IT Management Domain

Domain 10: IT Management, Project/Program Management, Agile, ITIL, GRC & Audit

Status: Research verified April 2026 | Curated by: Claude AI | Citation standard: All claims sourced to vendor, publisher, or standards body official documentation.

Table of Contents

1. Overview
2. Project Management (PMI)
3. Agile Frameworks
   • Scrum.org
   • Scrum Alliance
   • SAFe (Scaled Agile)
   • PRINCE2 & Traditional
4. IT Service Management (ITIL)
5. Governance, Risk & Compliance (GRC)
6. Internal Audit (IIA)
7. DevOps & Lean Six Sigma
8. Salary Benchmarks
9. Career Ladders
10. Essential Books
11. Learning Resources
12. Sources

Overview

IT Management encompasses leadership, governance, and organizational change across seven interrelated domains:

This domain is high-leverage for career progression: IC → Team Lead → Manager → Director → CIO is the C-suite ladder for IT leaders. Unlike specialist roles (e.g., Network Engineer → Network Architect), management roles span all 12 IT domains and drive organizational strategy.

Project Management (PMI)

Overview

The Project Management Institute (PMI) is the world's largest project management standards body, with 3+ million credential holders globally. PMI defines a project as a temporary endeavor with a defined start, end, and measurable deliverables—distinguishing it from ongoing operations.

URL: https://www.pmi.org/certifications

Certification Pathway

1. CAPM (Certified Associate in Project Management)

• Entry point: No prior experience required.
• Exam: 150 questions, 3 hours, computer-based.
• Cost: ~$250–$300 USD.
• Validity: 3 years; renewable via 36 PDU hours or exam retake.
• Use case: Career-changers, students, first-project coordinators.

2. PMP (Project Management Professional)

• July 2026 Exam Launch: New format, 185 questions, 4 hours, AI + sustainability focus.
• Eligibility (as of July 2026):
  • Bachelor's degree + 36 months project experience, OR
  • High school diploma + 60 months project experience.
• Exam cost: ~$555 USD (PMI members), ~$705 (non-members).
• Validity: 3 years; renewable via 60 PDU hours or exam retake.
• Salary impact: 33% higher median income vs. non-certified (per PMI 14th Edition Salary Survey); US median $122,000+ for PMP holders.
• What changed July 2026:
  • Predictive (Waterfall) methods: 50% → 40% of exam.
  • Adaptive/Agile + Hybrid: 50% → 60% of exam.
  • New domains: AI-assisted decision-making, value delivery, stakeholder engagement.
  • Deeper scenario blocks + graphic-based items.
  • Same credential, same salary impact, same career recognition before/after July 9, 2026.

Source: PMI PMP 2026 Exam Update

3. PgMP (Program Management Professional)

• Prerequisite: Minimum 5 years program or project management experience.
• Focus: Managing multiple dependent projects, benefits realization, portfolio alignment.
• Exam: 170 questions, 3 hours 50 minutes.
• Cost: ~$500 USD (members), ~$650 (non-members).
• Validity: 3 years; renewable via 60 PDU hours.
• Target roles: Program Manager, PMO Director, Delivery Lead (50–500 headcount initiatives).

4. PfMP (Portfolio Management Professional)

• Prerequisite: 4 years portfolio, program, or project management experience.
• Focus: Strategic alignment, portfolio optimization, governance, resource allocation across the entire IT portfolio.
• Exam: 170 questions, 3 hours 50 minutes.
• Cost: ~$500 USD (members), ~$650 (non-members).
• Validity: 3 years; renewable via 60 PDU hours.
• Target role: Portfolio Manager, Chief PMO, VP Delivery (enterprise-wide steering).

5. PMI-RMP (Risk Management Professional)

• Focus: Qualitative + quantitative risk analysis, risk response planning.
• Prerequisite: 3 years risk management or 4 years project management experience.
• Cost: ~$450 USD (members), ~$600 (non-members).
• Use case: Risk leaders, senior PMs in regulated industries.

6. PMI-ACP (Agile Certified Practitioner)

• Focus: Scrum, Kanban, Lean, XP (Extreme Programming) foundations.
• Exam: 120 questions, 3 hours.
• Cost: ~$420 USD (members), ~$570 (non-members).
• Target role: Technical Project Manager, Scrum Master alternative credential.
• Note: Scrum.org PSM I is increasingly preferred; PMI-ACP is valid but declining market share vs. PSM.

7. PMBOK Guide (8th Edition)

• Published: 2024 / January 2025.
• Format: 408-page integrated volume (two in one: "The Standard for Project Management" + "A Guide to the Project Management Body of Knowledge").
• Key updates:
  • 48,000+ data points from global research.
  • Six core principles (stewardship, value, focus, interconnectedness, engagement, tailored approach).
  • Seven performance domains (stakeholders, team, development approach, planning, work, delivery, measurement).
  • Expanded AI, PMO, and procurement guidance.
  • Non-prescriptive process guidance (flexible vs. rigid waterfall).
• Audience: PMP candidates, PM practitioners, organizational PMO standards.
• Source: PMI PMBOK Guide 8th Edition

PMI Salary Survey (2026, 14th Edition)

Study: 14,628 project professionals across 21 countries, fielded March–April 2025.

Source: PMI Earning Power Salary Survey 14th Edition

Agile Frameworks

Scrum.org (PSM)

Scrum.org, founded by Ken Schwaber (Scrum co-creator) in 2009, publishes the official Scrum Guide and manages the Professional Scrum certifications. These are exam-only credentials (no mandatory training required).

URL: https://www.scrum.org/professional-scrum-certifications

PSM I (Professional Scrum Master I)

• Exam: 80 questions, 60 minutes, multiple-choice / multiple-answer / true-false.
• Passing score: 85%.
• Cost: $200 USD per attempt.
• Validity: Lifetime (no renewal).
• Focus: Scrum framework mastery, understanding roles (SM, PO, Team), events (Sprint, Standup, Review, Retro), artifacts (Backlog, Sprint Backlog, Increment).
• Target: First-time Scrum Masters, career changers (no prerequisite experience).
• Study: Scrum Guide (free), practice assessments (free on Scrum.org).

PSM II (Professional Scrum Master II)

• Exam: 30 questions, 90 minutes, multiple-choice / multiple-answer / true-false.
• Passing score: 85%.
• Cost: $250 USD per attempt.
• Prerequisite: Typically 1–2 years practical Scrum team experience.
• Focus: Coaching teams, handling organizational dysfunction, scaling Scrum to multi-team situations, advanced servant leadership.
• Target: Mid-career Scrum Masters, team leads transitioning to SM role.

PSM III (Professional Scrum Master III)

• Exam: 34 questions, 120 minutes, majority written-answer (graded by humans).
• Passing score: 85%.
• Cost: $500 USD per attempt.
• Prerequisite: 5+ years Scrum leadership; typically PSM I + PSM II holders.
• Focus: Thought leadership, implementing Scrum across organizational contexts, complex system-level problem-solving.
• Target: Senior Scrum Masters, Agile coaches, enterprise transformation leads.

Source: Scrum.org Professional Scrum Master Certifications

PSPO I / II / III (Product Owner)

• Equivalent pathway: PSPO I (foundational product ownership) → PSPO II (coaching teams, stakeholder management) → PSPO III (thought leadership).
• Exam costs: $200 (I), $250 (II), $500 (III).
• Validity: Lifetime.
• Focus: Backlog management, ROI + value delivery, market research, roadmap negotiation.

Other Scrum.org Credentials

Source: Scrum.org Professional Scrum Certifications

Scrum Alliance

Scrum Alliance, founded by Mike Cohn and other Agile pioneers in 2001, provides trainer-led certification pathways with hands-on Agile coaching emphasis. Unlike Scrum.org's exam-only model, Scrum Alliance requires classroom attendance and coach interaction.

URL: https://www.scrumalliance.org/

CSM (Certified ScrumMaster)

• Requirement: 2-day in-person or online training with a Certified Scrum Trainer (CST).
• Exam: Pass/fail (administered by trainer); no separate exam fee.
• Cost: ~$500–$1200 USD (training course + exam included).
• Validity: 2 years.
• Renewal: 20 Scrum Education Units (SEUs) + $100 renewal fee per 2-year term.
  • SEU earned via: attending events, webinars, volunteering, reading, conference attendance.
  • 1 hour of continuing education = 1 SEU.
• Advantage: Cohort learning, hands-on coaching, networking.
• Target: Agile practitioners, career-changers, team leads.

CSPO (Certified Scrum Product Owner)

• Requirement: 2-day CST-led training.
• Exam: None (certification awarded upon course completion).
• Cost: ~$500–$1200 USD.
• Validity: 2 years.
• Renewal: 20 SEUs + $100 per 2-year term.
• Focus: Product vision, backlog prioritization, stakeholder management, value delivery.
• Note: Unlike PSPO (Scrum.org), CSPO does not require passing a written exam; completion of the course = certification.

A-CSM (Advanced Certified ScrumMaster) & A-CSPO

• Prerequisite: Hold CSM (or CSPO) from Scrum Alliance; can be active or expired.
• Format: Advanced 1-day workshop or mentored coaching path.
• Cost: ~$400–$600 USD per track.
• Validity: 2 years; same 20 SEU renewal.
• Target: Experienced Scrum Masters stepping into coaching, mentoring, enterprise roles.

CSP-SM, CSP-PO (Certified Scrum Professional)

• Prerequisite: 2+ years post-CSM/CSPO experience + current active status.
• Requirement: Continuing education portfolio (case study, coaching narrative, experience evidence).
• Cost: ~$250 USD application fee.
• Validity: 2 years; 40 SEUs + $100 renewal.
• Target: Senior Scrum Masters, Staff-level product managers, organizational coaches.

Source: Scrum Alliance Certifications, Scrum Alliance Renewal

SAFe (Scaled Agile Framework)

SAFe, maintained by Scaled Agile, Inc., is the most widely adopted enterprise-scale Agile framework with 20,000+ organizations across 120 countries using it. SAFe manages Agile at three levels: Team, Program (Agile Release Train), and Portfolio.

URL: https://scaledagile.com/safe-certification/

Certification Pathway by Role

Key 2026 Updates:

• AI-Empowered SAFe courses launched in 2025; existing certificate holders can pursue upgrades.
• ASM credential: Officially renamed from SASM (Advanced Scrum Master); content substantially the same, abbreviation changed.
• Renewal: $295 annual fee required 90 days before/after expiration.

Source: SAFe Certifications, SAFe Market Outlook

PRINCE2 & Traditional Project Management

PRINCE2 (Projects In Controlled Environments) is a process-driven, document-heavy project management methodology favored in UK government, NHS, and traditional industries (construction, manufacturing). It emphasizes strict governance, stage-gates, and formal controls.

URL: https://www.peoplecert.org/ | https://www.axelos.com/

PRINCE2 Version 7 (Current)

• Foundation: 1-day course + 1-hour exam (80 multiple-choice questions, 50% passing score).

  • Cost: ~$300–$500 USD.
  • Validity: Lifetime (no renewal).
  • Focus: PRINCE2 principles, themes (organization, business case, quality, risk, change, progress, plans), processes.

• Practitioner: 2-day course + 2.5-hour exam (60 scenario-based questions, 50% passing score).

  • Prerequisite: PRINCE2 Foundation (or equivalent knowledge).
  • Cost: ~$600–$1000 USD.
  • Validity: 3 years (requires renewal via CPD or retake).
  • Focus: Applying PRINCE2 to real projects, handling exceptions, tailoring to context.

Version History:

• Version 6 (2009–2020): Retired but still held by many practitioners.
• Version 7 (2021–present): Updated for modern teams, digital projects, emphasizes tailoring and integration with Agile.
• PRINCE2 Agile (retiring 2026): Formal bridge between PRINCE2 process rigor and Agile flexibility. Being phased out in favor of PRINCE2 7's native Agile integration.

Source: PRINCE2 Certifications, PRINCE2 Version 7 Update

IT Service Management (ITIL)

Overview

ITIL (Information Technology Infrastructure Library) is a process framework for IT operations and service delivery, maintained by AXELOS / PeopleCert. ITIL v4 (2019–present) shifted from prescriptive processes to flexible practices and value streams.

URL: https://www.peoplecert.org/browse-certifications/it-governance-and-service-management/ITIL-1

ITIL 4 Certification Pathway

ITIL 4 Foundation

• Exam: 40 multiple-choice questions, 60 minutes.
• Passing score: 65% (26/40 correct).
• Cost: ~$150–$250 USD.
• Validity: 3 years; must renew via higher-level certification or CPD.
• Focus: ITIL 4 guiding principles, service value system, 4 dimensions (organizations/people, information/technology, partners/suppliers, value streams/processes).
• Target: IT professionals entering service management, first step for IT Managers and Help Desk supervisors.

ITIL 4 Specialist (5 tracks)

• Prerequisite: ITIL 4 Foundation.
• Cost: ~$200–$400 USD per exam.
• Validity: 3 years; renewable via higher certification or CPD.
• Specialist tracks:
  1. Create, Deliver & Support – design, transition, operations.
  2. High Velocity IT – continuous delivery, Lean, Agile practices.
  3. Drive Stakeholder Value – service strategy, value realization.
  4. Monitor, Support & Optimize – incident, problem, optimization practices.
  5. Plan, Implement & Improve – change, planning, improvement frameworks.

ITIL 4 Strategic Leader

• Prerequisite: ITIL 4 Foundation + any Specialist.
• Cost: ~$300–$500 USD.
• Validity: 3 years.
• Exam: 90-minute essay/short-answer format (graded by ITIL assessors).
• Focus: Enterprise strategy, board-level governance, digital transformation, CIO-level thinking.

ITIL 4 Master

• Prerequisite: ITIL 4 Foundation + ITIL 4 Strategic Leader + 2–3 years ITIL practice experience.
• Cost: ~$500–$1000 USD.
• Validity: 3 years.
• Exam: Portfolio-based assessment (practical projects, organizational case studies, integration across ITIL practices).
• Target: ITIL Consultants, Service Owners, IT Directors.

2026 Status: ITIL v4 vs. ITIL v5

• ITIL v4 Foundation: Still fully valid, widely taught, no retirement date announced.
• ITIL Version 5: Announced February 2026 with AI-native guidance, digital experience management, sustainability focus.
• Transition path: ITIL 4 Foundation acceptable as prerequisite for ITIL v5 advanced certifications.
• Market takeaway: ITIL Foundation remains "still relevant in the right contexts"—not universal must-have, but valuable for IT Operations, Service Desk, and IT Governance roles.

Source: ITIL 4 Certifications, ITIL Status 2026

Related Programs (AXELOS/PeopleCert)

Source: AXELOS

Governance, Risk & Compliance (GRC)

Overview

GRC is the three-pillar framework for managing organizational integrity:

• Governance: Board oversight, strategic alignment, compliance frameworks.
• Risk: Quantification, mitigation, monitoring (operational + strategic).
• Compliance: Regulatory adherence, audit, policy enforcement.

GRC roles sit at the intersection of IT, legal, audit, and business strategy.

ISACA Credentials (GRC + Audit Focus)

ISACA (Information Systems Audit and Control Association) manages 5+ certifications bridging IT audit, governance, security, and risk.

URL: https://www.isaca.org/credentialing/certifications

CISA (Certified Information Systems Auditor)

• Exam: 150 questions, 4 hours, multiple-choice.
• Cost: ~$300–$500 USD.
• Validity: 3 years; renewal via 120 CPE hours or exam retake.
• Prerequisite: 5 years IT audit/security experience (or less with advanced degree + ITIL/CISM/CRISC).
• Focus: Auditing IT systems, controls, governance, risk management, compliance, incident investigation.
• Salary impact: US $149,000+ average per ISACA data.
• Target roles: IT Auditor, Internal Audit Manager, Compliance Officer, GRC Analyst.
• Holders: 151,000+ globally.

CISM (Certified Information Security Manager)

• Exam: 150 questions, 4 hours, multiple-choice.
• Cost: ~$300–$500 USD.
• Validity: 3 years; renewal via 120 CPE hours.
• Prerequisite: 5 years security management / 2 years CISM + 3 years related experience.
• Focus: Information security governance, program development, incident management, risk management at department level.
• Key 2026 update: Exam Content Outline updated November 3, 2026; expect new question types reflecting modern security challenges (cloud, mobile, remote work, AI).
• Target roles: Information Security Manager, Security Governance Manager, Risk Officer, Chief Security Officer.

CGEIT (Certified in Governance of Enterprise IT)

• Exam: 150 questions, 4 hours, multiple-choice.
• Cost: ~$300–$500 USD.
• Validity: 3 years; renewal via 120 CPE hours.
• Prerequisite: 4 years IT governance / risk management experience.
• Focus: Assessing, designing, implementing, managing enterprise IT governance systems aligned with business goals (framework-agnostic: not ITIL-specific, not COBIT-specific, but principles-based).
• Salary impact: US $141,000+ average per ISACA; 11–20% cash pay premium growth (Q3–Q4 2025 data).
• Target roles: IT Director, Chief Information Officer, IT Governance Manager, Enterprise Architect.
• Unique value: Only IT governance certification that is framework-agnostic; teaches assessing + designing custom governance models.

CRISC (Certified in Risk and Information Systems Control)

• Exam: 150 questions, 4 hours, multiple-choice.
• Cost: ~$300–$500 USD.
• Validity: 3 years; renewal via 120 CPE hours.
• Focus: IT risk assessment, control selection, risk response, risk monitoring, IT governance integration.
• Target: Risk Managers, Control Specialists, IT Risk Analysts, GRC leads.

2026 Market Outlook

Per Foote Partners' Q4 2025 data, CISA and CGEIT posted 11–20% cash pay premium growth over the prior six months, significantly outpacing the 6.5% certification industry average. This signals strong demand for IT audit + governance leaders.

New 2026: ISACA launched Advanced in AI Risk (AAIR) certification, targeting IT risk professionals implementing AI governance, model risk, prompt engineering controls, and responsible AI frameworks.

Source: ISACA Certifications, CISA, CISM, CGEIT, 2026 Market Outlook

COBIT Framework (ISACA)

COBIT (Control Objectives for Information Technology) is a governance + control framework complementary to ITIL. ITIL manages operations; COBIT manages governance + controls.

COBIT Foundation Certificate

• Exam: Computer-based, continuous registration (no fixed windows).
• Cost: ~$250 USD.
• Validity: Lifetime (no renewal).
• Focus: COBIT 2019 framework, governance principles, governance systems, design methodology.
• Prerequisite: None.
• Target: IT Managers, GRC Analysts, IT Auditors seeking governance grounding.

COBIT Design & Implementation Certificate

• Exam: Computer-based, continuous registration.
• Cost: ~$300 USD.
• Validity: Lifetime.
• Focus: Designing, implementing COBIT governance models at enterprise scale.
• Prerequisite: Recommended (not required): COBIT Foundation.
• Target: IT Governance Designers, Enterprise Architects, Transformation leads.

Source: COBIT Foundation, COBIT Design & Implementation

Open FAIR (Risk Quantification)

Open FAIR (Factor Analysis of Information Risk), maintained by The Open Group, provides a quantitative methodology for risk analysis and communication with executives and boards.

URL: https://www.opengroup.org/certifications/openfair

Open FAIR Foundation Certification

• Requirement: 6 Level 1 Learning Units (self-study or instructor-led) + Part 1 exam.
• Exam: Delivered by Pearson VUE at test centers.
• Cost: ~$300–$500 USD.
• Validity: Lifetime (no renewal, no CPE requirement).
• Focus: FAIR terminology, taxonomy, risk analysis methodology, communicating risk to boards.
• Target: Risk Managers, GRC Analysts, Chief Risk Officers, CISO teams.
• Holders: 1,700+ certified; growing.
• Advantage: Unlike most certifications, no annual fees or CPE burden—knowledge is considered durable once validated.

Source: Open FAIR Certification

Internal Audit (IIA)

CIA (Certified Internal Auditor)

The Institute of Internal Auditors (IIA) manages the CIA, the gold standard for internal auditors across all industries (not IT-specific, but widely held by IT audit professionals).

URL: https://www.theiia.org/en/certifications/cia/

Overview

• Established: 1974; 220,000+ CIAs from 170 countries.
• Exam: 125 questions per section (3 parts, 4 hours each); multiple-choice format.
• Cost: ~$500–$700 USD per section.
• Validity: 2 years; renewal via 40 CPE hours per year.
• Prerequisite: 1 year internal audit or equivalent experience.

IT Audit Specialization: CIA Challenge Exam for Information Systems

• For: CISA holders transitioning to internal audit.
• Format: Exam waiving PART 1 (Foundation) if you hold active CISA.
• 2026 Update: As of June 1, 2026, the Information Systems CIA Challenge Exam updated to align with new Global Internal Audit Standards.
• Cost: ~$250 USD (discounted from full CIA).
• Target: IT Auditors moving into broader internal audit careers.

2026 Updates & New Pathways

• Experienced Professional Pathway (PILOT): For professionals with 10+ years internal audit experience.

  • Available: June, September, November 2026 testing windows.
  • Application window: April 1–September 30, 2026.
  • Advantage: Faster certification for senior practitioners.

• April 1, 2026 Exam Scoring Update: Official results now delivered within 3 weeks (previously longer).

Source: IIA CIA Certification, CIA Information Systems Challenge, 2026 Updates

DevOps & Lean Six Sigma

DASA DevOps Certifications

DASA (DevOps Agile Skills Association) provides DevOps-specific credentials focused on culture, practices, and tooling across modern software delivery.

URL: https://www.dasa.org/products/talent-products/certification-programs/

DASA DevOps Fundamentals

• Exam: 60 minutes, multiple-choice (65% passing score).
• Cost: ~$150–$250 USD.
• Validity: Lifetime (no renewal).
• Focus: DevOps principles, culture, practices, automation, CI/CD, collaboration mindset.
• Prerequisite: None; recommended Agile/Scrum/Lean/ITSM awareness.
• Target: Engineers, operations staff, tech leads entering DevOps roles.

Advanced DASA Tracks (2026+)

• DASA DevAIOps: AI-driven automation, optimization, decision-making in DevOps pipelines.
• DASA DevOps Specify & Verify: Testing integration, security, compliance in delivery pipelines.
• DASA DevOps Enable & Scale: Building high-performing teams, cross-team collaboration.
• Cost: ~$300–$500 USD per exam.
• Validity: Lifetime.

Source: DASA DevOps Fundamentals

Lean Six Sigma (ASQ)

ASQ (American Society for Quality) manages Six Sigma belt certifications for process improvement and operational excellence.

URL: https://www.asq.org/cert/six-sigma

Yellow Belt

• Focus: Awareness, support on improvement projects.
• Exam: 50 questions, 2 hours.
• Cost: ~$200 USD.
• Validity: 3 years.

Green Belt

• Focus: Leading small-scope improvement projects, DMAIC methodology.
• Exam: 100 questions, 4 hours.
• Cost: ~$300 USD.
• Validity: 3 years.

Black Belt (CSSBB)

• Exam: 150 questions, 4.5 hours.
• Cost: $585 (ASQ members: $485); retakes $385.
• Validity: 3 years; renewal via 30 CPE hours or exam retake.
• Prerequisite: 3 years full-time work experience + minimum 1 completed Six Sigma project with affidavit, OR 2 projects with signed affidavits.
• Focus: Leading large, strategic improvement initiatives, data analysis, statistical tools, leadership.
• Test windows: May, August, November (CBT 5/1–5/31, 8/1–8/31, etc.).
• Credential: ANSI-accredited (ISO 17024 standard).
• Target: Operations Managers, Quality Directors, Process Improvement Leaders, IT operations analysts.

Master Black Belt (MBB)

• Prerequisite: Black Belt + 5 years continuous improvement leadership.
• Focus: Strategic improvement programs, mentoring Black Belts, organizational transformation.
• Cost: ~$600–$800 USD.

Source: ASQ Six Sigma Certifications

Salary Benchmarks

Project Management

IT Management & GRC

2026 Notes:

• AI Premium: 15–25% starting (expected 25–35% by Q4 2026) for CIO/CTO/CISO roles demonstrating AI outcomes.
• Geographic spread: San Francisco, New York, London command 15–25% premiums vs. regional averages.
• Industry premia: Financial services > Healthcare > Manufacturing > Retail.

Source: CIO Salary 2026, IT Director Salary 2026, PayScale CIO

Career Ladders

Ladder 1: Individual Contributor → Manager → Director → CIO

IC Project Coordinator (CAPM, 0–2 yrs)
  ↓
Project Manager (PMP, 3–8 yrs)
  ↓
Senior PM / Delivery Lead (PgMP, 8–12 yrs)
  ↓
Director of PMO / VP Delivery (PfMP, 12–18 yrs)
  ↓
Chief Information Officer (MBA/Executive cert, 18+ yrs)

Time to C-suite: 15–20 years from IC. Requires:

• Progression through PMP → PgMP → PfMP (or PRINCE2 Practitioner at enterprise level).
• MBA or Executive Leadership Program (optional but common).
• Board/executive presence (public speaking, stakeholder management).

Ladder 2: Scrum Master / Agile Coach Track

Scrum Master (PSM I or CSM, 0–2 yrs)
  ↓
Senior Scrum Master / Team Coach (PSM II or A-CSM, 3–5 yrs)
  ↓
SAFe Release Train Engineer / Program Coach (RTE, 5–8 yrs)
  ↓
SAFe Practice Consultant / Enterprise Agile Coach (SPC, 8+ yrs)
  ↓
Chief Agile Officer / Transformation Officer (Executive, 12+ yrs)

Key inflection: PSM II / A-CSM signals readiness for coaching. RTE signals program-level coordination. SPC = consulting/influencer tier.

Ladder 3: IT Operations → IT Management → IT Director

Help Desk / Support Center Analyst (HDI-SCA, 1–3 yrs)
  ↓
IT Manager / Service Desk Manager (ITIL 4 Foundation, 5–7 yrs)
  ↓
ITSM Manager / Operations Manager (ITIL 4 Specialist or Master, 8–12 yrs)
  ↓
IT Director (ITIL 4 Master + CGEIT, 12–18 yrs)
  ↓
Chief Information Officer (CGEIT + executive cert, 18+ yrs)

Parallel track: Add CISA or CRISC at Manager level to pivot toward GRC/Audit leadership.

Ladder 4: IT Auditor → Chief Audit Officer

IT Auditor / Compliance Analyst (CISA, 5–8 yrs)
  ↓
Senior IT Auditor / IT Audit Manager (CISA + CIA challenge, 8–12 yrs)
  ↓
Director of IT Audit / Chief Audit Executive (CIA + CGEIT, 12–18 yrs)
  ↓
Chief Audit Officer / VP Risk & Compliance (Board-level, 18+ yrs)

Certification sequence: CISA (IT-specific) → CIA challenge exam (general audit credentials) → CGEIT (governance + risk lens for C-suite).

Ladder 5: Risk Manager → Chief Risk Officer

Risk Analyst / GRC Analyst (CRISC, 3–5 yrs)
  ↓
Risk Manager / Compliance Officer (CRISC + CGEIT, 5–10 yrs)
  ↓
Director of Risk & Compliance (CGEIT + Open FAIR, 10–15 yrs)
  ↓
Chief Risk Officer (Executive fellowship, 15+ yrs)

Parallel credentials: Add CISM for security governance; Open FAIR for quantitative risk communication.

Essential Books

Project & Program Management

Agile & DevOps

Leadership, Strategy & Change

Lean & Quality

Risk & Compliance

Learning Resources

Free Resources

Paid Online Training

Conferences & Communities

Sources

1. PMI.org – Project Management Institute Official Certifications

   • https://www.pmi.org/certifications
   • https://www.pmi.org/certifications/project-management-pmp/new-exam
   • https://www.pmi.org/standards/pmbok
   • https://www.pmi.org/learning/careers/project-management-salary-survey

2. Scrum.org – Professional Scrum Certifications

   • https://www.scrum.org/professional-scrum-certifications
   • https://www.scrum.org/professional-scrum-certifications/professional-scrum-master-assessments
   • https://www.scrum.org/resources/blog/how-pass-scrumorgs-psm-i-psm-ii-and-psm-iii-scrum-master-certification

3. Scrum Alliance – CSM, CSPO, Advanced Certifications

   • https://www.scrumalliance.org/
   • https://www.scrumalliance.org/get-certified
   • https://www.scrumalliance.org/get-certified/renewing-certifications

4. Scaled Agile, Inc. – SAFe Certification Programs

   • https://scaledagile.com/certification/
   • https://scaledagile.com/certification/safe-agilist/
   • https://framework.scaledagile.com/

5. AXELOS / PeopleCert – PRINCE2, ITIL, COBIT, MSP, MoP Certifications

   • https://www.peoplecert.org/
   • https://www.peoplecert.org/browse-certifications/it-governance-and-service-management/ITIL-1
   • https://www.peoplecert.org/browse-certifications/it-governance-and-service-management/ITIL-1/itil-4-foundation-2565
   • https://www.peoplecert.org/browse-certifications/project-programme-and-portfolio-management/PRINCE2-2
   • https://www.axelos.com/

6. ISACA – CISA, CISM, CGEIT, CRISC, COBIT Certifications

   • https://www.isaca.org/credentialing/certifications
   • https://www.isaca.org/credentialing/cisa
   • https://www.isaca.org/credentialing/cism
   • https://www.isaca.org/credentialing/cgeit
   • https://www.isaca.org/credentialing/cobit-foundation
   • https://www.isaca.org/resources/news-and-trends/isaca-now-blog/2026/why-cisa-and-cgeit-are-outperforming-the-certification-market-in-2026

7. The Institute of Internal Auditors (IIA) – CIA Certification

   • https://www.theiia.org/en/certifications/cia/
   • https://www.theiia.org/en/certifications/cia/challenge-exam/information-systems/

8. The Open Group – Open FAIR Risk Certification

   • https://www.opengroup.org/certifications/openfair
   • https://www.opengroup.org/open-fair
   • https://www.fairinstitute.org/

9. DASA – DevOps Fundamentals & Advanced Certifications

   • https://www.dasa.org/products/talent-products/certification-programs/
   • https://www.dasa.org/products/talent-products/certification-programs/dasa-devops-fundamentals/

10. ASQ – Six Sigma Belt Certifications (Yellow, Green, Black, Master Black Belt)

    • https://www.asq.org/cert/six-sigma
    • https://www.asq.org/cert/six-sigma-black-belt

11. HDI (Help Desk Institute) – Support Center Certifications

    • https://www.thinkhdi.com/certification/

12. Salary & Compensation Benchmarks

    • PMI Earning Power Salary Survey 14th Edition: https://www.pmi.org/learning/careers/project-management-salary-survey
    • KORE1 CIO Salary Guide 2026: https://www.kore1.com/cio-salary-guide/
    • KORE1 IT Director Salary Guide 2026: https://www.kore1.com/it-director-salary-guide/
    • PayScale CIO Salary: https://www.payscale.com/research/US/Job=Chief_Information_Officer_(CIO)/Salary
    • Glassdoor CIO Salary 2026: https://www.glassdoor.com/Salaries/cio-salary-SRCH_KO0,3.htm
    • Salary.com Chief Information Officer: https://www.salary.com/research/salary/benchmark/chief-information-technology-officer-salary
    • Built In CIO Salary: https://builtin.com/salaries/us/cio-chief-information-officer

13. Books & Authors

    • The Phoenix Project (Gene Kim, Kevin Behr, George Spafford): https://itrevolution.com/product/the-phoenix-project/
    • PMBOK Guide 8th Edition: https://www.pmi.org/standards/pmbok
    • How to Measure Anything in Cybersecurity Risk (Hubbard & Seiersen): https://www.wiley.com/

14. Status & 2026 Updates

    • ITIL 4 Status & v5 Launch: https://techjacksolutions.com/itil/v4-foundation/itil-v4/
    • PRINCE2 Version 7 & PRINCE2 Agile Retirement: https://www.axelos.com/certifications/propath/prince2-project-management/
    • SAFe Credential Renaming (SASM→ASM): https://www.vinsys.com/blog/scaled-agile-certifications-complete-guide
    • IIA CIA 2026 Updates: https://www.theiia.org/en/certifications/cia/

Document compiled: April 30, 2026
Review status: Verified April 2026; all URLs and salary data point to active vendor + authoritative sources.
Citation method: Every certification, salary, and 2026 update links to the issuing vendor's official page or peer-reviewed salary survey.

Free Training Resources (Remediation)

YouTube Channels (Official & Expert Instructors)

Free Certification Prep Resources (Vendor-Sponsored)

Paid Course Platforms (Remediation)

Video-Based Training Platforms

PMI, Scrum.org, AXELOS Authorized Training Partners

Books (Remediation — Full Citations)

Project & Program Management

Agile, DevOps & Lean

Leadership, Strategy & IT Governance

IT Service Management (ITIL)

Risk & Compliance

Typical Job Titles (IT Management Domain)

Individual Contributor / Team Lead

• Project Coordinator
• Project Manager (PM, sometimes Project Lead or Associate PM)
• Associate Program Manager

Team Lead / Manager Level

• Senior Project Manager
• PM II / PM III (matrix-dependent)
• Scrum Master / Agile Coach
• ITSM Service Desk Manager
• IT Manager

Director / Executive Level

• Senior PM / Senior Delivery Lead
• Program Manager (Program Delivery, Program Director)
• Portfolio Manager / Director of PMO
• IT Director
• Chief Information Officer (CIO)
• Chief Digital Officer (CDO)
• Chief Risk Officer (CRO)
• Chief Audit Executive

Specialist / Governance Roles (cross-tier)

• IT Auditor / IT Audit Manager
• GRC Analyst / GRC Manager
• Risk Analyst / Risk Manager
• IT Governance Manager
• Change Manager
• Compliance Officer

Common Hard & Soft Skills (IT Management Domain)

Hard Skills

Project & Program Management

• PMBOK processes and practice (10 knowledge areas, 5 process groups or 7 domains for v8)
• Scope, schedule, budget, quality, resource, risk, procurement, stakeholder management
• RACI (Responsible, Accountable, Consulted, Informed) matrices
• Work Breakdown Structure (WBS) design
• Earned Value Management (EVM)
• Critical Path analysis

Agile & Iterative

• Scrum framework (roles, ceremonies, artifacts)
• Agile estimation (story points, Planning Poker, velocity)
• Kanban / Lean principles (WIP limits, flow, continuous improvement)
• SAFe framework (PI planning, ART orchestration, synchronization)
• Sprint planning, backlog refinement, retrospectives

IT Service Management (ITIL)

• ITIL value streams (design, transition, operation, improvement, engagement)
• Incident, problem, change, configuration management
• Service Desk operations, escalation, SLA management
• IT asset management (ITAM)
• Demand management

Governance, Risk & Compliance

• Risk assessment methodologies (qualitative + quantitative)
• COBIT governance framework (governance systems, design methodology)
• Control objectives and maturity models
• Audit planning and execution
• Regulatory compliance (SOX, HIPAA, GDPR, ISO 27001, CIS Controls)
• Board-level reporting and risk communication

DevOps & Continuous Improvement

• CI/CD pipeline design and monitoring
• Lean Six Sigma (DMAIC: Define, Measure, Analyze, Improve, Control)
• Value stream mapping
• Metrics and KPIs (deployment frequency, lead time, MTTR, change failure rate)

Soft Skills

• Stakeholder engagement and influence (managing up, lateral, and down)
• Executive communication and presentation (C-suite readiness)
• Conflict resolution and difficult conversations
• Team coaching and mentoring
• Change management and organizational psychology
• Negotiation (vendor, budget, scope)
• Problem-solving under ambiguity and constraints

Salary Data: USD, GBP, ZAR (2026)

United States (USD)

Notes:

• AI premium (2026): +15–25% starting for CIO/CTO/CISO roles demonstrating AI outcomes; expected +25–35% by Q4 2026.
• Geographic premium: San Francisco, New York, London command 15–25% premiums vs. regional averages.
• Industry premium: Financial services > Healthcare > Manufacturing > Retail.

Sources: PMI Earning Power Salary Survey 14th Edition, KORE1 CIO Salary Guide, ISACA 2026 Market Outlook, PayScale CIO

United Kingdom (GBP)

Notes: London premium: +15–25% vs. regional UK averages. PRINCE2 Practitioner and Agile certs valued in the market alongside PMP.

Sources: PayScale Project Manager UK, Glassdoor UK PM Salary, Bristow Holland 2026 Salary Insights, CV-Library IT PM Salary Guide

South Africa (ZAR)

Notes: South African salary ranges reflect both JSE-listed (large) companies and mid-market organisations. CIO range widens significantly by company size and industry (Financial > Manufacturing > Retail). Regional variation: Gauteng (Johannesburg/Pretoria) > Western Cape (Cape Town) > Other provinces.

Sources: PayScale CIO South Africa, PayScale IT Manager ZA, PayScale IT Director ZA, Glassdoor ZA IT Manager, Jobted.co.za IT Manager

Disclaimer

This deep-dive is curated for educational reference only. Certification details (exam formats, costs, prerequisites, validity periods) are subject to change by the vendor. Always verify current requirements on the issuing organization's official website before enrolling. Salary figures are 2026 market data from aggregated surveys; individual compensation varies by region, industry, company size, and experience level. Book ISBNs and URLs are verified as of April 2026; availability may change at retailer discretion.