已获得geit认证? 登录myisaca

CGEIT考试包括哪些内容?

澳门赌场官方下载IT治理认证® (CGEIT®)考试包括150个问题,涵盖4个工作实践领域, all testing your knowledge and ability on real-life job practices leveraged by expert professionals.

以下是考生将测试的主要领域、子主题和任务:

墙上的证书插图,前面是人

ISACA的承诺

自2007年成立以来, 超过8个,000 people have obtained ISACA’s CGEIT certification to bring the knowledge and experience needed to align IT with business strategies and goals, 管理IT投资,使投资回报最大化, and strive for excellence in IT operations and governance while minimizing risk. 该域, 子主题和任务是广泛研究的结果, feedback and validation from subject matter experts and prominent industry leaders from around the globe.

通过CGEIT认证测试和验证的工作实践领域

40%域1 ——澳门赌场官方下载it治理

这个领域处理构建IT框架的组织结构, the strategy and technology aspects of IT governance and essential knowledge about governing various types of information.

治理框架

  1. 治理框架的组件
  2. 组织结构、角色和职责
  3. 战略发展
  4. 法律法规遵从性
  5. 组织文化
  6. 商业道德

B-TECHNOLOGY治理

  1. 与澳门赌场官方下载目标一致的治理策略
  2. 策略规划过程
  3. 利益相关者分析与参与
  4. 沟通与意识策略
  5. 澳门赌场官方下载架构
  6. 政策及标准

C-INFORMATION治理

  1. 信息架构
  2. 信息资产生命周期
  3. 信息所有权和管理
  4. 信息分类与处理

15%域2 -资讯科技资源

This domain provides insight about where to effectively allocate your IT resources and how to ensure IT resources are streamlined for performance.

资讯科技资源规划

  1. 采购策略
  2. 资源容量规划
  3. 获取资源

B-it资源优化

  1. IT资源生命周期和资产管理
  2. 人力资源能力评估与开发
  3. 合同服务和关系的管理

26%域3 -效益实现

这个领域的重点是管理性能, 监察及报告, 分析it技术投资管理.

it绩效和监督

  1. 绩效管理
  2. 变更管理
  3. 管理监控
  4. 治理报告
  5. 质量保证
  6. 流程开发和改进

支持it的投资的b级管理

  1. 业务案例开发和评估
  2. IT投资管理和报告
  3. 性能指标
  4. 效益评价方法

19%领域4 -风险优化

This domain is about mitigating potential IT risks and challenges and overseeing the risks of IT management capabilities.

一个风险的策略

  1. 风险框架和标准
  2. 澳门赌场官方下载风险管理
  3. 风险偏好和风险承受能力

B-RISK管理

  1. it支持的功能、流程和服务
  2. 业务风险、暴露和威胁
  3. 风险管理生命周期
  4. 风险评估方法

支持任务

  1. 建立澳门赌场官方下载IT治理框架的目标.
  2. 建立澳门赌场官方下载IT治理的框架.
  3. Identify the internal and external requirements for the framework for the governance of enterprise IT.
  4. Incorporate a strategic planning process into the framework for the governance of enterprise IT.
  5. Ensure that a business case development and benefits realization process for IT-enabled investments has been established.
  6. Incorporate enterprise architecture into the framework for the governance of enterprise IT.
  7. Incorporate information architecture into the framework for the governance of enterprise IT.
  8. Align the framework for the governance of enterprise IT with enterprise-wide shared services.
  9. Incorporate comprehensive and repeatable processes and activities into the framework for the governance of enterprise IT.
  10. Establish roles, responsibilities, and accountabilities for information assets and IT processes.
  11. 评估 the framework for the governance of enterprise IT and identify improvement opportunities.
  12. Establish a process for the identification and remediation of issues related to the framework for the governance of enterprise IT.
  13. Establish policies and standards that support IT and enterprise strategic alignment.
  14. Establish policies and standards that inform decision-making with regard to IT-enabled business investments.
  15. Establish communication and awareness processes to convey the value of the governance of enterprise IT.
  16. 评估, 直接, and monitor IT strategic planning processes to ensure alignment with enterprise goals.
  17. 评估、指导和监督涉众的参与.
  18. Document and communicate the IT strategic planning processes and related outputs.
  19. Ensure that enterprise architecture is integrated into the IT strategic planning process.
  20. Ensure that information architecture is integrated into the IT strategic planning process.
  21. Incorporate a prioritization process for IT initiatives into the framework for the governance of enterprise IT.
  22. Ensure that processes are in place to manage the lifecycle of IT resources and capabilities.
  23. Ensure that processes are in place to govern the lifecycle of information assets.
  24. Incorporate sourcing strategies into the framework for the governance of enterprise IT to ensure optimization and control.
  25. Ensure the alignment of IT resource management processes with the enterprise’s resource management processes.
  26. Ensure the alignment of information governance with the framework for the governance of enterprise IT.
  27. Ensure that processes are in place for the assessment and development of personnel to align with business needs.
  28. 确保支持it的投资在其经济生命周期中得到管理.
  29. 评估 the process that assigns ownership and accountability for IT-enabled investments.
  30. Ensure that IT investment management practices align with enterprise investment management practices.
  31. 评估 the benefits realization of IT-enabled investments, IT processes and IT services.
  32. Establish a performance management program for IT-enabled investments, IT processes and IT services.
  33. Ensure that improvement initiatives are based on the results derived from performance measures.
  34. Ensure that comprehensive IT and information risk management programs are established.
  35. Ensure that a process is in place to monitor and report on the adherence to IT and information risk management policies and standards.
  36. Ensure the alignment of IT processes with the enterprise's legal and regulatory compliance objectives.
  37. Ensure the alignment of IT and information risk management with the enterprise risk management framework.
  38. Ensure that IT and information risk management policies and standards are developed and communicated.

为考试做准备

ISACA提供各种备考资源,包括小组培训, self-paced training and study resources in various languages to help you prepare for your certification exam. 选择适合你的时间表和学习需要的方法.

下载考试术语表

While studying for your CGEIT exam, explore our lists of terms that will appear on the test. See the terms in English alongside how they will appear in the other languages offered.

简体中文