CGEIT: Certified in the Governance of Enterprise IT®

What is CGEIT by ISACA?

The CGEIT (Certified in the Governance of Enterprise IT) qualification, awarded by ISACA®, demonstrates that holders have the expert knowledge and experience necessary to support the governance of enterprise IT. This ensures that an organisation’s IT is governed from the top, and therefore aligned with business needs and goals.

The training & certification is designed for professionals with significant management experience relating to GEIT and is recognised across the world as one of the information security industry’s premier qualifications.

The Certified in the Governance of Enterprise IT® (CGEIT®) certification is framework agnostic and the only IT governance certification for the individual.

Whether you’re seeking a new career opportunity or striving to grow within your current organization, CGEIT proves your expertise in enterprise IT governance, resources, benefits and risk optimization.

What are the requirements for the CGEIT qualification?

CGEIT is awarded to candidates with at least five years of relevant work experience who pass a rigorous written exam based on five job practice domains:

• Domain 1: Governance of Enterprise IT (40%)

  This domain deals with the organizational structure of building IT frameworks, the strategy and technology aspects of IT governance and essential knowledge about governing various types of information.

  
  

• Domain 2: IT Resources (15%)

  This domain provides insight about where to effectively allocate your IT resources and how to ensure IT resources are streamlined for performance.

  
  

• Domain 3: Benefits Realisation (26%)

  This domain’s focus is on managing performance, monitoring and reporting, and analyzing IT-enabled technology investment management.

  
  

• Domain 4: Risk Optimisation (19%)

  This domain is about mitigating potential IT risks and challenges and overseeing the risks of IT management capabilities.

• Domain 5: Resource Optimization

  “Ensure the optimization of IT resources including information, services, infrastructure and applications, and people, to support the achievement of enterprise objectives.”

Additionally you will learn to:

1. Establish the objectives for the framework for the governance of enterprise IT.

2. Establish a framework for the governance of enterprise IT.

3. Identify the internal and external requirements for the framework for the governance of enterprise IT.

4. Incorporate a strategic planning process into the framework for the governance of enterprise IT.

5. Ensure that a business case development and benefits realization process for IT-enabled investments has been established.

6. Incorporate enterprise architecture into the framework for the governance of enterprise IT.

7. Incorporate information architecture into the framework for the governance of enterprise IT.

8. Align the framework for the governance of enterprise IT with enterprise-wide shared services.

9. Incorporate comprehensive and repeatable processes and activities into the framework for the governance of enterprise IT.

10. Establish roles, responsibilities, and accountabilities for information assets and IT processes.

11. Evaluate the framework for the governance of enterprise IT and identify improvement opportunities.

12. Establish a process for the identification and remediation of issues related to the framework for the governance of enterprise IT.

13. Establish policies and standards that support IT and enterprise strategic alignment.

14. Establish policies and standards that inform decision-making with regard to IT-enabled business investments.

15. Establish communication and awareness processes to convey the value of the governance of enterprise IT.

16. Evaluate, direct, and monitor IT strategic planning processes to ensure alignment with enterprise goals.

17. Evaluate, direct, and monitor stakeholder engagement.

18. Document and communicate the IT strategic planning processes and related outputs.

19. Ensure that enterprise architecture is integrated into the IT strategic planning process.

20. Ensure that information architecture is integrated into the IT strategic planning process.

21. Incorporate a prioritization process for IT initiatives into the framework for the governance of enterprise IT.

22. Ensure that processes are in place to manage the lifecycle of IT resources and capabilities.

23. Ensure that processes are in place to govern the lifecycle of information assets.

24. Incorporate sourcing strategies into the framework for the governance of enterprise IT to ensure optimization and control.

25. Ensure the alignment of IT resource management processes with the enterprise’s resource management processes.

26. Ensure the alignment of information governance with the framework for the governance of enterprise IT.

27. Ensure that processes are in place for the assessment and development of personnel to align with business needs.

28. Ensure that IT-enabled investments are managed through their economic lifecycle.

29. Evaluate the process that assigns ownership and accountability for IT-enabled investments.

30. Ensure that IT investment management practices align with enterprise investment management practices.

31. Evaluate the benefits realization of IT-enabled investments, IT processes and IT services.

32. Establish a performance management program for IT-enabled investments, IT processes and IT services.

33. Ensure that improvement initiatives are based on the results derived from performance measures.

34. Ensure that comprehensive IT and information risk management programs are established.

35. Ensure that a process is in place to monitor and report on the adherence to IT and information risk management policies and standards.

36. Ensure the alignment of IT processes with the enterprise's legal and regulatory compliance objectives.

37. Ensure the alignment of IT and information risk management with the enterprise risk management framework.

38. Ensure that IT and information risk management policies and standards are developed and communicated.

CGEIT is divided into six job practice areas:

1. IT governance framework

2. Strategic alignment

3. Value delivery

4. Risk management

5. Resource management

6. Performance measurement