ISACACertified in the Governance of Enterprise IT
The Certified in the Governance of Enterprise IT (CGEIT) certification validates your expertise in strategic IT enterprise governance at the executive level. It is designed for experienced professionals who assess, design, implement, and manage enterprise IT governance systems aligned with business goals. Earning CGEIT demonstrates your ability to optimize IT resources, realize benefits, and manage risk—making you a trusted advisor for modern enterprises.
666 practice questions · Updated 2026-07-30
4Domains
22Objectives
167Concepts
666Questions
CGEIT Curriculum
Every domain, objective, and concept the CGEIT exam measures.
- Governance Framework Components
- Framework Alignment with Enterprise Governance
- Governance Framework Implementation
- Organizational Structures for IT Governance
- Roles and Responsibilities in IT Governance
- Governance Committees and Their Functions
- Delegation of Authority and Escalation Paths
- Accountability and Ownership
- Stakeholder Engagement and Communication
- Strategy Development
- Governance Strategy Alignment with Enterprise Objectives
- Strategic Planning Process
- Legal and Regulatory Compliance
- Compliance Frameworks and Standards
- Compliance Risk Assessment
- Organizational Culture
- Culture and Governance Alignment
- Culture Change Management
- Business Ethics
- Ethical Decision-Making
- Ethics and Compliance Integration
- Stakeholder Identification
- Stakeholder Analysis Techniques
- Stakeholder Engagement Planning
- Engagement Execution and Management
- Communication Strategy Development
- Communication Plan Implementation
- Awareness and Training Programs
- Feedback and Continuous Improvement
- Enterprise Architecture Definition
- Enterprise Architecture Frameworks
- Enterprise Architecture Domains
- Enterprise Architecture Governance
- Enterprise Architecture Maturity
- Information Architecture Definition
- Information Architecture Components
- Information Architecture Alignment
- Information Architecture Governance
- Information Architecture Integration
- Policies and Standards
- Policy Development and Enforcement
- Information Asset Lifecycle
- Lifecycle Management Controls
- Information Ownership and Stewardship
- Accountability and Decision Rights
- Information Classification and Handling
- Handling and Protection Requirements
- Sourcing Strategy Options
- Sourcing Drivers and Benefits
- Sourcing Risks and Challenges
- Sourcing Decision Criteria
- Vendor Selection and Management
- SLA and Performance Monitoring
- Sourcing Governance and Compliance
- Exit Strategies and Transition
- Capacity Planning Fundamentals
- Demand Forecasting
- Capacity Modeling
- Performance Monitoring
- Capacity Optimization
- Scalability and Elasticity
- Capacity Planning Process
- Tools and Techniques
- Integration with IT Governance
- Risk and Cost Management
- Acquisition Planning
- Procurement Methods
- Vendor Selection and Evaluation
- Contract Negotiation and Management
- Acquisition Risk Management
- Compliance and Regulatory Considerations
- Post-Acquisition Integration
- IT Resource Lifecycle Phases
- Asset Management Principles
- Resource Planning and Budgeting
- Acquisition and Procurement
- Deployment and Provisioning
- Operation and Maintenance
- Retirement and Disposal
- Asset Tracking and Inventory
- Lifecycle Cost Management
- Compliance and Regulatory Alignment
- Competency Assessment Framework
- Competency Gap Analysis
- Development Planning
- Training and Certification
- Performance Monitoring
- Succession Planning
- Contracting Strategy
- Vendor Selection
- Contract Negotiation
- Service Level Agreements (SLAs)
- Contract Management
- Vendor Relationship Management
- Performance Monitoring and Reporting
- Risk Management in Outsourcing
- Compliance and Regulatory Considerations
- Contract Termination and Transition
- Business Case Development
- Business Case Evaluation
- IT Investment Management
- IT Investment Reporting
- Performance Management Fundamentals
- Performance Management Process
- Change Management Principles
- Change Management Process
- Quality Assurance in Benefits
- Quality Assurance Techniques
- Process Development
- Process Improvement
- Performance Metrics Definition
- Selecting and Using Metrics
- Governance Monitoring
- Monitoring Mechanisms
- Governance Reporting
- Reporting Structures and Frequency
- Benefit Evaluation Methods
- Evaluation Timing and Criteria
- Risk Frameworks
- Risk Standards
- Framework Selection
- Framework Integration
- Framework Application
- Risk Management Frameworks
- Risk Appetite and Tolerance
- Risk Identification
- Risk Analysis and Evaluation
- Risk Response Strategies
- Risk Monitoring and Reporting
- Integration with Enterprise Governance
- Define Risk Appetite
- Define Risk Tolerance
- Distinguish Risk Appetite and Risk Tolerance
- Establish Risk Appetite
- Establish Risk Tolerance
- Communicate Risk Appetite and Tolerance
- Monitor and Review Risk Appetite and Tolerance
- IT-Enabled Capabilities Definition
- IT-Enabled Capabilities Lifecycle
- IT-Enabled Processes
- IT-Enabled Services
- Capability-Process-Service Alignment
- Risk Implications of IT-Enabled Capabilities
- Optimization of IT-Enabled Capabilities
- Business Risk Identification
- Risk Exposure Analysis
- Threat Landscape Assessment
- Risk and Business Objectives Alignment
- Risk Impact and Likelihood Evaluation
- Risk Appetite and Tolerance Consideration
- Emerging Risk and Trend Monitoring
- Risk Management Lifecycle Overview
- Risk Identification
- Risk Analysis
- Risk Evaluation
- Risk Response Planning
- Risk Response Implementation
- Risk Monitoring and Review
- Continuous Improvement in Risk Management
- Risk Assessment Methods Overview
- Qualitative Risk Assessment
- Quantitative Risk Assessment
- Hybrid Risk Assessment Approaches
- Risk Assessment Frameworks and Standards
- Selecting Appropriate Risk Assessment Methods
- Conducting a Risk Assessment
- Interpreting and Communicating Risk Assessment Results
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for CGEIT, so none is invented.