HISACA Certified in the Governance of Enterprise IT An ISACACertification CGElT? Review Manual 2010 CCEIP CERTIFIED NANCE OFENTERPRISEIT ISACA? With more than 86,000 constituents in more than 160 countries, ISACA (www.isaca.org) is a leading global provider of knowledge, certifications, community, advocacy and education on information systems (IS) assurance and security enterprise governance of IT, and IT-related risk and compliance. Founded in 1969, ISACA sponsors international conferences, publishes the ISACA Journal, and develops international IS auditing and control standards. It also administers the globally respected Certified Information Systems AuditorM (CISA), Certified Information Security Manager ControlTM (CRISCTM) designations. ISACA offers the Business Model for Information Security (BMIS) and the IT Assurance Framework (ITAF). It also developed and maintains the CoBrT, Val ITTM and Risk IT frameworks, which help IT professionals and enterprise leaders fulfill their IT governance responsibilities and deliver value to the business. Disclaimer ISACA has produced this publication as an educational resource to assist individuals preparing to take the CGEIT responsibility for its content. Copies of past exams are not released to the public and were not made available to ISACA for preparation of this publication. ISACA makes no representations or warranties whatsoever with regard to these or other ISACA publications assuring candidates' passage of the CGEIT exam. Reservation of Rights Copyright 2010 ISACA. All rights reserved. No part of this publication may be used, copied, modified, displayed, otherwise), without the prior written authorization of ISACA. ISACA 3701 Algonquin Road, Suite 1010 Rolling Meadows, Illinois 60008 USA Phone:+1.847.253.1545 Fax:+1.847.253.1443 Web site: www.isaca.org ISBN 978-1-60420-124-6 CGEIT Review Manual 2010 Printed in the United States of America CGEIT is a trademark/service mark of ISACA. The mark has been applied for or registered in countries throughout the world. ii CGEITReviewManual2010 CGEITREVIEWMANUAL2010 ISACA is pleased to offer this first edition of the CGEIT Review Manual 2010. The purpose of the manual is to provide CGEIT candidates with technical information and references to assist in the preparation and study for the Certified in the Governance of EnterpriseIT(CGEIT)exam. The content in the manual is based on the current CGEIT job practice (www.isaca.org/cgeitjobpractice). This manual is the result of contributions of volunteers across the globe who are actively involved in the governance of IT and who have generously contributed their time and expertise. The CGEIT Review Manual will be updated annually to keep pace with rapid changes in the field ofIT governance.As such, your comments and suggestions regarding this manual are welcomed. A feedback questionnaire is included at the back of this manual. After the exam is over, please take a moment to complete and return the questionnaire to ISACA. Your observations will be extremely valuable for the preparation of the 2011 edition of themanual. No representations or warranties are made by ISACA in regard to these or other ISACA/ITGI publications assuring candidates' passage of the CGEIT exam. This publication was produced independently of the CGEIT Certification Committee, which has no responsibility for the content of this manual. Copies of the CGEIT exam are not released to the public. The sample practice questions in this manual are designed to provide further clarity to the content presented in the manual and to depict the type of questions typically found on the CGEIT exam. The CGEIT exam is a practice-based exam. Simply reading the reference material in this manual will not properly prepare candidates for the exam. The sample questions are included for guidance only.Your scoring results do not indicate future individual exam success Certification has resulted in a positive impact on many careers, including worldwide