ExpertGovernance and risk

CGEIT

Certified in the Governance of Enterprise IT · ISACA

The CGEIT certifies mastery of enterprise IT governance: governance frameworks, IT strategy, benefits realisation, resource optimisation and risk optimisation. It targets senior profiles and is held by relatively few people, mostly CIOs, governance directors and consultants. Its strength is to validate a board-level view of IT; its limit is low visibility in job ads and very little security content as such.

Exam
150 multiple-choice questions in 4 h, scaled score from 200 to 800 with a pass mark of 450. In a PSI test centre or online with remote proctoring.
Exam price
$575ISACA member price; non-members pay US$760. A US$50 application fee is due when applying for certification after passing.
Required experience
Five years in an advisory or oversight role supporting the governance of enterprise IT, across at least three of the four domains, including one year in IT governance itself. No waivers.
Validity and maintenance
At least 20 CPE hours per year and 120 over 3 years, plus an annual fee of US$45 (members) or US$85 (non-members).
Format
Multiple choice
Recognition
ISO/IEC 17024 accredited

Who is it for?

CIOs, IT governance directors, transformation leads and senior consultants with long experience in managing or advising on enterprise IT.

Domains covered

  • Governance of enterprise IT: 40%
  • IT resources: 15%
  • Benefits realisation: 26%
  • Risk optimisation: 19%

Belinda’s take

Information checked on 2 October 2026 against the official site. Prices exclude tax and training, and may change.

Official site

The certification names mentioned are trademarks of their respective owners. KrakenShield is not affiliated with any certification body and does not reproduce any exam question.

All certifications

From theory to practice

So how does your system measure up?

Create your account and get an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Run the audit from your account: an A+ to F grade for your domains’ encryption in minutes, with every finding explained and the fix to apply.

Belinda

Contact us

A question, a project, a partnership? Write to us: the team answers by email, usually within one business day.

Your details are only used to answer you. Do not include passwords or vulnerability details.