CGEIT certification exam
Computer-based professional knowledge assessment
- Type
- Written
- Delivery
- Both
Passing score: 450 ISACA scaled score
Exam sections
Governance Of Enterprise IT
The role of “Governance Of Enterprise IT” in CGEIT — Certified in the Governance of Enterprise IT is to assess objectives, decision ownership, risk significance, fitness of supporting information, sequence of action, and well-founded conclusions. Knowing the available features is only a starting point; candidates must connect accountability with evidence needs before deciding which action belongs next in the sequence. It leads into “IT Resources” in the published outline.
Question notes
When a scenario reaches “Governance Of Enterprise IT,” remember that evidence, risk significance, and sequence often distinguish the strongest answer from a partial one. Check specifically for this failure condition: a weak factual basis, ambiguous accountability, unsupported conclusions, or a response disconnected from the actual exposure. Judge completion through an auditable connection between purpose and risk, evidence, judgment, conclusion, and stakeholder communication. Use the separate numeric field for provider emphasis, not as evidence of exact section timing or item volume.
Preparation tips
Keep a short decision journal for “Governance Of Enterprise IT.” Complete this exercise: Write a short case, identify the responsible role and evidence needed, compare plausible responses, and justify which action comes first. Record whether you detected or prevented insufficient evidence, confused responsibility, premature judgment, or an intervention focused on what is visible instead of the source of risk. Attach a clear path from objective through risk, evidence, judgment, conclusion, and stakeholder communication. Close by tracing the effect on “IT Resources”.
IT Resources
“IT Resources” tests whether a candidate understands how “IT Resources” moves from contextual knowledge into a professional action, judgment, or verifiable outcome. That understanding must support an ability to explain the purpose of “IT Resources,” identify its relationships with other work, followed by evidence that sustains the response. In the published sequence, it follows “Governance Of Enterprise IT” and precedes “Benefits Realization”.
Question notes
Knowing the heading “IT Resources” is not sufficient; the expected judgment should remain proportional to risk and consistent with governance responsibilities. The principal risk is using a familiar “IT Resources” pattern without checking its fit for the responsible role, stated objective, and scenario constraints. The response should be supported by a review-ready “IT Resources” case that records connected conditions, handled exceptions, and evidence of success. Provider-published weighting remains machine-readable while exact assessment inventory stays unspecified.
Preparation tips
After the normal “IT Resources” path works, continue with an exception. Exercise: Practice “IT Resources” after altering a relevant assumption, documenting what must change and what remains valid. Failure condition to introduce: treating “IT Resources” as terminology recall but overlooks the dependency or condition that determines the result. Compare both attempts using evidence that a changed “IT Resources” constraint does not invalidate the result. Explain which assumptions this leaves for “Benefits Realization”.
Benefits Realization
The “Benefits Realization” portion of CGEIT — Certified in the Governance of Enterprise IT focuses on the concepts named by “Benefits Realization” and the decisions a practitioner makes and the effects those choices create. A complete response should distinguish a complete “Benefits Realization” outcome from one that seems correct until a missing check exposes the weakness. In the published sequence, it follows “IT Resources” and precedes “Risk Optimization”.
Question notes
Assessment of “Benefits Realization” rewards attention to context and verification because a case may test whether the candidate gathers support before reaching or communicating a conclusion. Common weakness: a plausible “Benefits Realization” response that cannot withstand examination of the information used, the outcome produced, and the available proof. Acceptance evidence: a trace connecting the “Benefits Realization” requirement, chosen response, and independently reviewed result. Published relative emphasis is available in the numeric field; item-by-item allocation is not claimed.
Preparation tips
Rehearse “Benefits Realization” under a realistic constraint. Use this exercise: Write a checklist for “Benefits Realization” that covers starting context, required response, connected work, failure cases, and completion evidence. Then test completing the visible part of “Benefits Realization” while an edge case, user need, or effect on connected work remains open. Decide what must change by inspecting before-and-after observations for “Benefits Realization,” alongside documented reasoning and any stakeholder or technical acceptance evidence. Build the next exercise from this verified state, focusing on “Risk Optimization”.
Risk Optimization
“Risk Optimization” defines an applied capability within CGEIT — Certified in the Governance of Enterprise IT: objectives, decision ownership, risk significance, strength of the available evidence, sequence of action, and judgments the evidence can sustain. Success depends on being able to determine who is responsible, how much support the judgment requires, and what should happen before later actions. It draws on work established in “Benefits Realization”.
Question notes
Prepare “Risk Optimization” within the credential's wider flow, since the best response should align with professional practice rather than the most immediately technical action. A defensible response accounts for a weak factual basis, ambiguous accountability, unsupported conclusions, or a remedy that changes the symptom while leaving the underlying risk. Its support should include an auditable connection between purpose and risk, evidence, judgment, conclusion, and stakeholder communication. Relative weight is available as structured data; it should not be converted into a question estimate.
Preparation tips
Keep a short decision journal for “Risk Optimization.” Complete this exercise: Review a flawed conclusion, identify the missing or unreliable evidence, and rewrite it so the final judgment is supportable. Record whether you detected or prevented a weak factual basis, ambiguous accountability, unsupported conclusions, or action taken against a secondary issue rather than the risk driving the case. Attach an auditable connection between purpose and risk, evidence, judgment, conclusion, and stakeholder communication. For one repetition, begin from the completed state of “Benefits Realization”.
