CGEIT study guide · 2026

The 4 CGEIT domains, explained

4 domains and 39 official subtopics. Governance of Enterprise IT carries the most weight at 40%. Each guide explains what the domain covers, how its questions are framed and where candidates lose marks.

Start with Domain 1 See all domains
Questions
150
Time
4 hours
Passing score
450 on a 200–800 scaled score
Outline
CGEIT Exam Content Outline effective 2020 (current; no update announced as of October 2026)

Exam blueprint

Bar widths follow the official weights. Weight ranges are drawn at their midpoint.

  1. 1 40%
  2. 2 15%
  3. 3 26%
  4. 4 19%
  1. 1 Governance of Enterprise IT
  2. 2 IT Resources
  3. 3 Benefits Realization
  4. 4 Risk Optimization

All 4 domains

39 official subtopics 150–195 hrs suggested study

  1. Domain 01 40%

    Governance of Enterprise IT

    The largest CGEIT domain covers how boards and executives direct and oversee IT: framework design, strategy, decision rights, architecture, policy and the governance of information itself.

    Inside this domain

    • Components of a Governance Framework
    • Organizational Structures, Roles and Responsibilities
    • Strategy Development
    • Legal and Regulatory Compliance
    • and 12 more subtopics

    Watch for Framework as the answer

    Subtopics
    16
    Questions est.
    ~60
    Study time est.
    60–75 hrs
  2. Domain 02 15%

    IT Resources

    IT Resources asks how the enterprise plans, acquires and optimizes the people, assets and suppliers that IT strategy depends on, and how governance keeps accountability when work is outsourced.

    Inside this domain

    • Sourcing Strategies
    • Resource Capacity Planning
    • Acquisition of Resources
    • IT Resource Lifecycle and Asset Management
    • and 2 more subtopics

    Watch for Terminate the contract

    Subtopics
    6
    Questions est.
    ~22
    Study time est.
    20–30 hrs
  3. Domain 03 26%

    Benefits Realization

    Benefits Realization tests whether IT-enabled investments and services actually deliver value: how performance is measured, how governance is monitored and reported, and how business cases and portfolios are managed.

    Inside this domain

    • Performance Management
    • Change Management
    • Governance Monitoring
    • Governance Reporting
    • and 6 more subtopics

    Watch for Finish what we started

    Subtopics
    10
    Questions est.
    ~39
    Study time est.
    40–50 hrs
  4. Domain 04 19%

    Risk Optimization

    Risk Optimization covers how IT-related risk is governed within enterprise risk management, from frameworks and board-set appetite to scenarios, assessment methods and the response lifecycle.

    Inside this domain

    • Risk Frameworks and Standards
    • Enterprise Risk Management
    • Risk Appetite and Risk Tolerance
    • IT-Enabled Capabilities, Processes and Services
    • and 3 more subtopics

    Watch for Mitigate everything

    Subtopics
    7
    Questions est.
    ~29
    Study time est.
    30–40 hrs

Study the heaviest domains first

Marks follow weight. This order puts the most marks behind you first, across about 150–195 hrs of study.

  1. 1 Governance of Enterprise IT 40% · 60–75 hrs
  2. 3 Benefits Realization 26% · 40–50 hrs
  3. 4 Risk Optimization 19% · 30–40 hrs
  4. 2 IT Resources 15% · 20–30 hrs

Try one

Practice questionDomain 1: Governance of Enterprise IT

A retailer's marketing and finance teams each report different customer counts to the board, and both blame the other's system. The CIO proposes buying a master data management tool. What should the governance committee do FIRST?

One trap from every domain

The answer that looks right, and the clue that gives it away.

  • Domain 1

    Framework as the answer

    Clue If the question names a specific weakness, pick the answer that targets it.

  • Domain 2

    Terminate the contract

    Clue Look for answers that verify facts and use contract mechanisms first.

  • Domain 3

    Finish what we started

    Clue Look for changed assumptions or a business case that no longer holds.

  • Domain 4

    Mitigate everything

    Clue Look for a statement that the risk is within tolerance.

Other Enterprise Architecture & IT Governance certifications

Study guides for exams that overlap with CGEIT.

Practise what you read

CGEIT domains: common questions

How many domains are in the CGEIT exam?

CGEIT has 4 domains with 39 official subtopics between them: Governance of Enterprise IT, IT Resources, Benefits Realization and Risk Optimization.

Which CGEIT domain carries the most weight?

Governance of Enterprise IT is the heaviest at 40%, followed by Benefits Realization (26%). The lightest is IT Resources (15%). Weights come from ISACA's official outline.

What is the CGEIT exam format?

Questions: 150. Time allowed: 4 hours. Passing score: 450 on a 200–800 scaled score.

How long should I study for CGEIT?

Our planning estimate is 150–195 hrs across all domains, split by weight. It is an editorial estimate, not an official figure, so adjust it to your experience and to how you score on practice questions.

Where should I start?

Start with Governance of Enterprise IT, because it carries the most marks, then work down by weight. Use the checklist on each domain page to confirm you can do what the domain asks before moving on.

Which outline is this guide based on?

This guide follows CGEIT Exam Content Outline effective 2020 (current; no update announced as of October 2026), published by ISACA. It was last reviewed in October 2026.

Domain names, weights and subtopics come from ISACA's official outline (CGEIT Exam Content Outline effective 2020 (current; no update announced as of October 2026)). Question counts and study hours are editorial planning estimates, not official figures. Last reviewed October 2026.