dc dotCreds
Reference guide

ISACA CGEIT Course Notes

Study ISACA CGEIT section notes, then jump straight into the guided course or related practice questions without losing your place.

Continue CourseStart PracticePDF downloads available in Pro.
Checking access

Checking Pro access...

Looking for your active Pro access before showing Course Notes. This usually takes just a moment.

Course Notes preview

Unlock Pro for the full per-exam reference guide.

Preview one piece from each section. Pro includes every Course Notes section, summary, key point, common mistake, exam tip, related-question review, and PDF export.

Includes full Course Mode and Course Notes.

Section 1Governance of Enterprise IT (40%)Preview
More in this section
  • 10 more key points in Pro version
  • 4 more common mistakes in Pro version
  • 2 more exam tips in Pro version
  • 73 more related questions in Pro version

Summary

CGEIT is governance-first: evaluate stakeholder needs, direct priorities, and monitor outcomes. Build a tailored governance system, align I&T strategy and architecture with enterprise goals, and govern information as an enterprise asset.

Key Points

  • Governance = Evaluate, Direct, Monitor (EDM); management executes.

Common Mistakes

  • Confusing governance with operational management.

Exam Tips

  • Stakeholder value first.
Section 2IT Resources (15%)Preview
More in this section
  • 10 more key points in Pro version
  • 4 more common mistakes in Pro version
  • 2 more exam tips in Pro version
  • 11 more related questions in Pro version

Summary

IT Resources is strategic sourcing, capacity, acquisition, lifecycle optimization, competency, and supplier governance. Optimize enterprise capability and value—not simply spend less.

Key Points

  • Sourcing model must fit strategy, risk, architecture, capability, cost, and control needs.

Common Mistakes

  • Selecting suppliers mainly on price.

Exam Tips

  • Source for lifecycle value.
Section 3Benefits Realization (26%)Preview
More in this section
  • 12 more key points in Pro version
  • 4 more common mistakes in Pro version
  • 3 more exam tips in Pro version
  • 69 more related questions in Pro version

Summary

Benefits Realization governs performance and IT-enabled investments from business case through post-implementation outcomes. A technically successful project is not successful if intended enterprise benefits are not realized.

Key Points

  • Business cases define expected benefits, costs, risks, dependencies, assumptions, ownership, and measures.

Common Mistakes

  • Calling a project successful because it is on time/budget.

Exam Tips

  • Business case = why invest.
Section 4Risk Optimization (19%)Preview
More in this section
  • 10 more key points in Pro version
  • 4 more common mistakes in Pro version
  • 2 more exam tips in Pro version
  • 35 more related questions in Pro version

Summary

Risk Optimization establishes enterprise I&T risk strategy and then continually assesses, treats, monitors, and communicates risk in business terms aligned with ERM, appetite, tolerance, and resilience.

Key Points

  • Integrate I&T risk into enterprise risk management.

Common Mistakes

  • Keeping IT risk separate from ERM.

Exam Tips

  • Business outcome, not technical severity.