ICAB PL IT Governance study plan

Define IT governance in your own words and distinguish it from IT management, listing at least five concrete differences

Map the responsibilities of board, executive management, CIO, and IT steering committee onto a one-page RACI chart you build yourself

Explain how each of the five ISO/IEC 38500 principles (responsibility, strategy, acquisition, performance, conformance) translates into an everyday decision

Summarize the key differences between governance frameworks COBIT, ISO/IEC 38500, and ITIL in a comparison table of at least eight rows

Describe the structure of COBIT's governance and management objectives and classify at least ten of them by domain

Trace how a governance framework connects to risk appetite statements and compliance obligations in a worked example

Identify the roles of internal audit, risk committee, and external regulator in an IT governance operating model

Draft a short governance policy outline covering decision rights, escalation paths, and exception handling

Categorize IT risks using a likelihood-impact matrix and assign owners to each of at least 15 sample risks

Compare the treatment options (avoid, mitigate, transfer, accept) and justify a chosen treatment for five scenarios

Explain the purpose and main control areas of ISO/IEC 27001 and how an ISMS supports regulatory compliance

Map at least three regulatory or legal obligations relevant to IT (for example data protection, sector rules, reporting duties) to specific controls

Draft a risk register with risk descriptions, ratings, owners, and treatment plans

Design an audit-ready evidence pack for three controls, specifying what artifact proves each control operates

Explain the difference between compliance, assurance, and audit and give an example of each in an IT context

Assess a sample incident against breach-notification and reporting timelines and state the required actions

Build a compliance calendar covering at least six recurring obligations with owners and due dates

Translate a business strategy statement into at least four IT capability requirements and one measurable IT objective per requirement

Explain how enterprise architecture, portfolio management, and demand management support business-IT alignment

Compare at least three IT investment appraisal methods (for example payback, NPV, and scoring models) and state when each fits

Draft an IT strategy summary that links each objective to a business outcome and a metric

Define service levels and KPIs for at least five IT services and show how each KPI ties to a business outcome

Explain how benefits realization is tracked after project delivery and who owns each step

Describe the components of IT value delivery, including cost transparency, chargeback, and portfolio prioritization

Critique a sample IT budget and identify at least three areas of misalignment with stated business priorities

Design a performance measurement framework using a balanced set of at least eight metrics across financial, customer, internal process, and learning perspectives

Explain how capacity, capability, and resource planning affect IT value delivery

Apply a prioritization method to rank at least six competing IT initiatives and justify the top three

Draft a value-delivery dashboard outline with data sources and review cadence for each metric

Synthesize all four domains into a single integrated governance case study of at least 1,500 words with recommendations

Complete two full timed practice exams under exam conditions and record scores by domain

Review every missed question, write the correct reasoning, and update your weak-area list

Recite from memory the key definitions, frameworks, and control objectives from each domain