CITM study plan

Map each of the ten CITM domains to its exam weight and rank them by weighted hours available in this plan

Define IT governance in your own words and distinguish it from IT management using one concrete organizational example

Compare three governance frameworks (for example COBIT, ISO/IEC 38500, and ITIL 4 governance practice) on scope, audience, and decision rights

Explain how an IT steering committee escalates a funding decision, listing the inputs, the decision rights, and the escalation path

Draft a one-page governance charter outline that names roles, decision rights, and reporting cadence

Build a risk register with at least eight IT risks, each scored on likelihood and impact with an owner assigned

Classify each risk as avoid, mitigate, transfer, or accept, and justify the treatment in one sentence

Describe how governance bodies consume risk appetite statements when approving projects

Connect at least three compliance obligations (for example privacy, financial reporting, or sector regulation) to specific IT controls

Explain the difference between inherent risk and residual risk using one register entry

Summarize the core principles of an information security management system and how certification cycles work

Walk through the phases of a security incident from detection through post-incident review, naming the decision point at each phase

Differentiate authentication, authorization, and accounting with a concrete system example for each

Explain how a vulnerability management cadence feeds into risk scoring and patch prioritization

Draft three security policy statements that are testable rather than aspirational

Map the ITIL 4 service value chain activities to a real service you support, noting where handoffs create delay

Define service level objectives for two services and state how each is measured and reported

Compare predictive, iterative, and hybrid delivery approaches and select one for a stated constraint set

Explain how a project charter, a business case, and a benefits realization plan connect across the lifecycle

Identify three program-level dependencies and describe how a program office would track them

Define data governance roles (owner, steward, custodian) and assign them to three data domains in a sample organization

Describe a data quality dimension set and design two checks that would catch real defects

Explain the difference between a data warehouse, a data lake, and a lakehouse in terms of schema handling and consumer use

Outline how an enterprise architecture framework links business capabilities to applications and infrastructure

Assess one emerging technology (for example generative AI or edge computing) against value, risk, and readiness criteria

Build a three-year IT budget view separating run, grow, and transform spending

Explain chargeback versus showback and state which fits a stated organizational culture

Draft vendor selection criteria and a scorecard weighting scheme for an RFP evaluation

Define recovery time objective and recovery point objective and apply both to three business processes

Sequence a disaster recovery test from plan review through results reporting and corrective actions

Analyze two ethical dilemmas in IT decision-making using a stated decision framework

Describe how to give and receive constructive feedback in a team leadership scenario

Explain stakeholder influence and interest mapping and apply it to five stakeholders on one initiative

Draft a communication plan for a program with three audience segments and distinct message cadences

Identify the professional development path and continuing education expectations relevant to an IT management career

Complete two full-length timed practice runs and log every missed question by domain

Re-study the two domains with the lowest practice accuracy until you can explain their core concepts without notes

Build a one-page summary sheet per domain capturing definitions, frameworks, and decision rules

Rehearse explaining each domain's key trade-offs aloud in under three minutes

Confirm exam logistics including scheduling, identification requirements, and testing environment