CGEIT Domains

CGEIT.txt

Domain 1: Governance of Enterprise IT (40%)

Governance Framework
Components of a Governance Framework
Organizational Structures, Roles, and Responsibilities
Strategy Development
Legal and Regulatory Compliance
Organizational Culture
Business Ethics
Technology Governance
Governance Strategy Alignment with Enterprise Objectives
Strategic Planning Process
Stakeholder Analysis and Engagement
Communication and Awareness Strategy
Enterprise Architecture
Policies and Standards
Information Governance
Information Architecture
Information Asset Lifecycle
Information Ownership and Stewardship
Information Classification and Handling


Domain 2: IT Resources (15%)

IT Resource Planning
Sourcing Strategies
Resource Capacity Planning
Acquisition of Resources
IT Resource Optimization
IT Resource Lifecycle and Asset Management
Human Resource Competency Assessment and Development
Management of Contracted Services and Relationships


Domain 3: Benefits Realization (26%)

IT Performance and Oversight
Performance Management
Change Management
Governance Monitoring
Governance Reporting
Quality Assurance
Process Development and Improvement
Management of IT-Enabled Investments
Business Case Development and Evaluation
IT Investment Management and Reporting
Performance Metrics
Benefit Evaluation Methods


Domain 4: Risk Optimization (19%)

Risk Strategy
Risk Frameworks and Standards
Enterprise Risk Management
Risk Appetite and Risk Tolerance
Risk Management
IT-Enabled Capabilities, Processes, and Services
Business Risk, Exposures, and Threats
Risk Management Lifecycle
Risk Assessment Methods

Secondary Classification
Task Statements
Establish the objectives for the framework for the governance of enterprise IT.
Establish a framework for the governance of enterprise IT.
Identify the internal and external requirements for the framework for the governance of enterprise IT.
Incorporate a strategic planning process into the framework for the governance of enterprise IT.
Ensure that a business case development and benefits realization process for IT-enabled investments has been established.
Incorporate enterprise architecture into the framework for the governance of enterprise IT.
Incorporate information architecture into the framework for the governance of enterprise IT.
Align the framework for the governance of enterprise IT with enterprise-wide shared services.
Incorporate comprehensive and repeatable processes and activities into the framework for the governance of enterprise IT.
Establish roles, responsibilities, and accountabilities for information assets and IT processes.
Evaluate the framework for the governance of enterprise IT and identify improvement opportunities.
Establish a process for the identification and remediation of issues related to the framework for the governance of enterprise IT.
Establish policies and standards that support IT and enterprise strategic alignment.
Establish policies and standards that inform decision-making with regard to IT-enabled business investments.
Establish communication and awareness processes to convey the value of the governance of enterprise IT.
Evaluate, direct, and monitor IT strategic planning processes to ensure alignment with enterprise goals.
Evaluate, direct, and monitor stakeholder engagement.
Document and communicate the IT strategic planning processes and related outputs.
Ensure that enterprise architecture is integrated into the IT strategic planning process.
Ensure that information architecture is integrated into the IT strategic planning process.
Incorporate a prioritization process for IT initiatives into the framework for the governance of enterprise IT.
Ensure that processes are in place to manage the lifecycle of IT resources and capabilities.
Ensure that processes are in place to govern the lifecycle of information assets.
Incorporate sourcing strategies into the framework for the governance of enterprise IT to ensure optimization and control.
Ensure the alignment of IT resource management processes with the enterprise’s resource management processes.
Ensure the alignment of information governance with the framework for the governance of enterprise IT.
Ensure that processes are in place for the assessment and development of personnel to align with business needs.
Ensure that IT-enabled investments are managed through their economic lifecycle.
Evaluate the process that assigns ownership and accountability for IT-enabled investments.
Ensure that IT investment management practices align with enterprise investment management practices.
Evaluate the benefits realization of IT-enabled investments, IT processes, and IT services.
Establish a performance management program for IT-enabled investments, IT processes, and IT services.
Ensure that improvement initiatives are based on the results derived from performance measures.
Ensure that comprehensive IT and information risk management programs are established.
Ensure that a process is in place to monitor and report on the adherence to IT and information risk management policies and standards.
Ensure the alignment of IT processes with the enterprise's legal and regulatory compliance objectives.
Ensure the alignment of IT and information risk management with the enterprise risk management framework.
Ensure that IT and information risk management policies and standards are developed and communicated.