Certified: The ISACA CGEIT Audio Course
This podcast is an audio course designed to help listeners prepare for the ISACA CGEIT certification exam. It covers enterprise governance of IT, focusing on practical decision-making, risk management, and resource allocation. The course emphasizes understanding the 'why' behind concepts rather than just definitions. It is intended for both experienced governance professionals and newcomers, with advice to listen in short, repeatable loops.
Episodes
Episode 1 — Understand CGEIT exam rules, scoring, policies, and your spoken study plan (Exam)
This episode establishes how the CGEIT exam is structured and how to translate the exam’s expectations into a practical, audio-first study routine you can execute with consistency. You’ll review what the exam is actually measuring: governance judgment, decision logic, and the ability to connect business objectives to IT outcomes, not memorized trivia. We’ll cover how scoring works at a hi
Episode 2 — Define what “governance of enterprise IT” means in daily leadership decisions (1 Governance of Enterprise IT)
This episode explains governance of enterprise IT as a leadership system for making IT-related decisions that reliably produce business outcomes, manage risk, and demonstrate accountability. You’ll distinguish governance from management by focusing on direction, oversight, and decision rights rather than day-to-day execution, and you’ll connect GEIT to what executives actually do: priorit
Episode 3 — Connect enterprise strategy to IT governance outcomes leaders can measure (1B1)
This episode teaches you how to translate enterprise strategy into governance outcomes that are observable, measurable, and defensible in executive conversations. You’ll learn to start with strategic intent—growth, efficiency, resilience, compliance posture, or customer experience—and trace it into what governance must produce: portfolio priorities, standards, funding rules, risk boundari
Episode 4 — Build a governance framework that clarifies who decides what, and why (1A1)
This episode breaks down what it means to implement a governance framework that is clear enough to reduce confusion, prevent duplicated decisions, and make accountability enforceable. You’ll define decision rights as a practical concept: who is authorized to approve, who must be consulted, what evidence is required, and how exceptions are handled. We’ll discuss typical governance componen
Episode 5 — Choose governance structures that fit size, culture, and decision speed (1A2)
This episode focuses on selecting governance structures that match how an enterprise actually operates, because a structure that works in one environment can fail in another. You’ll compare centralized, decentralized, and federated governance approaches and learn how each affects consistency, responsiveness, and control. We’ll discuss practical design factors: organizational size, geograp
Episode 6 — Assign roles and responsibilities so accountability is visible and enforceable (1A2)
This episode teaches you how to make governance real by defining roles and responsibilities in a way that produces action, not ambiguity. You’ll examine how accountability differs from responsibility, why “everyone owns it” usually means no one does, and how to use role definitions to prevent governance gaps between business, IT, risk, security, architecture, and delivery teams. We’ll cov
Episode 7 — Develop governance strategy that aligns to enterprise direction and constraints (1A3)
This episode explains governance strategy as the plan for how governance will achieve enterprise direction while respecting real constraints like budget limits, talent availability, risk tolerance, regulatory obligations, and technology debt. You’ll learn how governance strategy differs from IT strategy by focusing on the rules of decision-making, oversight mechanisms, and performance exp
Episode 8 — Embed legal and regulatory compliance into governance, not after-the-fact (1A4)
This episode shows how to integrate legal and regulatory requirements into governance so compliance becomes part of decision-making rather than a last-minute scramble. You’ll cover how obligations translate into governance artifacts such as policies, standards, risk acceptance criteria, procurement clauses, control requirements, and reporting expectations. We’ll discuss how to build compl
Episode 9 — Shape organizational culture so governance behaviors become the default (1A5)
This episode explains why governance succeeds or fails based on culture, and how leaders can shape behaviors so governance becomes the normal way work gets done. You’ll define culture in governance terms: what people do when no one is watching, how exceptions are treated, and whether accountability is real or performative. We’ll cover practical levers such as incentives, leadership tone,
Episode 10 — Apply business ethics to governance tradeoffs, exceptions, and escalations (1A6)
This episode focuses on business ethics as a governance capability that shapes how tradeoffs and exceptions are handled under pressure. You’ll define ethical decision-making in the context of GEIT, including fairness, transparency, duty of care, and avoiding conflicts of interest in sourcing, investment prioritization, and risk acceptance. We’ll examine how ethical issues show up in real
Episode 11 — Set clear objectives for your enterprise governance framework and outcomes (Task 1)
This episode explains how to define governance objectives that are specific enough to guide real decisions and measurable enough to prove results, which is exactly what CGEIT scenario questions tend to test. You’ll learn how to express objectives in outcome language, such as improving value delivery, increasing transparency of decision rights, reducing risk exposure, or strengthening comp
Episode 12 — Establish a complete GEIT framework with scope, authority, and operating rhythm (Task 2)
This episode focuses on what it means to establish a governance of enterprise IT framework that is complete, workable, and defensible under exam scrutiny. You’ll define scope by clarifying what is governed, what is delegated, and what sits outside the framework, then you’ll define authority by specifying decision rights, escalation paths, and the mandate for enforcement. We’ll also cover
Episode 13 — Identify internal requirements that force governance decisions and control needs (Task 3)
This episode teaches you how to identify internal requirements that drive governance choices, such as enterprise policies, risk appetite statements, security standards, architectural principles, finance rules, and operational constraints. You’ll learn to treat internal requirements as decision inputs that define what must be true before an IT initiative can be approved, funded, or release
Episode 14 — Identify external requirements that reshape governance priorities and obligations (Task 3)
This episode explains how external requirements—laws, regulations, contractual commitments, industry standards, and customer expectations—should shape governance priorities and the evidence an enterprise must produce. You’ll learn how to translate an external obligation into governance actions, such as policy updates, control requirements, oversight reporting, vendor clauses, and exceptio
Episode 15 — Build strategic planning into governance so IT direction stays on-mission (Task 4)
This episode covers how to integrate strategic planning into governance so IT direction stays aligned to enterprise priorities across budget cycles, leadership changes, and shifting risk conditions. You’ll learn how governance influences strategic planning through investment criteria, architectural direction, portfolio guardrails, and performance measures that keep initiatives tied to out
Episode 16 — Ensure business cases and benefits realization exist before funding decisions (Task 5)
This episode explains how governance ensures that funding decisions are based on credible business cases and that promised benefits are tracked and realized after delivery. You’ll define what a business case must include for governance purposes, such as strategic alignment, options analysis, costs and risks, expected benefits, assumptions, dependencies, and ownership for outcomes. We’ll c
Episode 17 — Incorporate enterprise architecture so technology choices stay coherent over time (Task 6)
This episode teaches you how governance uses enterprise architecture to keep technology choices coherent, scalable, and aligned to business capabilities over time. You’ll define enterprise architecture in practical terms as the set of principles, standards, patterns, and target states that guide solution decisions and reduce fragmentation. We’ll discuss how governance enforces architectur
Episode 18 — Incorporate information architecture so data decisions align enterprise-wide (Task 7)
This episode focuses on information architecture as a governance requirement for making data decisions consistent across the enterprise, which is increasingly critical for risk, compliance, and value delivery. You’ll define information architecture as how data is classified, modeled, stored, protected, shared, and retained, and how those rules connect to business processes and reporting n
Episode 19 — Align GEIT with shared services so controls are consistent and reusable (Task 8)
This episode explains how governance aligns with shared services—such as centralized infrastructure, security, identity, procurement, service management, and data platforms—so controls are applied consistently and reused instead of reinvented. You’ll learn why shared services can strengthen governance by providing standardized capabilities, predictable service levels, and clearer accounta
Episode 20 — Make governance repeatable using standard processes and decision checkpoints (Task 9)
This episode teaches you how to make governance repeatable by using standard processes and decision checkpoints that consistently produce evidence, enforce accountability, and reduce the chance of “special case” chaos. You’ll define decision checkpoints as predictable moments where governance requires validation, such as intake and prioritization, architecture review, risk assessment, fun
Episode 21 — Define accountability for information assets and IT processes across owners (Task 10)
This episode explains how to define and prove accountability for information assets and IT processes so governance can reliably assign ownership, measure performance, and enforce decisions. You’ll clarify the difference between owning an asset, operating a process, and being accountable for outcomes, then apply that logic to common governance pressure points like data ownership, service o
Episode 22 — Evaluate your governance framework to find gaps, overlaps, and weak signals (Task 11)
This episode teaches you how to evaluate a governance framework as a living system, looking for gaps where decisions are not owned, overlaps where forums duplicate work, and weak signals that indicate governance is drifting before a failure becomes visible. You’ll learn practical evaluation methods, including reviewing decision-right clarity, testing how exceptions are handled, assessing
Episode 23 — Build issue remediation that closes governance gaps and prevents recurrence (Task 12)
This episode focuses on designing remediation so governance problems actually get resolved and stay resolved, rather than cycling through the same findings and exceptions every quarter. You’ll learn to treat remediation as a governance workflow: identify the root cause, assign an accountable owner, define corrective actions with measurable completion criteria, and verify that the fix chan
Episode 24 — Align governance policies to enterprise objectives without creating bureaucracy (1B6)
This episode explains how to align governance policies to enterprise objectives while keeping policies usable, enforceable, and proportional to risk, which is a common tradeoff in governance scenario questions. You’ll learn to start with objective-driven intent—what the enterprise is trying to achieve and protect—then convert that intent into policy requirements that can be understood and
Episode 25 — Build policies and standards that steer decisions even under time pressure (Task 13)
This episode teaches you how to build policies and standards that continue to guide decisions when teams are under deadlines, incidents are unfolding, or leadership is pushing for speed. You’ll learn how to write policy intent so it is unambiguous, then support it with standards that define what “compliant” looks like in practical, testable terms. We’ll cover how to design standards that
Episode 26 — Create investment policies that guide IT-enabled business decision-making (Task 14)
This episode focuses on investment policies as a governance tool that makes IT-enabled business decision-making consistent, transparent, and aligned to enterprise priorities. You’ll learn how investment policies define what qualifies for funding, what evidence is required, how initiatives are compared, and how risk and compliance constraints influence approval decisions. We’ll discuss pra
Episode 27 — Communicate GEIT value so stakeholders support governance choices consistently (Task 15)
This episode explains how to communicate the value of governance of enterprise IT so stakeholders understand the “why” behind governance choices and support them consistently across projects and business units. You’ll learn to describe GEIT value in outcome terms, such as better investment returns, reduced operational risk, clearer accountability, faster decision-making through standardiz
Episode 28 — Direct and monitor IT strategic planning so alignment does not drift (Task 16)
This episode teaches you how governance directs and monitors IT strategic planning to prevent drift, meaning the slow shift where initiatives, architecture choices, and spending no longer reflect enterprise priorities. You’ll learn how governance sets direction through principles, investment criteria, and performance expectations, then monitors alignment through portfolio reviews, roadmap
Episode 29 — Run stakeholder engagement that turns governance into shared ownership (Task 17)
This episode focuses on stakeholder engagement as a governance capability that turns compliance into commitment by making ownership shared, expectations clear, and decisions transparent. You’ll learn to identify stakeholder groups that influence GEIT outcomes, such as business sponsors, risk and compliance leaders, security, architecture, finance, operations, and delivery teams, then defi
Episode 30 — Document planning processes and outputs so governance survives staff turnover (Task 18)
This episode explains why documenting planning processes and outputs is essential for governance continuity, especially when key leaders, architects, or program managers leave and institutional knowledge disappears. You’ll learn what documentation matters most for GEIT: decision rights, planning assumptions, portfolio rationale, roadmaps, standards, exception records, risk acceptance deci
Episode 31 — Integrate enterprise architecture into strategic planning to prevent solution sprawl (Task 19)
This episode explains how to integrate enterprise architecture into strategic planning so the organization avoids solution sprawl, duplicated platforms, and inconsistent design choices that quietly increase cost and risk. You’ll learn how architecture inputs should shape planning decisions, including target-state roadmaps, approved patterns, technology standards, integration principles, a
Episode 32 — Integrate information architecture into strategic planning to keep data governable (Task 20)
This episode focuses on integrating information architecture into strategic planning so data remains governable as systems change, new platforms arrive, and analytic demands increase. You’ll define information architecture as the enterprise approach to data definitions, lineage, classification, retention, access models, and quality expectations, then connect it directly to planning decisi
Episode 33 — Prioritize IT initiatives using value, risk, and constraints leaders understand (Task 21)
This episode teaches you how governance prioritizes IT initiatives using language leaders understand: value, risk, feasibility, and constraints, rather than technical preference or whoever argues loudest. You’ll learn how to compare initiatives with consistent criteria, including strategic alignment, measurable benefits, regulatory obligations, risk exposure, total cost of ownership, deli
Episode 34 — Design enterprise architecture guardrails that still allow innovation and speed (1B5)
This episode explains how to design enterprise architecture guardrails that protect the enterprise from chaos while still allowing innovation, speed, and experimentation where it makes business sense. You’ll learn what a “guardrail” looks like in practice: principles and standards that define boundaries, pre-approved patterns that accelerate delivery, and an exception process that is fast
Episode 35 — Build a strategic planning process with cadence, inputs, and decision gates (1B2)
This episode teaches you how to build a strategic planning process that produces consistent decisions by establishing a predictable cadence, clear required inputs, and decision gates that prevent low-quality plans from becoming funded work. You’ll learn how governance defines cadence across annual strategy refreshes, quarterly portfolio reviews, and operational adjustments, so planning st
Episode 36 — Use stakeholder analysis to map influence, incentives, and resistance early (1B3)
This episode focuses on stakeholder analysis as a governance skill that prevents late-stage surprises, hidden blockers, and political failures that derail otherwise sound plans. You’ll learn how to identify stakeholders who influence outcomes, including executives, business owners, risk and compliance leaders, security, architecture, finance, operations, and delivery teams, then map what
Episode 37 — Create communication and awareness that makes governance practical, not abstract (1B4)
This episode explains how to build communication and awareness so governance becomes practical guidance people can follow, not abstract statements that live in policy folders. You’ll learn how to communicate governance intent in plain business language, tie it to day-to-day decisions, and show teams what evidence and behaviors are expected at key checkpoints like intake, design review, pr
Episode 38 — Define information architecture that supports security, analytics, and operations (1C1)
This episode teaches you how to define information architecture that simultaneously supports security, analytics, and operations, instead of optimizing for one and breaking the others. You’ll learn how information architecture creates shared definitions, authoritative sources, data flows, classification rules, and retention expectations that make controls enforceable and reporting reliabl
Episode 39 — Govern information across its lifecycle from creation through secure disposal (1C2)
This episode focuses on governing information across its lifecycle so value is captured while risk is controlled from the moment data is created until it is securely disposed of. You’ll define lifecycle governance stages such as creation or collection, classification, storage, access and sharing, processing, archival, retention, and disposal, and you’ll learn how each stage creates specif
Episode 40 — Assign data ownership and stewardship so decisions are timely and consistent (1C3)
This episode explains how assigning data ownership and stewardship turns data governance into timely, consistent decisions about definitions, quality, access, sharing, and risk acceptance. You’ll learn the practical difference between a data owner, who is accountable for business meaning and risk decisions, and a data steward, who drives day-to-day quality, metadata, and process execution
Episode 41 — Implement classification and handling rules people follow without confusion (1C4)
This episode explains how to implement data classification and handling rules so they are consistently followed in daily work, not ignored because they are unclear or inconvenient. You’ll review what classification is meant to accomplish in governance terms: defining sensitivity, usage boundaries, protection requirements, and acceptable sharing so decisions are consistent across teams and
Episode 42 — Manage IT resources as capabilities, not just budgets, tools, or headcount (2 IT Resources)
This episode teaches you how to manage IT resources as capabilities, meaning combinations of people, processes, technology, and information that produce specific business outcomes, rather than treating resources as disconnected budgets, tools, or staffing levels. You’ll learn how a capability view improves governance decisions by clarifying what the enterprise can reliably do, what needs
Episode 43 — Choose sourcing strategies that balance control, speed, cost, and resilience (2A1)
This episode focuses on choosing sourcing strategies that balance governance priorities like control, speed to deliver, cost discipline, and operational resilience. You’ll define sourcing options in practical terms, including in-house delivery, outsourcing, managed services, cloud service models, and hybrid approaches, then learn how governance evaluates tradeoffs using risk appetite, cri
Episode 44 — Plan resource capacity so demand, constraints, and delivery stay aligned (2A2)
This episode teaches you how governance approaches resource capacity planning so demand, constraints, and delivery commitments stay aligned instead of collapsing into chronic overload and missed outcomes. You’ll learn to define capacity in governance terms as the enterprise’s ability to deliver and operate IT services reliably, including skills, tooling, platform limits, vendor bandwidth,
Episode 45 — Acquire resources with governance controls built into procurement decisions (2A3)
This episode explains how to acquire IT resources with governance controls embedded into procurement decisions so risk, compliance, and accountability are addressed before contracts are signed and systems are deployed. You’ll learn how governance influences procurement by defining required evidence, security and privacy requirements, service levels, audit rights, data ownership terms, and
Episode 46 — Optimize IT resource lifecycles to reduce waste and improve reliability (2B1)
This episode focuses on optimizing IT resource lifecycles so the enterprise reduces waste, avoids surprise failures, and improves reliability through disciplined planning and governance oversight. You’ll define lifecycle thinking for key resources like infrastructure, platforms, applications, licenses, and vendor services, covering stages such as selection, onboarding, operation, maintena
Episode 47 — Build competency assessment that links skills directly to business outcomes (2B2)
This episode teaches you how to build competency assessment so skills are linked directly to business outcomes and enterprise risk needs, not just job titles or training completions. You’ll learn to define competencies in practical terms, including technical skills, governance skills, operational discipline, and decision-making ability, then map them to capabilities the enterprise must de
Episode 48 — Manage contracted services with clear outcomes, controls, and accountability (2B3)
This episode explains how to manage contracted services so outcomes are clear, controls are enforceable, and accountability remains with the enterprise even when delivery is external. You’ll learn how to define service outcomes through measurable service levels, performance indicators, and responsibilities for security, privacy, incident response, and change management. We’ll cover govern
Episode 49 — Ensure lifecycle management for IT resources and capabilities is consistently executed (Task 22)
This episode focuses on ensuring lifecycle management for IT resources and capabilities is consistently executed, because inconsistency is where hidden risk, uncontrolled cost, and service instability accumulate. You’ll learn how governance verifies execution by requiring defined lifecycle processes, accountable owners, measurable checkpoints, and evidence that refresh, patching, decommis
Episode 50 — Govern lifecycle management for information assets so value and risk stay visible (Task 23)
This episode explains how to govern lifecycle management for information assets so business value remains measurable and risk remains visible throughout creation, use, sharing, retention, and disposal. You’ll learn to treat information assets as governed resources with ownership, classification, quality expectations, access rules, and retention and deletion triggers, and you’ll connect th
Episode 51 — Integrate sourcing strategies into GEIT to strengthen optimization and control (Task 24)
This episode explains how to integrate sourcing strategies into governance of enterprise IT so sourcing decisions optimize cost and capability without sacrificing control, accountability, or resilience. You’ll learn how GEIT turns sourcing into a governed decision process by defining approval rights, required evidence, and risk-based criteria for choosing in-house, outsourced, managed ser
Episode 52 — Align IT resource management with enterprise resource governance and planning (Task 25)
This episode teaches you how to align IT resource management with broader enterprise resource governance so IT planning, budgeting, staffing, and capacity decisions reinforce enterprise priorities instead of competing with them. You’ll learn to connect IT resource decisions to enterprise planning cycles, financial governance, risk appetite, and capability roadmaps, with an emphasis on mak
Episode 53 — Align information governance with GEIT so data controls match enterprise priorities (Task 26)
This episode focuses on aligning information governance with GEIT so data controls, accountability, and decision-making priorities reflect what the enterprise is trying to achieve and protect. You’ll learn how GEIT provides the direction, oversight, and metrics that information governance needs, while information governance supplies the definitions, lifecycle rules, and evidence that gove
Episode 54 — Develop people capabilities using targeted plans, not generic training calendars (Task 27)
This episode explains how to develop people capabilities in a way governance can measure and defend, using targeted plans tied to enterprise outcomes rather than generic training calendars that don’t change performance. You’ll learn how to identify capability gaps by looking at delivery results, control failures, incident patterns, and strategic initiatives that require new skills, then t
Episode 55 — Build performance management that proves IT value delivery and accountability (3A1)
This episode teaches you how to build performance management that proves IT value delivery and accountability in ways executives can use to make decisions, rather than relying on activity metrics that don’t reflect outcomes. You’ll learn to define performance measures that connect strategy to delivery, such as benefits realization metrics, service reliability and resilience measures, risk
Episode 56 — Use change management to protect benefits when priorities, teams, or systems shift (3A2)
This episode focuses on using change management as a governance tool to protect business benefits when priorities shift, teams reorganize, vendors change, or systems evolve in ways that can quietly erode expected outcomes. You’ll learn how governance defines what changes require review, what evidence is needed to approve changes, and how to evaluate impact on value delivery, risk exposure
Episode 57 — Monitor governance with leading indicators that reveal drift before failure (3A3)
This episode explains how to monitor governance using leading indicators that reveal drift early, so corrective action can happen before outages, compliance events, or major value shortfalls force reactive responses. You’ll learn the difference between lagging indicators, which confirm a problem after damage is done, and leading indicators, which show rising risk through patterns like inc
Episode 58 — Report governance results so executives can decide quickly and confidently (3A4)
This episode teaches you how to report governance results in a way that enables fast, confident executive decisions, which is a core expectation in CGEIT scenarios where leadership needs clear options and consequences. You’ll learn how to design governance reporting that is outcome-focused, risk-aware, and decision-oriented, emphasizing what has changed, what it means, what tradeoffs exis
Episode 59 — Build quality assurance that keeps governance processes reliable and auditable (3A5)
This episode focuses on building quality assurance for governance processes so they stay reliable, repeatable, and auditable as the organization scales, changes, and faces new regulatory expectations. You’ll learn how QA applies to governance by verifying that processes are followed as designed, evidence is complete and accurate, decisions are documented and traceable, and exceptions are
Episode 60 — Improve governance processes using evidence, feedback loops, and root causes (3A6)
This episode explains how to improve governance processes using evidence, feedback loops, and root cause analysis so improvements are targeted, measurable, and sustained rather than driven by opinion or the latest crisis. You’ll learn how to collect improvement evidence from metrics trends, exception patterns, audit findings, stakeholder feedback, and operational outcomes, then translate
Episode 61 — Build business cases that connect IT spend to measurable enterprise outcomes (3B1)
This episode teaches you how to build business cases that link IT spending to measurable enterprise outcomes, because CGEIT questions frequently test whether you can justify investment decisions with evidence, assumptions, and accountability rather than enthusiasm. You’ll break down what makes a business case governance-ready, including clear strategic alignment, options analysis, cost an
Episode 62 — Manage and report IT investments like a portfolio, not isolated projects (3B2)
This episode focuses on managing and reporting IT investments as a portfolio, which means governance looks at the combined performance, risk, and resource demand across initiatives rather than optimizing each project in isolation. You’ll learn how portfolio thinking enables tradeoffs that protect enterprise outcomes, such as rebalancing funding, stopping low-value work, sequencing depende
Episode 63 — Choose performance metrics that drive the right behavior and accountability (3B3)
This episode teaches you how to choose performance metrics that drive the right behavior and accountability, because poorly chosen metrics create gaming, misalignment, and false confidence in governance outcomes. You’ll learn to select measures that reflect enterprise value, risk control, and operational performance, such as benefits realization, service reliability, change success, cost-
Episode 64 — Evaluate benefits using methods that capture realized value, not just delivery (3B4)
This episode explains how to evaluate benefits using methods that capture realized value, not just whether a project delivered its outputs on time. You’ll learn the difference between outputs, outcomes, and benefits, and how governance validates benefits by establishing baselines, defining measurement periods, and assigning accountable owners who can confirm whether change actually happen
Episode 65 — Manage IT-enabled investments through their full economic lifecycle end-to-end (Task 28)
This episode focuses on managing IT-enabled investments across their full economic lifecycle, from initial concept and approval through delivery, operation, optimization, and retirement, because governance requires accountability beyond launch day. You’ll learn how lifecycle management includes funding governance, benefits tracking, risk monitoring, operational performance management, and
Episode 66 — Assign ownership and accountability so every investment has a responsible leader (Task 29)
This episode teaches you how to assign ownership and accountability so every investment has a responsible leader who can answer for value delivery, risk decisions, and ongoing performance. You’ll clarify what accountability means in governance terms: decision rights, evidence responsibility, and authority to drive corrective action when outcomes drift. We’ll cover practical approaches suc
Episode 67 — Align IT investment management with enterprise investment governance practices (Task 30)
This episode explains how to align IT investment management with enterprise investment governance so IT is not treated as a special case that escapes the discipline applied to other capital and strategic investments. You’ll learn how enterprise governance expectations—such as standardized business case requirements, risk-based approval thresholds, portfolio reporting, and benefits account
Episode 68 — Evaluate benefits realization across investments, processes, and services for truth (Task 31)
This episode focuses on evaluating benefits realization across investments, processes, and services to ensure governance gets the truth about value, not optimistic narratives or isolated success stories. You’ll learn how benefits realization must be consistent across the portfolio, using common definitions, baselines, measurement windows, and evidence standards, so executives can compare
Episode 69 — Establish performance management across investments, processes, and services consistently (Task 32)
This episode teaches you how to establish performance management consistently across investments, processes, and services so governance can see enterprise-wide performance, spot drift early, and enforce accountability at the right level. You’ll learn how to build a coherent performance model that connects strategy to portfolio outcomes, operational service performance, risk and compliance
Episode 70 — Base improvement initiatives on performance results, not politics or anecdotes (Task 33)
This episode explains how to base improvement initiatives on performance results so governance drives meaningful change instead of chasing politics, personal preferences, or one-off anecdotes. You’ll learn how to interpret performance data, trend indicators, exception patterns, audit findings, and stakeholder feedback as inputs to improvement prioritization, then translate those inputs in
Episode 71 — Define risk optimization as informed tradeoffs, not risk avoidance (4 Risk Optimization)
This episode defines risk optimization as the disciplined practice of making informed tradeoffs that protect enterprise objectives while still enabling delivery, innovation, and measurable value. You’ll distinguish optimization from avoidance by focusing on decisions that balance likelihood, impact, cost, and opportunity, rather than trying to eliminate risk in ways that stall the busines
Episode 72 — Select risk frameworks and standards that fit enterprise complexity and maturity (4A1)
This episode teaches you how to select risk frameworks and standards that fit the enterprise’s complexity, regulatory reality, and governance maturity, because choosing an ill-fitting approach creates bureaucracy, confusion, or gaps that the exam expects you to notice. You’ll learn how to evaluate fit by asking what decisions the framework must support, what evidence must be produced, how
Episode 73 — Integrate IT risk governance into enterprise risk management without friction (4A2)
This episode explains how to integrate IT risk governance into enterprise risk management so risk is evaluated consistently, escalations work smoothly, and leadership can compare tradeoffs across the enterprise without translation problems. You’ll learn how integration depends on shared language, common risk categories, aligned reporting cadence, and clear boundaries for what IT risk gove
Episode 74 — Set risk appetite and tolerance that leaders will enforce consistently (4A3)
This episode teaches you how to set risk appetite and tolerance in a way leaders can enforce consistently, which is critical because many governance failures come from appetite statements that are too vague to guide decisions. You’ll learn to express appetite in outcome terms, such as acceptable downtime, data exposure thresholds, compliance deviation boundaries, or financial loss limits,
Episode 75 — Govern risk across IT-enabled capabilities, processes, and services end-to-end (4B1)
This episode focuses on governing risk end-to-end across IT-enabled capabilities, processes, and services, because risk does not respect org charts and often emerges in handoffs, integrations, and shared dependencies. You’ll learn how end-to-end risk governance connects strategy, architecture, delivery, operations, vendors, and information assets into a single view of exposure that leader
Episode 76 — Identify business risk, exposures, and threats with clarity and shared language (4B2)
This episode teaches you how to identify business risk, exposures, and threats using clear, shared language that enables executives and technical teams to align quickly on what matters and what to do next. You’ll learn to translate technical conditions into business exposure, such as how a weak access model becomes fraud risk, how inconsistent data handling becomes regulatory exposure, or
Episode 77 — Run the risk management lifecycle from identification to monitoring and response (4B3)
This episode explains the risk management lifecycle as a repeatable governance loop that moves from identification to assessment, treatment decisions, implementation, monitoring, and response, with documented accountability at each stage. You’ll learn how to prevent lifecycle breakdowns such as risks identified but never assessed, assessments completed but never acted on, or controls impl
Episode 78 — Apply practical risk assessment methods that support real decisions (4B4)
This episode teaches you how to apply practical risk assessment methods that support real decisions, rather than producing reports that look rigorous but don’t change outcomes. You’ll learn how to select assessment approaches based on decision needs, such as qualitative methods for fast triage, semi-quantitative scoring for portfolio comparisons, and more detailed analysis when high-impac
Episode 79 — Establish comprehensive IT and information risk management programs enterprise-wide (Task 34)
This episode focuses on establishing comprehensive IT and information risk management programs that operate enterprise-wide, meaning they are consistent across business units while still adaptable to different risk profiles and regulatory demands. You’ll learn what “comprehensive” implies for governance: clear program scope, defined roles and decision rights, standardized methods for asse
Episode 80 — Monitor and report adherence to risk policies and standards continuously (Task 35)
This episode explains how to monitor and report adherence to risk policies and standards continuously, because governance only works when it can detect drift early and drive corrective action before risk accumulates into an incident or compliance failure. You’ll learn how continuous adherence monitoring relies on clear, testable standards, measurable indicators, and defined ownership for
Recommended
Solved Murders - True Crime Stories
紐約鳥｜New York Aperture
Doctor Zhivago Slow Read
Apple News In Conversation
The Young and Called Podcast .
Jubal Phone Pranks from The Jubal Show
پلی لیست | PlayList
English with Olivia | Slow Conversations & Vocabulary
Bible Tea
TED Talks Daily
Pod Save America
Dateline NBC
