CGEIT study plan

Define the scope and boundaries of enterprise IT governance and distinguish it from IT management and from corporate governance.

Map the components of a governance framework (strategic alignment, value delivery, resource management, risk management, performance measurement) to concrete organizational artifacts.

Identify the decision rights, accountability structures and reporting lines that a governance model must assign, and explain who owns which IT decision.

Explain how governance structures (board committees, steering councils, executive IT leadership) differ in composition, mandate and cadence.

Differentiate governance mechanisms (structures, processes, relational mechanisms) and select appropriate mechanisms for a stated organizational context.

Draft governance process flows for IT investment approval, policy exception handling and performance review, assigning inputs, owners and escalation paths.

Analyze how organizational culture, federated versus centralized models, and subsidiary structures alter governance design choices.

Evaluate the role of IT policies, standards and procedures in operationalizing governance intent, and distinguish mandatory from advisory instruments.

Inventory the IT resource categories (applications, information, infrastructure, people) and describe how each is planned, acquired, maintained and retired.

Construct an IT resource lifecycle model from demand identification through sourcing, operation, refresh and decommissioning, with decision gates.

Compare sourcing options (insourcing, outsourcing, managed services, cloud consumption models) against capability, cost structure and control requirements.

Explain how human resource capability planning (skills inventories, succession, competency models) supports sustained IT service delivery.

Assess how IT resource capacity and capability constraints shape the feasibility of a proposed benefits case.

Define benefits realization as a lifecycle discipline spanning identification, planning, delivery, measurement and sustainment, and distinguish outputs from outcomes and benefits.

Build a benefits register entry that states a benefit, its owner, baseline, target, metric, measurement frequency and dependencies.

Identify the governance forums and reporting cadence that keep benefits tracking visible to executive stakeholders.

Design a benefits realization plan that ties investment stages to expected benefit curves and interim checkpoints.

Explain how portfolio, program and project layers interact so that benefits are tracked above the project level and survive project closure.

Diagnose common causes of benefit leakage (optimism bias, unclear ownership, missing baseline, scope drift) and prescribe a countermeasure for each.

Specify the evidence a business case must contain to be defensible at an investment committee, including options analysis and sensitivity to key assumptions.

Distinguish risk optimization from risk avoidance and explain how risk appetite and tolerance are expressed and applied to IT decisions.

Build a risk register entry with cause, event, consequence, likelihood, impact, owner, response type and residual position.

Compare risk response strategies (mitigate, transfer, accept, avoid) for a technology and third-party scenario, justifying the chosen response.

Relate IT risk to enterprise risk management and describe how risk reporting flows into board-level oversight.

Integrate risk appetite into governance decision rights so that investment and exception approvals are calibrated to tolerance.

Evaluate how assurance functions (internal audit, independent review, third-party attestation) provide evidence that governance and risk processes operate effectively.

Interpret performance measurement frameworks for IT, selecting metrics that reflect value, risk and resource stewardship rather than activity volume.

Critique a governance and risk scenario for gaps in accountability, escalation and monitoring, and recommend corrective actions.

Synthesize the four domains into a single narrative linking governance decisions to resource allocation, benefit delivery and risk position.

Practice scenario-based reasoning by answering mixed-domain questions and justifying each answer against framework logic rather than recall.

Audit personal weak areas using the earlier deliverables and close the two largest gaps with targeted review.

Rehearse articulating governance recommendations concisely for an executive audience under time pressure.