architecture as strategy: Creating a foundation for business execution. Harvard Business School Press.
6. Barkley, B. T., & Saylor, J. H. (1994). Customer-driven project management: A new paradigm in total quality implementation. McGraw-Hill.

Series Navigation