Certified in the
Governance
of Enterprise IT
Overview
Course Objective
Who Should Attend
Prerequisites

Training Calendar
Intake
Duration
Program Fees
Module
Module 1 - Framework for the Governance of Enterprise IT
• Knowledge of components of a framework for the governance of
enterprise IT
• Knowledge of IT governance industry practices, standards and
frameworks (for example, COBIT, Information Technology
Infrastructure Library [ITIL], International Organization for
Standardization [ISO] 20000, ISO 38500)
• Knowledge of business drivers related to IT governance (for
example, legal, regulatory and contractual requirements)
• Knowledge of IT governance enablers (for example, principles,
policies and frameworks; processes; organizational structures;
culture, ethics and behaviour; information; services, infrastructure
and applications; people, skills and competencies)
• Knowledge of techniques used to identify IT strategy (for example,
SWOT, BCG Matrix)
• Knowledge of components, principles, and concepts related to
enterprise architecture (EA)
• Knowledge of Organizational structures and their roles and
responsibilities (for example, enterprise investment committee,
program management office, IT strategy committee, IT
architecture review board, IT risk management committee)
• Knowledge of methods to manage organizational, process and
cultural change
• Knowledge of models and methods to establish accountability for
information requirements, data and system ownership; and IT
processes
• Knowledge of IT governance monitoring processes/mechanisms
(for example, balanced scorecard (BSC)
• Knowledge of IT governance reporting processes/mechanisms
• Knowledge of communication and promotion techniques
• Knowledge of assurance methodologies and techniques
• Knowledge of continuous improvement techniques and
processes
Module 2 - Strategic Management
• Knowledge of an enterprise’s strategic plan and how it relates to
IT
• Knowledge of strategic planning processes and techniques
• Knowledge of impact of changes in business strategy on IT
strategy
• Knowledge of barriers to the achievement of strategic alignment
• Knowledge of policies and procedures necessary to support IT
and business strategic alignment
planning
dashboard/balanced scorecard, key indicators)
• Knowledge of methods to document and communicate IT
strategic
processes
(for
example,
IT
• Knowledge of components, principles and frameworks of
enterprise architecture (EA)
• Knowledge of current and future technologies
• Knowledge of prioritization processes related to IT initiatives
• Knowledge of scope, objectives and benefits of IT investment
programs
• Knowledge of IT roles and responsibilities and methods to
cascade business and IT objectives to IT personnel
Module 3 - Benefits Realization
• Knowledge of IT investment management processes, including
the economic life cycle of investments
• Knowledge of basic principles of portfolio management
• Knowledge of benefit calculation techniques (for example, earned
value, total cost of ownership, return on investment)
• Knowledge of process and service measurement techniques (for
example, maturity models, benchmarking, key performance
indicators [KPIs])
• Knowledge of processes and practices for planning, development,
transition, delivery, and support of IT solutions and services
• Knowledge of continuous improvement concepts and principles
• Knowledge of outcome and performance measurement
techniques (for example, service metrics, key performance
indicators [KPIs])
• Knowledge of procedures to manage and report the status of IT
investments
Module 4 - Risk Optimization
• Knowledge of the application of risk management at the strategic,
portfolio, program, project and operations levels
• Knowledge of risk management frameworks and standards (for
example, RISK IT, the Committee of Sponsoring Organizations of
the Treadway Commission Enterprise Risk Management—
Integrated Framework (2004) [COSO ERM], International
Organization for Standardization (ISO) 31000)
• Knowledge of the relationship of the risk management approach
to legal and regulatory compliance
• Knowledge of methods to align IT and enterprise risk
management (ERM)
• Knowledge of the relationship of the risk management approach
to business resiliency (for example, business continuity planning
[BCP] and disaster recovery planning [DRP])
• Knowledge of risk, threats, vulnerabilities and opportunities
inherent in the use of IT
• Knowledge of types of business risk, exposures and threats (for
example, external environment, internal fraud, information
security) that can be addressed using IT resources
• Knowledge of risk appetite and risk tolerance
• Knowledge of quantitative and qualitative risk assessment
methods
• Knowledge of risk mitigation strategies related to IT in the
enterprise
• Knowledge of methods to monitor effectiveness of mitigation
strategies and/or controls
• Knowledge of stakeholder analysis and communication
techniques
• Knowledge of methods to establish key risk indicators (KRIs)
• Knowledge of methods to manage and report the status of
identified risk
FAQs
General Questions:
Q: What is the Certified in the Governance of Enterprise IT (CGEIT) course about?
The CGEIT course, awarded by ISACA, is tailored for professionals responsible for directing, advising, or assuring IT governance. It focuses on aligning IT initiatives with enterprise goals, enhancing strategic management, optimizing benefits, and managing IT-related risks. The course equips participants with the knowledge to implement governance frameworks and prepares them for the CGEIT certification exam.
Q: Who should attend this course?
This course is intended for IT and business professionals with significant experience in IT governance who are preparing for the CGEIT exam. It is ideal for IT directors, compliance professionals, audit managers, CIOs, and consultants who oversee or advise on enterprise IT governance.
Q: What are the prerequisites for this course?
Candidates should have substantial professional experience in IT governance. While there are no formal prerequisites to attend the training, eligibility for the CGEIT certification requires verified work experience in the governance of enterprise IT.
Q: How long is the course?
The course runs for 4 days.
Q: What key topics are covered in this course?
The course comprehensively covers the four CGEIT domains:
Framework for the Governance of Enterprise IT (25%) – Focuses on establishing and managing IT governance frameworks, leveraging standards like COBIT, ITIL, and ISO 38500.
Strategic Management (20%) – Emphasizes aligning IT and business strategies, enterprise architecture, prioritization of IT initiatives, and strategic planning.
Benefits Realization (16%) – Addresses investment management, benefit measurement, performance tracking, and continuous improvement.
Risk Optimization (24%) – Covers IT risk frameworks, threat identification, mitigation strategies, regulatory compliance, and integration with enterprise risk management.
Q: Will I receive a certification after completing the course?
Completing the course helps prepare for the CGEIT exam. After passing the official CGEIT certification exam and fulfilling the experience requirements set by ISACA, participants will earn the internationally recognized CGEIT certification.
Program Content & Skills:
Q: What foundational IT governance concepts will I learn in this course?
You will learn how to define, establish, and manage a framework for the governance of enterprise IT that aligns with the mission, vision, and values of the organization. This includes knowledge of governance enablers, enterprise architecture principles, accountability structures, and continuous improvement techniques.
Q: How does the course prepare me to align IT with business strategy?
The course explores methods for integrating IT strategic plans with enterprise goals. You’ll learn about strategic planning processes, documenting and communicating IT strategies, evaluating current and emerging technologies, and establishing governance structures that support alignment and prioritization of IT initiatives.
Q: What skills will I develop in managing IT-enabled investments?
You’ll develop the ability to manage the full lifecycle of IT investments, from planning and benefits realization to performance measurement. Topics include portfolio management, calculating ROI and total cost of ownership, defining performance metrics, and establishing continuous improvement processes.
Q: Will I learn how to manage and mitigate IT-related risks?
Yes, the course covers risk management frameworks such as RISK IT and ISO 31000, aligning IT risk with enterprise risk management, identifying and assessing risks, and implementing mitigation strategies. You’ll also learn to monitor risk indicators and communicate risk status effectively to stakeholders.
Q: How does the course address compliance and organizational change?
The course highlights the importance of aligning IT with regulatory and legal requirements, ensuring governance structures support compliance, and managing organizational, cultural, and process changes. It also emphasizes stakeholder communication, accountability models, and assurance techniques.
Submit your interest today !