Prepare for CGEIT by connecting governance decisions to the objectives, evidence and responsibilities in a scenario. Use the four-domain map and the investment exercise to distinguish successful delivery from achievement of a business benefit.
What does the CGEIT exam cover?
The Certified in the Governance of Enterprise IT (CGEIT) exam covers four domains: governance, resources, benefits realization and risk optimization.
Use the current official content outline and its supporting tasks. It covers enterprise IT governance across these areas, including information ownership, sourcing, investment oversight and risk assessment.
Governance frameworks are part of the outline. A study plan should also cover the other listed topics and practise decisions rather than relying on one framework’s vocabulary.
Sources: CGEIT® Exam Content Outline — ISACA, retrieved 2026-09-14
What should you review in the four domains?
Governance of Enterprise IT carries 40%, Benefits Realization 26%, Risk Optimization 19% and IT Resources 15%. Cover each domain and its supporting tasks.
Use the map to organise practice. The weights describe content coverage, not separate domain passing thresholds or a required allocation of study hours.
| Domain | Weight | What it covers | A useful review task |
|---|---|---|---|
| 1. Governance of Enterprise IT | 40% | Governance frameworks, organizational structures and roles, strategy development, legal and regulatory compliance, technology governance, information architecture and ownership | Practice assigning accountability: for each framework element, state who decides, who owns the asset and how compliance is monitored |
| 2. IT Resources | 15% | Sourcing strategies, resource capacity planning, IT resource lifecycle and asset management, personnel competency, contracted services | Work through how sourcing and capacity decisions connect to enterprise-level resource planning rather than single projects |
| 3. Benefits Realization | 26% | Performance management, governance monitoring and reporting, quality assurance, business case development, IT investment management, benefit evaluation methods | Compare delivery measures with benefit targets and identify the evidence and owners needed to evaluate the investment. |
| 4. Risk Optimization | 19% | Risk frameworks and standards, enterprise risk management, risk appetite and tolerance, risk assessment methods, the risk management lifecycle | Practice balancing: which treatments bring exposure within a stated appetite, and where residual risk is accepted |
Sources: CGEIT® Exam Content Outline — ISACA, retrieved 2026-09-14; ISACA Certification Exams Candidate Guide (2026) — ISACA, retrieved 2026-09-14
Practise evaluating benefits after delivery
The project can meet its delivery criteria while missing its benefit target. Assess those two results separately.
This original fictional exercise supplies the target, completed measurement period, recorded result and decision owners. It applies Benefits Realization topics on investment evaluation and performance reporting.
Worked example
Assume the following, all given by the scenario. Meridian Insurance approved a business case for a claims-processing platform replacement. The approved case promises verified annual savings of US$100,000 by the end of year 1 after go-live, measured by finance against the pre-implementation baseline. The platform went live on schedule and on budget, and all delivery acceptance criteria were met. At the 12-month measurement point, finance confirms US$60,000 in verified savings. The investment committee owns continuation decisions for IT-enabled investments, and a named benefit owner in the claims business supplies results and assumptions. Questions: (1) Was the investment successful? (2) What is the gap against the approved case? (3) What should happen next, and who does what?
Show answer
1) Both a success and a shortfall are true at once: delivery criteria were fully met, but the benefit target in the approved business case was missed. 2) The gap is US$100,000 minus US$60,000, so US$40,000, which is 40% of the promised year-1 savings. 3) The benefit owner reports the measured results, the baseline, and the assumptions behind the shortfall to the investment committee. The committee reviews the evidence and corrective options, such as process changes, adoption measures or revised forecasts, and decides whether to continue investing, adjust the case, or wind down. Nothing in the scenario triggers automatic termination, and delivery completion does not by itself prove business value.
The benefit gap is USD 100,000 − USD 60,000 = USD 40,000, or 40% of the stated year-one target. Meeting delivery acceptance criteria does not erase that gap. Conversely, the gap does not identify a cause or automatically require termination. The benefit owner supplies evidence and assumptions, and the committee makes the continuation decision under the roles given in the prompt. Keep any recommendation tied to further evidence and the options being considered.
Sources: CGEIT® Exam Content Outline — ISACA, retrieved 2026-09-14
How should you practise CGEIT decisions?
Study the supporting tasks, then practise explaining a decision using its objective, evidence and assigned authority.
For investment questions, identify the approved benefit, measurement period and result. For resources and risk, identify the actual capacity, sourcing or risk criteria before comparing options.
Judge alternatives against the supplied facts. Governance wording alone does not make an option appropriate. A manual, course or question bank can support preparation, but choose resources that cover the current outline.
- Check every domain and its detailed subtopics against your materials; use weights and your actual practice gaps to allocate time.
- After an error, record the concept, role, criterion or evidence you misread and revisit the corresponding objective.
- Explain why the alternatives fail under the supplied facts, then practise mixed timed questions. Treat practice percentages as feedback, not predicted scaled scores.
Sources: CGEIT® Exam Content Outline — ISACA, retrieved 2026-09-14; ISACA Certification Exams Candidate Guide (2026) — ISACA, retrieved 2026-09-14
Can you take CGEIT before meeting the experience requirement?
Yes. You can sit the exam before you qualify for certification. Passing alone does not award the credential.
Certification requires five years managing, advising, overseeing or otherwise supporting enterprise IT governance, across at least three of the four domains and including at least one year related to Domain 1.
The candidate guide lists no experience waivers or substitutions. Check your actual duties against the current application rather than relying on a job title.
Apply within five years of passing. The relevant work experience must fall within the ten years preceding your application and be verified through the application process. Certification also requires the application fee and agreement to ISACA’s professional ethics requirements.
Sources: Earn a CGEIT® Certification — ISACA, retrieved 2026-09-14; ISACA Certification Exams Candidate Guide (2026) — ISACA, retrieved 2026-09-14
What should you expect on exam day?
CGEIT has 150 multiple-choice questions in 240 minutes. Each has four options and one best answer. The exam is closed book and is delivered through PSI at a testing center or by remote proctoring.
Read the stated role, constraints and qualifiers such as BEST or MOST. ISACA says there is no penalty for wrong answers, so answer every question. Practise pacing across the full session, including time for review.
The passing standard is 450 on the 200–800 scaled score. It is not a raw percentage or a fixed correct-answer count. The guide mentions unscored pretest items without specifying their number. Domain weights describe content coverage; the domain feedback is informational, not a set of separate passing thresholds.
A preliminary result appears on screen. The official result follows within 10 working days.
Sources: CGEIT® Exam Content Outline — ISACA, retrieved 2026-09-14; ISACA Certification Exams Candidate Guide (2026) — ISACA, retrieved 2026-09-14
What should you check before booking?
Registration gives you six months of exam eligibility. Check the current candidate guide, your appointment instructions and the booking price before paying.
You can reschedule without penalty at least 48 hours before your appointment, within the eligibility period. The handbook describes one optional paid six-month extension under specific timing conditions; it is not automatic.
After a failed first attempt, the retake waits are 30 days, then 90 days after the second and third attempts. The limit is four total attempts in a rolling 12 months, with a fee for each attempt.
- Check that your original, valid government-issued ID has the required name, photo and signature and matches your registration.
- For remote testing, complete the compatibility check and review the workspace and check-in rules before your appointment.
- Keep notes, calculators and extra screens out of the testing area. Follow the proctor’s instructions; approved breaks consume exam time.
- If you need accommodations, arrange approval through ISACA before scheduling.
Sources: ISACA Certification Exams Candidate Guide (2026) — ISACA, retrieved 2026-09-14
Sources
Facts checked against ISACA sources: