Certified in the Governance of Enterprise IT (CGEIT)

Last checked October 22, 2026 against the official ISACA exam page.

1. Question 1Governance of Enterprise IT

   Which governance principle requires that IT decisions involve business leadership, so that they share ownership of IT value?

   1. AAnnual budget freezes that prevent any IT investment from proceeding, regardless of the business need for it
   2. BTechnical autonomy, where the IT function alone decides which investments are made without business input
   3. CProcurement-only control, where purchasing rules replace all other governance decisions for the enterprise
   4. DStakeholder engagement, where business leaders co-own IT decisions and the value they are expected to deliver
   Show answer and explanationHide answer

   Correct answer: D

   Stakeholder engagement means business leaders share ownership of IT decisions and value. Technical autonomy, procurement-only control and budget freezes each remove the business from governance decisions.

2. Question 2Risk Optimization

   What does risk optimisation in IT governance aim to achieve?

   1. ARecording IT risks without deciding how to respond to any of them, so that the register remains complete
   2. BEliminating every IT risk, regardless of the cost of doing so or the value that is forgone as a result
   3. CTransferring all IT risk to the vendor without any review of its ability to carry that risk in practice
   4. DBalancing IT risk and opportunity, so that risk is kept within appetite while value is pursued
   Show answer and explanationHide answer

   Correct answer: D

   Risk optimisation balances risk and opportunity within appetite. Eliminating all risk, transferring it without review and recording without response do not optimise risk.

3. Question 3Benefits Realization

   What is benefits realisation in IT governance?

   1. AThe practice of recording each IT benefit once, at project approval, and then closing the project file
   2. BThe process of identifying, planning, tracking and realising the value that IT investments are expected to deliver
   3. CCounting the number of features delivered by a project without assessing whether those features create value
   4. DReducing all of the benefits of IT to a single cost-saving figure for the annual budget discussion
   Show answer and explanationHide answer

   Correct answer: B

   Benefits realisation is the process of identifying, planning, tracking and realising the expected value. Recording benefits once, counting features and reducing benefits to one figure do not track value.

4. Question 4IT Resources

   Which resource category covers the skills and competencies the enterprise needs from its IT staff?

   1. AThe physical floor space of the data centre, measured in square metres for the facilities team's planning
   2. BThe human resources domain of IT, including skills, competencies and workforce planning for the function
   3. CThe internet bandwidth contract with the carrier, measured in megabits per second for the connection
   4. DThe software licence key register kept by the finance team for the accounting records of the enterprise
   Show answer and explanationHide answer

   Correct answer: B

   The human resources domain covers skills, competencies and workforce planning. Floor space, bandwidth contracts and licence registers are other resource categories.

5. Question 5Governance of Enterprise IT

   What is the main role of an enterprise IT governance framework?

   1. ATo replace the enterprise's business strategy with an IT-specific plan that the IT function writes alone
   2. BTo list every software product the enterprise has ever purchased, kept for historical reference only
   3. CTo set the decision rights, accountability and oversight mechanisms that align IT with enterprise objectives
   4. DTo assign IT staff to the most visible projects each quarter, so that their work is noticed by leaders
   Show answer and explanationHide answer

   Correct answer: C

   A governance framework sets decision rights, accountability and oversight that align IT with enterprise objectives. Product lists, replacing strategy and visibility-based staffing are not its role.