ISO/IEC 38500:2015 – IT Governance provides guidance for the members of organizational governance bodies such as owners, directors and partners etc. It helps organizational bodies to understand the effective and efficient usage of information technology to achieve goals and overall improvement in business processes.

IT Governance also provides guidance to those advising, informing, or assisting governing bodies. They include the following:

  • executive managers;
  • members of groups monitoring the resources within the organization;
  • external business or technical specialists, such as legal or accounting specialists, retail or industrial associations, or professional bodies;
  • internal and external service providers (including consultants);
  • auditors

ISO/IEC 38500:2015 applies to the governance of the organization’s current and future use of IT including management processes and decisions related to the current and future use of IT. These processes can be controlled by IT specialists within the organization, external service providers, or business units within the organization.

ISO/IEC 38500:2015 defines the governance of IT as a subset or domain of organizational governance, or in the case of a corporation, corporate governance.

ISO/IEC 38500:2015 is applicable to all organizations, including public and private companies, government entities, and not-for-profit organizations. ISO/IEC 38500:2015 is applicable to organizations of all sizes from the smallest to the largest, regardless of the extent of their use of IT.

Principles of ISO/IEC 38500:2015 IT Governance

  • IT establishes responsibilities.
  • Best planning for the overall support of the organization.
  • Ensures optimal performance levels
  • Ensures safety, privacy and conformance according to rules and regulations

 

Benefits of ISO/IEC 38500 – IT Governance

  • Manage the IT investments properly
  • Improve the performance of the organization
  • Improve project governance
  • Improve the competitive position of the organization
  • Minimize IT risks
  • Assure greater project success rates