Certificate
Course Outline
Domain 1: Framework for the Governance of Enterprise IT (25%)
Ensure the definition, establishment, and management of a framework for the governance of enterprise IT in alignment with the mission, vision, and values of the organization.
Domain 1—Knowledge Statements:
- Understanding of components of a framework for the governance of enterprise IT
- Understanding of industry practices, standards, and frameworks relevant to IT governance (e.g., COBIT, Information Technology Infrastructure Library [ITIL], International Organization for Standardization [ISO] 20000, ISO 38500)
- Understanding of business drivers related to IT governance (e.g., legal, regulatory, and contractual requirements)
- Understanding of IT governance enablers (e.g., principles, policies, and frameworks; processes; organizational structures; culture, ethics, and behavior; information; services, infrastructure, and applications; people, skills, and competencies)
- Understanding of techniques used to identify IT strategy (e.g., SWOT analysis, BCG Matrix)
- Understanding of components, principles, and concepts related to enterprise architecture (EA)
- Understanding of organizational structures and their roles and responsibilities (e.g., enterprise investment committee, program management office, IT strategy committee, IT architecture review board, IT risk management committee)
- Understanding of methods to manage organizational, process, and cultural change
- Understanding of models and methods to establish accountability for information requirements, data and system ownership, and IT processes
- Understanding of IT governance monitoring processes and mechanisms (e.g., balanced scorecard [BSC])
- Understanding of IT governance reporting processes and mechanisms
- Understanding of communication and promotion techniques
- Understanding of assurance methodologies and techniques
- Understanding of continuous improvement techniques and processes
Domain 2: Strategic Management (20%)
Ensure that IT enables and supports the achievement of organizational objectives through the integration and alignment of IT strategic plans with enterprise strategic plans.
Domain 2—Knowledge Statements:
- Understanding of an organization’s strategic plan and its relationship to IT
- Understanding of strategic planning processes and techniques
- Understanding of the impact of changes in business strategy on IT strategy
- Understanding of barriers to achieving strategic alignment
- Understanding of policies and procedures necessary to support IT and business strategic alignment
- Understanding of methods to document and communicate IT strategic planning processes (e.g., IT dashboard/balanced scorecard, key indicators)
- Understanding of components, principles, and frameworks of enterprise architecture (EA)
- Understanding of current and future technologies
- Understanding of prioritization processes related to IT initiatives
- Understanding of the scope, objectives, and benefits of IT investment programs
- Understanding of IT roles and responsibilities and methods to cascade business and IT objectives to IT personnel
Domain 3: Benefits Realization (16%)
Ensure that IT-enabled investments are managed to deliver optimized business benefits, and that benefit realization outcomes and performance measures are established, evaluated, and reported to key stakeholders.
Domain 3—Knowledge Statements:
- Understanding of IT investment management processes, including the economic life cycle of investments
- Understanding of basic principles of portfolio management
- Understanding of benefit calculation techniques (e.g., earned value, total cost of ownership, return on investment)
- Understanding of process and service measurement techniques (e.g., maturity models, benchmarking, key performance indicators [KPIs])
- Understanding of processes and practices for planning, development, transition, delivery, and support of IT solutions and services
- Understanding of continuous improvement concepts and principles
- Understanding of outcome and performance measurement techniques (e.g., service metrics, KPIs)
- Understanding of procedures to manage and report the status of IT investments
- Understanding of cost optimization strategies (e.g., outsourcing, adoption of new technologies)
- Understanding of models and methods to establish accountability over IT investments
- Understanding of value delivery frameworks (e.g., Val IT)
- Understanding of business case development and evaluation techniques
Domain 4: Risk Optimization (24%)
Ensure that an IT risk management framework exists to identify, analyze, mitigate, manage, monitor, and communicate IT-related business risks, and that the framework for IT risk management is in alignment with the enterprise risk management (ERM) framework.
Domain 4—Knowledge Statements:
- Understanding of the application of risk management at strategic, portfolio, program, project, and operations levels
- Understanding of risk management frameworks and standards (e.g., RISK IT, COSO ERM, ISO 31000)
- Understanding of the relationship between the risk management approach and legal and regulatory compliance
- Understanding of methods to align IT and enterprise risk management (ERM)
- Understanding of the relationship between the risk management approach and business resiliency (e.g., business continuity planning [BCP], disaster recovery planning [DRP])
- Understanding of risks, threats, vulnerabilities, and opportunities inherent in the use of IT
- Understanding of types of business risk, exposures, and threats (e.g., external environment, internal fraud, information security) that can be addressed using IT resources
- Understanding of risk appetite and risk tolerance
- Understanding of quantitative and qualitative risk assessment methods
- Understanding of risk mitigation strategies related to IT in the organization
- Understanding of methods to monitor the effectiveness of mitigation strategies and/or controls
- Understanding of stakeholder analysis and communication techniques
- Understanding of methods to establish key risk indicators (KRIs)
- Understanding of methods to manage and report the status of identified risks
Domain 5: Resource Optimization (15%)
Ensure the optimization of IT resources, including information, services, infrastructure and applications, and people, to support the achievement of organizational objectives.
Domain 5—Knowledge Statements:
- Understanding of IT resource planning methods
- Understanding of human resource procurement, assessment, training, and development methodologies
- Understanding of processes for acquiring application, information, and infrastructure resources
- Understanding of outsourcing and offshoring approaches that may be employed to meet investment program and operation level agreements (OLAs) and service level agreements (SLAs)
- Understanding of methods used to record and monitor IT resource utilization and availability
- Understanding of methods used to evaluate and report on IT resource performance
- Understanding of interoperability, standardization, and economies of scale
Requirements
ISACA requires a minimum of five years of IT governance experience in the five CGEIT domains to qualify for certification. Candidates may take the CGEIT exam prior to meeting ISACA’s experience requirements, but the CGEIT qualification will not be awarded until all criteria are satisfied. Govtra does not set specific entry requirements for this course, ensuring flexibility and accessibility for government professionals.
Testimonials (2)
Risk optimization is more clear than the other subjects
Munirah Alsahli - GOSI
Course - CGEIT – Certified in the Governance of Enterprise IT
The trainer was extremely clear and concise. Very easy to understand and absorb the information.
