Value Governance and Value Management (Val IT): A Complete CGEIT Guide
Introduction
Value Governance and Value Management sit at the heart of the CGEIT domain Benefits Realization. ISACA's Val IT framework, now integrated into COBIT 5 and COBIT 2019 as the EDM02 Ensure Benefits Delivery and APO05 Manage Portfolio practices, gives the vocabulary and structure for these topics. CGEIT candidates are expected to think like a board member or senior executive. The question is not only "Can IT deliver this?" but "Should we invest in this at all, and how do we make sure the enterprise actually gets the value?"
1. Why Value Governance and Value Management Matter
The value problem
Studies repeatedly show that a large share of IT-enabled investments fail to deliver their expected business value. Common causes include:
- weak business cases
- unclear ownership of benefits
- poor portfolio prioritization
- the belief that "IT delivers value" on its own
Val IT exists to correct this. Its central message is that IT does not deliver value by itself. Value comes from IT-enabled business change, and the business owns that value.
Why boards and executives care
- Return on investment: IT spending is often among the largest discretionary expenditures in an enterprise. Boards must be confident that money is being spent on the right things.
- Strategic alignment: Investments must support enterprise objectives, not departmental pet projects.
- Accountability: Value governance makes clear who is accountable for realizing benefits.
- Optimizing risk and resources: Value creation is one of the three governance objectives, together with risk optimization and resource optimization.
- Transparency: Stakeholders need reliable reporting on whether expected value is actually being realized.
Why it matters for the exam
Benefits Realization is a major CGEIT domain. Questions frequently test whether you can tell governance (direction, oversight, accountability) apart from management (execution, operation). They also test whether you understand that benefits realization is a business responsibility across the full economic life cycle of an investment.
2. What Val IT Is
Definition
Val IT is a governance framework developed by the IT Governance Institute (ISACA). It consists of guiding principles, processes and key management practices. Together these help enterprises optimize the realization of value from IT-enabled investments at an affordable cost and an acceptable level of risk.
The four "Ares"
Val IT is built on four questions, often called the four "Ares":
- Are we doing the right things? This is the strategic question about alignment and investment selection.
- Are we doing them the right way? This is the architecture question about consistency with enterprise architecture and standards.
- Are we getting them done well? This is the delivery question about program management, resources and competencies.
- Are we getting the benefits? This is the value question about benefits realization.
Val IT focuses mainly on the first and fourth questions, the strategic and value questions. COBIT traditionally covered the middle two.
The seven Val IT principles
1. IT-enabled investments will be managed as a portfolio of investments.
2. IT-enabled investments will include the full scope of activities required to achieve business value. This includes business process change, training and organizational change, not only technology.
3. IT-enabled investments will be managed through their full economic life cycle, from conception to retirement.
4. Value delivery practices will recognize that there are different categories of investments that will be evaluated and managed differently.
5. Value delivery practices will define and monitor key metrics and will respond quickly to any changes or deviations.
6. Value delivery practices will engage all stakeholders and assign appropriate accountability for the delivery of capabilities and the realization of business benefits.
7. Value delivery practices will be continually monitored, evaluated and improved.
The three Val IT domains
- Value Governance (VG): Ensures that value management practices are embedded in the enterprise. It enables the enterprise to secure optimal value from its IT-enabled investments throughout their full economic life cycle.
- Portfolio Management (PM): Ensures that the enterprise secures optimal value across its portfolio of IT-enabled investments.
- Investment Management (IM): Ensures that individual IT-enabled investments contribute to optimal value.
3. Value Governance vs. Value Management
Value Governance
Value governance is the responsibility of the board and executive management. It establishes the framework within which value management operates. Key processes in Val IT 2.0 include:
- VG1 Establish informed and committed leadership
- VG2 Define and implement processes
- VG3 Define portfolio characteristics
- VG4 Align and integrate value management with enterprise financial planning
- VG5 Establish effective governance monitoring
- VG6 Continuously improve value management practices
Typical value governance outputs include:
- a value management policy
- defined investment categories and thresholds
- decision rights and accountabilities
- governance bodies such as an IT strategy committee or investment committee
- a value culture
Value Management
Value management is the execution side, carried out through Portfolio Management and Investment Management.
Portfolio Management (PM) covers:
- establishing the strategic direction and target investment mix
- determining available funds
- managing human resources
- evaluating and selecting programs to fund
- monitoring and reporting on portfolio performance
- optimizing portfolio performance
Investment Management (IM) covers:
- developing a high-level business case
- developing a detailed program definition and the full life cycle business case
- assigning clear accountability and ownership
- launching and managing the program
- updating the business case
- monitoring and reporting on program performance
- retiring the program
A simple way to remember the difference
- Governance sets direction, defines policy and monitors. It answers "What rules and accountabilities do we need?"
- Management plans, builds, runs and monitors within that direction. It answers "How do we execute and deliver value?"
4. How It Works in Practice
Step 1: Establish governance foundations
The board and executives commit to value management. They define a policy, appoint accountable owners and establish an investment committee. They also define investment categories, for example mandatory/compliance, sustaining, discretionary/innovation, and infrastructure.
Step 2: Define the portfolio
The enterprise sets a target investment mix in line with strategy and risk appetite. It defines funding envelopes and criteria for evaluating investments, such as strategic fit, value, risk, cost and resource availability.
Step 3: Build the business case
Each proposed investment gets a business case, which is the most important instrument in Val IT. It should include:
- business outcomes and benefits
- the full scope of required changes
- costs over the full economic life cycle
- risks to delivery and to benefits
- assumptions
- the benefits owner
- metrics
The business case is a living, operational tool. It is updated throughout the life cycle, not filed away after approval.
Step 4: Evaluate, prioritize and select
The investment committee compares business cases against portfolio criteria. It approves, defers or rejects investments to optimize total portfolio value rather than the value of individual projects.
Step 5: Launch and manage programs
Programs include all business change activities, not just the IT project. A business sponsor is accountable for benefits. A program manager is responsible for delivering capabilities.
Step 6: Monitor and report
Benefits are tracked with leading and lagging indicators. Tools include benefits realization plans, balanced scorecards and stage-gate reviews. Deviations trigger corrective action, re-scoping or termination.
Step 7: Retire
Investments are retired when they no longer deliver value. Post-implementation reviews capture lessons that improve future value management.
Key concepts to know
- Full economic life cycle: from idea through operation to retirement, not just the project phase.
- Benefits register and benefits realization plan: track who will deliver which benefit, when, and how it will be measured.
- Stage gates: decision points where continued funding depends on an updated business case.
- Sunk cost: past expenditure should not justify continuing a failing investment.
- Total cost of ownership (TCO): includes operation, maintenance and retirement costs.
- Value: benefits net of costs and risks, aligned to stakeholder needs.
- COBIT 2019 linkage: EDM02 Ensured Benefits Delivery, APO05 Managed Portfolio and APO06 Managed Budget and Costs.
5. Roles and Accountability
- Board: sets value expectations, approves the governance framework and oversees results.
- Executive management / Investment committee: approves the portfolio mix and individual investments.
- Business sponsor / Benefits owner: accountable for realizing benefits. This should be a business executive, not the CIO.
- CIO: accountable for delivering IT capabilities and services, and an advisor on technology options.
- CFO: integrates value management with financial planning and validates financial figures.
- Program manager: responsible for delivering the program within scope, time and budget.
- Value management office / PMO: supports portfolio analysis, reporting and methodology.
6. Exam Tips: Answering Questions on Value Governance and Value Management (Val IT)
Tip 1: Think like a governance professional, not a technician. CGEIT answers favor strategic, enterprise-wide, board-level perspectives. When in doubt, choose the option that aligns with enterprise objectives and stakeholder value.
Tip 2: The business owns the benefits. If a question asks who is accountable for realizing the benefits of an IT-enabled investment, the answer is almost always the business sponsor or business owner. It is not the CIO, IT project manager or IT steering committee.
Tip 3: The business case is central and living. Expect questions where the best answer involves:
- developing a business case
- updating the business case
- reviewing the business case at stage gates
Choose answers where the business case is maintained through the full economic life cycle. Avoid answers that treat it as a one-time approval document.
Tip 4: Portfolio view beats project view. When asked how to maximize value, prefer answers that optimize the overall portfolio over answers that optimize a single project. Prioritization should be based on strategic alignment, value and risk.
Tip 5: Full scope of change. Value comes from IT-enabled business change. Correct answers often recognize that benefits require process change, training and organizational change, not just technology delivery.
Tip 6: Distinguish governance from management. Governance answers use words like direct, evaluate, monitor, establish policy, define accountability and set direction. Management answers use words like plan, build, run, execute and implement. Match the answer to the role named in the question, such as board or program manager.
Tip 7: The "FIRST" or "MOST important" question. For questions asking what should be done first, logical prerequisites usually win. Examples include:
- establishing leadership commitment
- defining the value management framework or policy
- understanding enterprise strategy
- defining clear accountabilities
You cannot select investments well without first having strategy and criteria in place.
Tip 8: Stop failing investments. If an investment no longer supports strategy or its business case is no longer viable, the right governance action is to re-evaluate, re-scope or terminate it. Avoid answers that continue it because of money already spent.
Tip 9: Measure outcomes, not just outputs. Prefer metrics tied to business outcomes, such as revenue growth, customer satisfaction or cost reduction. Project-delivery metrics such as on time and on budget are delivery measures, not value measures.
Tip 10: Recognize investment categories. Different categories, such as mandatory, sustaining and discretionary, need different evaluation criteria. A compliance-driven investment may be approved even with a low financial ROI.
Tip 11: Watch for distractors. Wrong answers often:
- focus on technology features
- assign accountability to IT for business outcomes
- skip the business case
- rely only on financial ROI while ignoring risk and strategic fit
- treat value reporting as an IT-only activity
Tip 12: Link to COBIT 2019. Know that EDM02 (Ensured Benefits Delivery) is the governance practice and APO05 (Managed Portfolio) is the management practice. Val IT concepts appear on the exam under these labels.
7. Sample Question Walk-Through
Question: A large IT-enabled CRM program has been completed on time and on budget, but expected sales increases have not materialized. Which of the following would have MOST likely prevented this situation?
A. Stronger project management controls
B. Assigning a business owner accountable for benefits realization with tracked benefit metrics
C. Selecting a more advanced CRM vendor
D. Increasing the IT budget for testing
Answer: B.
Why: The program delivered its outputs, so delivery was not the problem. Value was not realized. Val IT stresses business accountability for benefits and ongoing monitoring of benefit metrics. Options A, C and D address delivery or technology, not value.
8. Quick Revision Summary
- Val IT is about getting optimal value from IT-enabled investments at an affordable cost and an acceptable risk.
- It has three domains: Value Governance, Portfolio Management and Investment Management.
- It is guided by seven principles: portfolio, full scope, full life cycle, categories, metrics, accountability and continuous improvement.
- The four Ares are: right things, right way, done well, getting benefits.
- The business case is the key tool, and it is a living document.
- The business is accountable for benefits; IT is accountable for capabilities.
- Governance directs and monitors; management executes.
- In COBIT 2019, Val IT maps to EDM02 and APO05.
Final Advice
On exam day, read each value question by asking three things:
- Who is accountable?
- Is this a governance or a management decision?
- Does this answer optimize enterprise value across the full life cycle and portfolio?
The answer that best reflects business ownership, strategic alignment and continuous value monitoring is almost always correct.
