Certified: The ISACA CGEIT Audio Course

This episode explains how to implement data classification and handling rules so they are consistently followed in daily work, not ignored because they are unclear or inconvenient. You’ll review what classification is meant to accomplish in governance terms: defining sensitivity, usage boundaries, protection requirements, and acceptable sharing so decisions are consistent across teams and systems....

This episode explains how assigning data ownership and stewardship turns data governance into timely, consistent decisions about definitions, quality, access, sharing, and risk acceptance. You’ll learn the practical difference between a data owner, who is accountable for business meaning and risk decisions, and a data steward, who drives day-to-day quality, metadata, and process execution to keep...

This episode focuses on governing information across its lifecycle so value is captured while risk is controlled from the moment data is created until it is securely disposed of. You’ll define lifecycle governance stages such as creation or collection, classification, storage, access and sharing, processing, archival, retention, and disposal, and you’ll learn how each stage creates specific contro...

This episode teaches you how to define information architecture that simultaneously supports security, analytics, and operations, instead of optimizing for one and breaking the others. You’ll learn how information architecture creates shared definitions, authoritative sources, data flows, classification rules, and retention expectations that make controls enforceable and reporting reliable. We’ll...

This episode explains how to build communication and awareness so governance becomes practical guidance people can follow, not abstract statements that live in policy folders. You’ll learn how to communicate governance intent in plain business language, tie it to day-to-day decisions, and show teams what evidence and behaviors are expected at key checkpoints like intake, design review, procurement...

This episode focuses on stakeholder analysis as a governance skill that prevents late-stage surprises, hidden blockers, and political failures that derail otherwise sound plans. You’ll learn how to identify stakeholders who influence outcomes, including executives, business owners, risk and compliance leaders, security, architecture, finance, operations, and delivery teams, then map what each grou...

This episode teaches you how to build a strategic planning process that produces consistent decisions by establishing a predictable cadence, clear required inputs, and decision gates that prevent low-quality plans from becoming funded work. You’ll learn how governance defines cadence across annual strategy refreshes, quarterly portfolio reviews, and operational adjustments, so planning stays curre...

This episode explains how to design enterprise architecture guardrails that protect the enterprise from chaos while still allowing innovation, speed, and experimentation where it makes business sense. You’ll learn what a “guardrail” looks like in practice: principles and standards that define boundaries, pre-approved patterns that accelerate delivery, and an exception process that is fast, evidenc...

This episode teaches you how governance prioritizes IT initiatives using language leaders understand: value, risk, feasibility, and constraints, rather than technical preference or whoever argues loudest. You’ll learn how to compare initiatives with consistent criteria, including strategic alignment, measurable benefits, regulatory obligations, risk exposure, total cost of ownership, delivery capa...

This episode focuses on integrating information architecture into strategic planning so data remains governable as systems change, new platforms arrive, and analytic demands increase. You’ll define information architecture as the enterprise approach to data definitions, lineage, classification, retention, access models, and quality expectations, then connect it directly to planning decisions like...

This episode explains how to integrate enterprise architecture into strategic planning so the organization avoids solution sprawl, duplicated platforms, and inconsistent design choices that quietly increase cost and risk. You’ll learn how architecture inputs should shape planning decisions, including target-state roadmaps, approved patterns, technology standards, integration principles, and intent...

This episode explains why documenting planning processes and outputs is essential for governance continuity, especially when key leaders, architects, or program managers leave and institutional knowledge disappears. You’ll learn what documentation matters most for GEIT: decision rights, planning assumptions, portfolio rationale, roadmaps, standards, exception records, risk acceptance decisions, an...

This episode focuses on stakeholder engagement as a governance capability that turns compliance into commitment by making ownership shared, expectations clear, and decisions transparent. You’ll learn to identify stakeholder groups that influence GEIT outcomes, such as business sponsors, risk and compliance leaders, security, architecture, finance, operations, and delivery teams, then define how en...

This episode teaches you how governance directs and monitors IT strategic planning to prevent drift, meaning the slow shift where initiatives, architecture choices, and spending no longer reflect enterprise priorities. You’ll learn how governance sets direction through principles, investment criteria, and performance expectations, then monitors alignment through portfolio reviews, roadmap validati...

This episode explains how to communicate the value of governance of enterprise IT so stakeholders understand the “why” behind governance choices and support them consistently across projects and business units. You’ll learn to describe GEIT value in outcome terms, such as better investment returns, reduced operational risk, clearer accountability, faster decision-making through standardization, an...

This episode focuses on investment policies as a governance tool that makes IT-enabled business decision-making consistent, transparent, and aligned to enterprise priorities. You’ll learn how investment policies define what qualifies for funding, what evidence is required, how initiatives are compared, and how risk and compliance constraints influence approval decisions. We’ll discuss practical cr...

This episode teaches you how to build policies and standards that continue to guide decisions when teams are under deadlines, incidents are unfolding, or leadership is pushing for speed. You’ll learn how to write policy intent so it is unambiguous, then support it with standards that define what “compliant” looks like in practical, testable terms. We’ll cover how to design standards that reduce de...

This episode explains how to align governance policies to enterprise objectives while keeping policies usable, enforceable, and proportional to risk, which is a common tradeoff in governance scenario questions. You’ll learn to start with objective-driven intent—what the enterprise is trying to achieve and protect—then convert that intent into policy requirements that can be understood and executed...

This episode focuses on designing remediation so governance problems actually get resolved and stay resolved, rather than cycling through the same findings and exceptions every quarter. You’ll learn to treat remediation as a governance workflow: identify the root cause, assign an accountable owner, define corrective actions with measurable completion criteria, and verify that the fix changes behav...

This episode teaches you how to evaluate a governance framework as a living system, looking for gaps where decisions are not owned, overlaps where forums duplicate work, and weak signals that indicate governance is drifting before a failure becomes visible. You’ll learn practical evaluation methods, including reviewing decision-right clarity, testing how exceptions are handled, assessing whether m...

This episode explains how to define and prove accountability for information assets and IT processes so governance can reliably assign ownership, measure performance, and enforce decisions. You’ll clarify the difference between owning an asset, operating a process, and being accountable for outcomes, then apply that logic to common governance pressure points like data ownership, service ownership,...

This episode teaches you how to make governance repeatable by using standard processes and decision checkpoints that consistently produce evidence, enforce accountability, and reduce the chance of “special case” chaos. You’ll define decision checkpoints as predictable moments where governance requires validation, such as intake and prioritization, architecture review, risk assessment, funding appr...

This episode explains how governance aligns with shared services—such as centralized infrastructure, security, identity, procurement, service management, and data platforms—so controls are applied consistently and reused instead of reinvented. You’ll learn why shared services can strengthen governance by providing standardized capabilities, predictable service levels, and clearer accountability, b...

This episode focuses on information architecture as a governance requirement for making data decisions consistent across the enterprise, which is increasingly critical for risk, compliance, and value delivery. You’ll define information architecture as how data is classified, modeled, stored, protected, shared, and retained, and how those rules connect to business processes and reporting needs. We’...

This episode teaches you how governance uses enterprise architecture to keep technology choices coherent, scalable, and aligned to business capabilities over time. You’ll define enterprise architecture in practical terms as the set of principles, standards, patterns, and target states that guide solution decisions and reduce fragmentation. We’ll discuss how governance enforces architecture through...