CHTP study plan

Map the governance decision-rights model for a mid-size enterprise, naming who decides, who advises, and who is informed for each of five recurring IT decisions.

Distinguish the strategy artifacts - vision, roadmap, business case, and objectives with key results - and state which decision each artifact authorizes.

Draft three competing technology options against one stated business objective, comparing cost, risk, and time-to-value for each.

Order policy, standard, procedure, and guideline on a single control hierarchy and place six sample artifacts correctly on that ladder.

Translate one approved strategy objective into a funded roadmap item with an owner, a budget line, and a success metric.

Write three risk register entries in standard form, each with likelihood, impact, owner, response, and residual rating.

Distinguish strategic, tactical, and operational planning horizons and assign the correct planning body to each.

Describe how the IT service catalog and configuration management records connect to governance reporting.

Sketch a layered reference architecture covering infrastructure, platform, application, integration, and presentation tiers, labeling one component per layer.

Compare on-premises, colocation, and cloud hosting on control, resilience, and cost structure for a given workload profile.

Explain network segmentation, redundancy, and load-balancing choices and identify the failure domain each one removes.

Select availability and recovery targets for three service tiers and justify each against business impact.

Classify ten data elements by sensitivity tier and assign handling rules for storage, transmission, retention, and disposal.

Build a data lifecycle map from creation through archival and destruction, marking the control applied at each stage.

Compare the core obligations of at least three privacy and data protection regimes without conflating their terminology.

Match common security controls to the threats they mitigate and state one residual risk per control.

Draft an incident response sequence from detection through notification, containment, eradication, and post-incident review.

Identify audit evidence artifacts that satisfy a stated compliance requirement and note who must retain each one.

Evaluate an access control design against least privilege and separation of duties, listing three corrective actions.

Assess a third-party data flow for cross-border transfer and contractual control gaps.

Convert a business need into a requirements package with scope, evaluation criteria, and weighted scoring.

Select a procurement route - competitive bid, sole source, or cooperative contract - and justify the choice against risk and timeline.

Draft the commercial terms you must negotiate: pricing model, service levels, escalation, termination, and data ownership.

Construct a vendor scorecard that scores capability, financial stability, support model, and exit cost.

Sequence a project plan with work breakdown, dependencies, milestones, and a critical path for a twelve-week deployment.

Identify and rank five project risks, assigning each a mitigation and a trigger condition.

Build a total cost of ownership model covering acquisition, operations, transition, and exit costs over five years.

Distinguish capital and operating expense treatment and explain how each affects a business case and approval path.

Assess one emerging technology for adoption readiness using maturity, integration effort, and organizational fit.

Rehearse integration scenarios that span procurement, security review, and financial approval in a single decision path.

Audit the personal error log and re-drill the three weakest topics until each reaches 90% recall.

Complete two full-length timed practice exams and score the second higher than the first.

Summarize the ten highest-risk misconceptions you held and the corrected rule for each.