ISO/IEC 38500

Go To Accredited Training

International Standard Organization (ISO) and International Electrotechnical Commission (IEC) - ISO/IEC 38500 IT Governance Standard

Background

ISO/IEC 29382, Corporate Governance of Information and Communication Technology, was first published early in 2007 as a fast track candidate from the existing Australian standard AS8015. It was officially named ISO 38500 in April 2008. It is intended to provide guiding principles to any organization, regardless of size or sector.

The standard also has relationships with other major ISO standards, and embraces the same methods and approaches. It is certain to have a major impact upon the IT governance landscape.

The ISO 38500 standard comprises three main sections:

• Scope, Application and Objectives
• Framework for Good Corporate Governance of IT
• Guidance for Corporate Governance of IT

The framework comprises definitions, principles and a model. It sets out six principles for good corporate governance of IT

• Responsibility
  • Establish responsibilities
• Strategy
  • Plan to best support the organization
• Acquisition
  • Acquire validly
• Performance
  • Ensure performance when required
• Conformance
  • Ensure conformance with rules
• Human behaviour
  • Ensure respect for human factors

Objectives

The objectives of the ISO 38500 standard are described by the standard itself as:

• Assuring stakeholders that they can have confidence in the organization's corporate governance of IT
• Informing/guiding Directors in governing the use of IT in their organization
• Providing a basis for objective evaluation of the corporate governance of IT

ISO 38500 is also intended to guide those involved in designing and implementing the management system of those policies and processes that support governance.

Mountainview Inc.

Terms and Conditions of Use

Copyright © 1992-2011

This website is best viewed with IE5 or greater

ITIL ® is a Registered Trade Mark, and a Registered Community Trade Mark of the Office of Government Commerce, and is Registered in the U.S. Patent and Trademark Office

The Swirl logo™ is a Trade Mark of the Office of Government Commerce (OGC)

PMP and PMBoK are a Registered Trade Marks of the Project Management Institute (PMI)

COBIT is a Registered Trade Mark of the Information Systems Audit and Control Association (ISACA)

itSMF is a Registered Trade Mark of the IT Service Management Forum