Certificate
Course Outline
Domain 1: Framework for the Governance of Enterprise IT (25%)
Ensure the definition, establishment, and management of a framework for the governance of enterprise IT in alignment with the mission, vision and values of the enterprise.
Domain 1—Knowledge Statements:
- Understanding of components constituting an enterprise IT governance framework
- Understanding of IT governance industry practices, standards, and frameworks (e.g., COBIT, Information Technology Infrastructure Library [ITIL], International Organization for Standardization [ISO] 20000, ISO 38500)
- Understanding of business drivers influencing IT governance (e.g., legal, regulatory, and contractual obligations)
- Understanding of IT governance enablers (e.g., principles, policies, frameworks; processes; organizational structures; culture, ethics, and behavior; information; services, infrastructure, and applications; people, skills, and competencies)
- Understanding of techniques used to identify IT strategy (e.g., SWOT, BCG Matrix)
- Understanding of enterprise architecture (EA) components, principles, and concepts
- Understanding of organizational structures and their associated roles and responsibilities (e.g., enterprise investment committee, program management office, IT strategy committee, IT architecture review board, IT risk management committee)
- Understanding of methods to manage organizational, process, and cultural change
- Understanding of models and methods to establish accountability for information requirements, data and system ownership, and IT processes
- Understanding of IT governance monitoring processes/mechanisms (e.g., balanced scorecard [BSC])
- Understanding of IT governance reporting processes/mechanisms
- Understanding of communication and promotion techniques
- Understanding of assurance methodologies and techniques
- Understanding of continuous improvement techniques and processes
Domain 2: Strategic Management (20%)
Ensure that IT enables and supports the achievement of enterprise objectives through the integration and alignment of IT strategic plans with enterprise strategic plans.
Domain 2—Knowledge Statements:
- Understanding of an enterprise’s strategic plan and its relation to IT
- Understanding of strategic planning processes and techniques
- Understanding of how changes in business strategy impact IT strategy
- Understanding of barriers to achieving strategic alignment
- Understanding of policies and procedures necessary to support IT and business strategic alignment
- Understanding of methods to document and communicate IT strategic planning processes (e.g., IT dashboard/balanced scorecard, key indicators)
- Understanding of enterprise architecture (EA) components, principles, and frameworks
- Understanding of current and emerging technologies
- Understanding of prioritization processes related to IT initiatives
- Understanding of the scope, objectives, and benefits of IT investment programs
- Understanding of IT roles and responsibilities and methods to cascade business and IT objectives to IT personnel
Domain 3: Benefits Realization (16%)
Ensure that IT-enabled investments are managed to deliver optimized business benefits and that benefit realization outcome and performance measures are established, evaluated and progress is reported to key stakeholders.
Domain 3—Knowledge Statements:
- Understanding of IT investment management processes, including the economic lifecycle of investments
- Understanding of foundational principles of portfolio management
- Understanding of benefit calculation techniques (e.g., earned value, total cost of ownership, return on investment)
- Understanding of process and service measurement techniques (e.g., maturity models, benchmarking, key performance indicators [KPIs])
- Understanding of processes and practices for planning, development, transition, delivery, and support of IT solutions and services
- Understanding of continuous improvement concepts and principles
- Understanding of outcome and performance measurement techniques (e.g., service metrics, key performance indicators [KPIs])
- Understanding of procedures to manage and report the status of IT investments
- Understanding of cost optimization strategies (e.g., outsourcing, adoption of new technologies)
- Understanding of models and methods to establish accountability over IT investments
- Understanding of value delivery frameworks (e.g., Val IT)
- Understanding of business case development and evaluation techniques
Domain 4: Risk Optimization (24%)
Ensure that an IT risk management framework exists to identify, analyze, mitigate, manage, monitor, and communicate IT-related business risk, and that the framework for IT risk management is in alignment with the enterprise risk management (ERM) framework.
Domain 4—Knowledge Statements:
- Understanding of the application of risk management at strategic, portfolio, program, project, and operational levels
- Understanding of risk management frameworks and standards (e.g., RISK IT, Committee of Sponsoring Organizations of the Treadway Commission Enterprise Risk Management—Integrated Framework (2004) [COSO ERM], International Organization for Standardization (ISO) 31000)
- Understanding of the relationship between risk management approaches and legal and regulatory compliance
- Understanding of methods to align IT and enterprise risk management (ERM)
- Understanding of the relationship between risk management approaches and business resiliency (e.g., business continuity planning [BCP] and disaster recovery planning [DRP])
- Understanding of inherent risks, threats, vulnerabilities, and opportunities associated with IT use
- Understanding of types of business risk, exposures, and threats (e.g., external environment, internal fraud, information security) that can be addressed using IT resources
- Understanding of risk appetite and risk tolerance
- Understanding of quantitative and qualitative risk assessment methods
- Understanding of risk mitigation strategies related to IT in the enterprise
- Understanding of methods to monitor the effectiveness of mitigation strategies and/or controls
- Understanding of stakeholder analysis and communication techniques
- Understanding of methods to establish key risk indicators (KRIs)
- Understanding of methods to manage and report the status of identified risks
Domain 5: Resource Optimization (15%)
Ensure the optimization of IT resources including information, services, infrastructure and applications, and people, to support the achievement of enterprise objectives.
Domain 5—Knowledge Statements:
- Understanding of IT resource planning methods
- Understanding of human resource procurement, assessment, training, and development methodologies
- Understanding of processes for acquiring application, information, and infrastructure resources
- Understanding of outsourcing and offshoring approaches that may be employed to meet investment program and operational level agreements (OLAs) and service level agreements (SLAs)
- Understanding of methods used to record and monitor IT resource utilization and availability
- Understanding of methods used to evaluate and report on IT resource performance
- Understanding of interoperability, standardization, and economies of scale
Requirements
ISACA mandates at least five years of IT governance experience across the five CGEIT Domains for certification eligibility. You may take the CGEIT exam before fulfilling these experience requirements, but the CGEIT qualification will only be awarded once all criteria are met. There are no specific entry requirements for this training course.
Testimonials (2)
Risk optimization is more clear than the other subjects
Munirah Alsahli - GOSI
Course - CGEIT – Certified in the Governance of Enterprise IT
The trainer was extremely clear and concise. Very easy to understand and absorb the information.
