CGEIT

CGEIT

Strategic Management (20%)
1. Benefits Realization (16%)
  1. Risk Optimization (24%)
    1. Resource Optimization (15%)
      1. 1. Identify, acquire and maintain IT resources and capabilities (information, services, infra and applications and people
        2. Evaluate Direct and Monitor sourcing strategies to ensure existing resources are taken into account to optimize IT resource utilization
        3. Integration of IT resource management into the enterprise's strategic and tactical planning
        4. Alignment of IT resource management processes with ent resource mgmt processes
        5. Resource gap analysis process
        6. Policies to guide IT resource sourcing strategies that include SLAs and changes to sourcing strategies
        7. Policies and processes are in place for the assessment, training and development of staff to address enterprise requirements and personal/professional growth
      2. 1. IT resource planning methods
        2. Human resource procurement, assessment, training and development methodologies
        3. Processes for acquiring application, information and infrastructure resources
        4. Outsourcing and offshoring approaches -> investment program, OLAs and SLAs
        5. Methods used to record and monitor IT resource utilization and availability
        6. Methods used to evaluate and report on IT resource performance
        7. Knowledge of interoperability, standardization and economies of scale
        8. Data management and data governance concepts
        9. Service Level Management concepts
    2. 1. IT Risk management processes to identify, analyze, mitigate, manage, monitor and communicate IT risk
      1. 2. Legal and regulatory compliance requirements are addressed through IT risk management
        3. IT risk management is aligned with Ent. risk management (ERM) framework
        4. Senior level mgmt sponsorship for IT risk management
        5. IT risk management policies, procedures and standards are developed and communicated
        6. Ensure the identification of key risk indicators (KRIs)
        7. Timely reporting and proper escalation of risk events and responses to appropriate levels of mgmt
    3. 1. Application of risk management at strategic, portfolio, program, project and operations levels
      1. 2. Risk management frameworks and standards (RISK IT, ISO 31000, COSO ERM, etc.
        3. Relationship of the risk management approach to legal and regulatory compliance
        4. Methods to align IT and ent. Risk management (ERM)
        5. Relationship of the risk mgmt approach to business resiliency (BCP and DRP)
        6. Risk, Threat, Vulnerabilities and Opportunities inherent in the use of IT
        7.Types of business risk, exposures and threats (external environment, internal fraud, information security)
        8. Risk appetite and risk tolerance
        9. Quantitative and Qualitative risk assessment methods
        10. Risk mitigation strategies related to IT in the enterprise
        11. Methods to monitor effectiveness of mitigation strategies and/or controls
        12. Stakeholder analysis and communication techniques
        13. Methods to establish key risk indicators (KRIs)
        14. Methods to manage and report the status of identified risk
  2. 1. IT enabled investments are managed as a portfolio of investments
    1. 2. IT enabled investments are managed through economic lifecycle
      1. 3. Business ownership and accountability for IT enabled investments are established
        4. IT investment management practices align with ent. investment practices
        5. IT enabled investment portfolios, IT processes and IT services are evaluated and benchmarked
        6. Outcome and performance measures are established and evaluated to assess progress towards ent and IT objectives
        7. Outcome and performance measures are monitored and reported to key stakeholders in a timely manner
        8. Ensure that improvement initiatives are identified, prioritized, initiated and managed based on the outcome and performance measures
  3. 1. IT Investment mgmt processes, including the economic life cycle of investments
    1. 2. Basic principles of portfolio managment
      1. 3. Benefit calculation techniques (earned value, TCO, ROI)
        4. process and service measurement techniques (maturity models, benchmarking, KPIs)
        5. Processes and practices for planning, development, transition, delivery and support of IT solutions and services
        6. Continuous improvement concepts and principles
        7. Outcome and performance measurement techniques (service metrics, KPIs)
        8. Procedures to manage and report the status of IT investments
        9. Cost Optimization strategies (Outsourcing, adoption of new technologies)
        10. Models and methods to establish accountability over IT investments
        11. Value delivery frameworks (Val IT)
        12. Business case development and evaluation techniques
2. 1. EDM IT strategic planning process to align with Ent. goals
  1. 2. Policies and procedures
    1. 3. IT Strategic planning processes are documented and communicated
      1. 4. EA is integrated into the IT strategic planning processes
        5. Prioritization of IT initiatives to achieve ent. objectives
        6. IT objectives cascaded into R&R and actions IT personnel
3. 1. Enterprise's strategic plan and how it relates to IT
  1. 2. Strategic Planning processes and Techniques
    1. 3. Impact of changes in business strategy on IT strategy
      1. 4. Barriers to achieve strategic alignment
        5.Policies and procedures necessary for IT strategy and business strategic alignment
        6. Methods to document and communicate IT strategic planning processes (IT dashboard, BSC, key indicators)
        7. Components, Principles and frameworks of EA
        8. Current and future technologies
        9. Prioritization processes related to IT initiatives
        10. Scope, objectives and benefits of IT investment programs
        11. IT R&R and methods to cascade business and IT objectives to IT personnel
Framework for Enterprise IT (25%)
1. Task Statements
  1. 1. Enterprise goals and Objectives
    1. 2. Identify requirements and Objectives <- enablers
      1. 3. Internal and external requirements
        4. Strategic planning
        5. Enterprise Architecture (EA)
        6. Processes and Activities
        7. Roles, Responsibilities and Accountabilities
        8. Issues
        9. Organization Structure
        10. Communication Channel
        11. Review Framework
2. Knowledge Statements
  1. 1. Components of Framework
    1. 2. Industry practices, standards and framework (COBIT, ITIL, ISO,etc.)
      1. 3. Business Drivers (Legal, regulatory, contractual)
        4. Enablers
        5. Techniques for IT strategy (SWOT, BCG Matrix)
        6. Components, Principles and concepts related to EA
        7. Org structures and their R&R (Ent. investment committee, PMO, IT strategy committee..)
        8. Methods to manage org, process and cultural changes
        9. Models and methods to establish accountability for info req., data and system ownership and IT processes
        10. Monitoring processes and mechanisms (BSC etc)
        11. Reporting Processes and Mechanisms
        12. Communication and promotional techniques
        13. Assurance methodologies and techniques
        14. Continuous Improvement Techniques and Processes

Nächster

Beschreibung

Zusammenfassung der Ressource

ähnlicher Inhalt

	Erstellt von sathyababutn vor etwa 11 Jahre