ISACA CGEIT

Exam format

ISACA logo

ISACA CGEIT Exam Format

CGEIT

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The ISACA Certified in the Governance of Enterprise IT (CGEIT) certification is a globally recognized credential for professionals who advise, guide, and support enterprise governance of IT. It validates an individual's ability to align information technology with the organization's strategic objectives while maximizing value, optimizing resources, and managing risk. The certification is built on four domains: Governance of Enterprise IT, IT Resources, Benefits Realization, and Risk Optimization. CGEIT is not an entry-level examination; it is designed for experienced leaders, consultants, and practitioners who already understand IT governance concepts and need to demonstrate mastery of accepted practices and frameworks. Candidates must pass a 150-question, four-hour examination and adhere to the ISACA Code of Professional Ethics. The credential also requires continuing professional education to maintain relevance. CGEIT holders are expected to apply critical thinking to complex business-aligned decisions, communicate effectively with senior executives and boards, and champion a governance culture that supports sustainable enterprise transformations.

150 questions
240 min
75% to pass
4 domains

Exam facts at a glance

The published specifications for this certification.

SpecificationValue
Questions150
Time limit240 minutes (96s per question)
Passing score75% — 450/800 scaled score (scale 200-800)
Domains4
LevelProfessional
Question bank here150 questions
Published format150 multiple-choice questions, 4 hours
SourceOfficial exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
IT Resources15%
  • IT resource planning and budgeting
  • IT investment portfolio management and prioritization
  • IT infrastructure, applications, and data resource management
  • +3 more
23
Risk Optimization19%
  • IT risk management frameworks and standards
  • Risk appetite, tolerance, and risk culture
  • Risk assessment and analysis methodologies
  • +4 more
28
Benefits Realization26%
  • Benefits identification, analysis, and classification
  • Business case development and investment appraisal
  • Benefits realization planning and ownership
  • +4 more
39
Governance of Enterprise IT40%
  • Defining enterprise governance of IT and its relationship to corporate governance
  • Stakeholder needs, value drivers, and strategic alignment of IT with enterprise objectives
  • Designing and implementing IT governance frameworks, policies, and decision rights
  • +4 more
60

The heaviest domain is IT Resources at 15%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: 5+ years in an advisory/oversight role are required for the DESIGNATION (the exam itself is open to anyone, no experience required to sit it). Separate US$50 application fee after passing; full fee per attempt (max 4 per rolling 12 months). PSI delivery; 6-month eligibility. Official exam page

More about the ISACA CGEIT exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Related certifications

Explore other certifications in the same category and see how they stack up.

Frequently asked questions

Everything you need to know about the ISACA CGEIT exam.