Certificate
Course Outline
Domain 1: Framework for the Governance of Enterprise IT (25%)
Ensure the definition, establishment, and management of a framework for the governance of enterprise IT in alignment with the mission, vision and values of the enterprise.
Domain 1—Knowledge Statements:
- Understanding of the components that make up a framework for the governance of enterprise IT
- Knowledge of IT governance industry practices, standards, and frameworks (e.g., COBIT, Information Technology Infrastructure Library [ITIL], International Organization for Standardization [ISO] 20000, ISO 38500)
- Knowledge of business drivers influencing IT governance (e.g., legal, regulatory, and contractual requirements)
- Understanding of IT governance enablers (e.g., principles, policies, and frameworks; processes; organizational structures; culture, ethics, and behavior; information; services, infrastructure, and applications; people, skills, and competencies)
- Knowledge of techniques utilized to identify IT strategy (e.g., SWOT analysis, BCG Matrix)
- Understanding of the components, principles, and concepts associated with enterprise architecture (EA)
- Knowledge of organizational structures and their respective roles and responsibilities (e.g., enterprise investment committee, program management office, IT strategy committee, IT architecture review board, IT risk management committee)
- Understanding of methods to manage organizational, process, and cultural change
- Knowledge of models and methods to establish accountability for information requirements, data and system ownership, and IT processes
- Understanding of IT governance monitoring processes/mechanisms (e.g., balanced scorecard (BSC))
- Knowledge of IT governance reporting processes/mechanisms
- Understanding of communication and promotion techniques
- Knowledge of assurance methodologies and techniques
- Understanding of continuous improvement techniques and processes
Domain 2: Strategic Management (20%)
Ensure that IT enables and supports the achievement of enterprise objectives through the integration and alignment of IT strategic plans with enterprise strategic plans.
Domain 2—Knowledge Statements:
- Understanding of an enterprise’s strategic plan and its relationship to IT
- Knowledge of strategic planning processes and techniques
- Understanding the impact of changes in business strategy on IT strategy
- Knowledge of barriers to achieving strategic alignment
- Understanding of the policies and procedures necessary to support IT and business strategic alignment
- Knowledge of methods to document and communicate IT strategic planning processes (e.g., IT dashboard/balanced scorecard, key indicators)
- Understanding of the components, principles, and frameworks of enterprise architecture (EA)
- Knowledge of current and emerging technologies
- Understanding of prioritization processes related to IT initiatives
- Knowledge of the scope, objectives, and benefits of IT investment programs
- Understanding of IT roles and responsibilities and methods to cascade business and IT objectives to IT personnel
Domain 3: Benefits Realization (16%)
Ensure that IT-enabled investments are managed to deliver optimized business benefits and that benefit realization outcomes and performance measures are established, evaluated, and progress is reported to key stakeholders.
Domain 3—Knowledge Statements:
- Understanding of IT investment management processes, including the economic lifecycle of investments
- Knowledge of the basic principles of portfolio management
- Understanding of benefit calculation techniques (e.g., earned value, total cost of ownership, return on investment)
- Knowledge of process and service measurement techniques (e.g., maturity models, benchmarking, key performance indicators [KPIs])
- Understanding of processes and practices for planning, development, transition, delivery, and support of IT solutions and services
- Knowledge of continuous improvement concepts and principles
- Understanding of outcome and performance measurement techniques (e.g., service metrics, key performance indicators [KPIs])
- Knowledge of procedures to manage and report the status of IT investments
- Understanding of cost optimization strategies (e.g., outsourcing, adoption of new technologies)
- Knowledge of models and methods to establish accountability over IT investments
- Understanding of value delivery frameworks (e.g., Val IT)
- Knowledge of business case development and evaluation techniques
Domain 4: Risk Optimization (24%)
Ensure that an IT risk management framework exists to identify, analyze, mitigate, manage, monitor, and communicate IT-related business risk, and that the framework for IT risk management is in alignment with the enterprise risk management (ERM) framework.
Domain 4—Knowledge Statements:
- Understanding of the application of risk management at the strategic, portfolio, program, project, and operations levels
- Knowledge of risk management frameworks and standards (e.g., RISK IT, the Committee of Sponsoring Organizations of the Treadway Commission Enterprise Risk Management—Integrated Framework (2004) [COSO ERM], International Organization for Standardization (ISO) 31000)
- Understanding of the relationship between the risk management approach and legal and regulatory compliance
- Knowledge of methods to align IT and enterprise risk management (ERM)
- Understanding of the relationship between the risk management approach and business resiliency (e.g., business continuity planning [BCP] and disaster recovery planning [DRP])
- Knowledge of risks, threats, vulnerabilities, and opportunities inherent in the use of IT
- Understanding of types of business risk, exposures, and threats (e.g., external environment, internal fraud, information security) that can be addressed using IT resources
- Knowledge of risk appetite and risk tolerance
- Understanding of quantitative and qualitative risk assessment methods
- Knowledge of risk mitigation strategies related to IT within the enterprise
- Understanding of methods to monitor the effectiveness of mitigation strategies and/or controls
- Knowledge of stakeholder analysis and communication techniques
- Understanding of methods to establish key risk indicators (KRIs)
- Knowledge of methods to manage and report the status of identified risks
Domain 5: Resource Optimization (15%)
Ensure the optimization of IT resources including information, services, infrastructure and applications, and people, to support the achievement of enterprise objectives.
Domain 5—Knowledge Statements:
- Understanding of IT resource planning methods
- Knowledge of human resource procurement, assessment, training, and development methodologies
- Understanding of processes for acquiring application, information, and infrastructure resources
- Knowledge of outsourcing and offshoring approaches that may be employed to meet the investment program and operation level agreements (OLAs) and service level agreements (SLAs)
- Understanding of methods used to record and monitor IT resource utilization and availability
- Knowledge of methods used to evaluate and report on IT resource performance
- Understanding of interoperability, standardization, and economies of scale
Requirements
ISACA mandates a minimum of five years of IT governance experience across the five CGEIT Domains to qualify for certification. You are permitted to take the CGEIT exam before fulfilling ISACA’s experience requirements, though the CGEIT qualification will only be awarded once all criteria are satisfied. There are no specific entry prerequisites for attending this course.
Testimonials (2)
Risk optimization is more clear than the other subjects
Munirah Alsahli - GOSI
Course - CGEIT – Certified in the Governance of Enterprise IT
The trainer was extremely clear and concise. Very easy to understand and absorb the information.
