ISO/IEC 38500:2024

Information technology — Governance of IT for the organization

This document provides guiding principles for members of governing bodies of organizations and those that support them on the effective, efficient and acceptable use of information technology (IT) within their organizations. This document is applicable to: — the governance of the organization’s current, and future, use of IT; — the governance of IT as a domain of governance of organizations. In terms of audience, this document is applicable to: — all organizations, including public and private companies, government entities, and not-for-profit organizations; — organizations of all sizes, from the smallest to the largest, regardless of the extent of their use of IT.

Technologies de l'information — Gouvernance des technologies de l'information pour l'entreprise

General Information

• Status: Published
• Publication Date: 22-Feb-2024
• ICS: 35.020 - Information technology (IT) in general
• Technical Committee: ISO/IEC JTC 1/SC 40 - IT service management and IT governance
• Drafting Committee: ISO/IEC JTC 1/SC 40 - IT service management and IT governance
• Current Stage: 6060 - International Standard published
• Start Date: 23-Feb-2024
• Due Date: 31-Aug-2023
• Completion Date: 23-Feb-2024

Relations

• Revises: ISO/IEC 38500:2015 - Information technology — Governance of IT for the organization
• Effective Date: 06-Jun-2022

Standards Content (Sample)

International
Standard
ISO/IEC 38500
Third edition
Information technology —
2024-02
Governance of IT for the
organization
Technologies de l'information — Gouvernance des technologies
de l'information pour l'entreprise
Reference number
ISO/IEC 38500:2024(en) © ISO/IEC 2024

---------------------- Page: 1 ----------------------
ISO/IEC 38500:2024(en)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2024
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland

© ISO/IEC 2024 – All rights reserved
ii

---------------------- Page: 2 ----------------------
ISO/IEC 38500:2024(en)
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Good governance of IT . 3
4.1 Outcomes of good governance of IT .3
4.1.1 Overview .3
4.1.2 Effective performance .3
4.1.3 Responsible stewardship .4
4.1.4 Ethical behaviour .4
4.2 Principles, model and framework.4
5 Principles for the governance of IT . 5
5.1 Overview .5
5.2 Purpose .6
5.2.1 Principle .6
5.2.2 Governance implications for use of IT .6
5.2.3 Outcomes .7
5.3 Value generation.
...

FINAL
INTERNATIONAL ISO/IEC
DRAFT
STANDARD FDIS
38500
ISO/IEC JTC 1/SC 40
Information technology — Governance
Secretariat: SA
of IT for the organization
Voting begins on:
2023-06-28
Technologies de l'information — Gouvernance des technologies de
l'information pour l'entreprise
Voting terminates on:
2023-08-23
RECIPIENTS OF THIS DRAFT ARE INVITED TO
SUBMIT, WITH THEIR COMMENTS, NOTIFICATION
OF ANY RELEVANT PATENT RIGHTS OF WHICH
THEY ARE AWARE AND TO PROVIDE SUPPOR TING
DOCUMENTATION.
IN ADDITION TO THEIR EVALUATION AS
Reference number
BEING ACCEPTABLE FOR INDUSTRIAL, TECHNO-
ISO/IEC FDIS 38500:2023(E)
LOGICAL, COMMERCIAL AND USER PURPOSES,
DRAFT INTERNATIONAL STANDARDS MAY ON
OCCASION HAVE TO BE CONSIDERED IN THE
LIGHT OF THEIR POTENTIAL TO BECOME STAN-
DARDS TO WHICH REFERENCE MAY BE MADE IN
NATIONAL REGULATIONS. © ISO/IEC 2023

---------------------- Page: 1 ----------------------
ISO/IEC FDIS 38500:2023(E)
FINAL
INTERNATIONAL ISO/IEC
DRAFT
STANDARD FDIS
38500
ISO/IEC JTC 1/SC 40
Information technology — Governance
Secretariat: SA
of IT for the organization
Voting begins on:
Technologies de l'information — Gouvernance des technologies de
l'information pour l'entreprise
Voting terminates on:
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
RECIPIENTS OF THIS DRAFT ARE INVITED TO
ISO copyright office
SUBMIT, WITH THEIR COMMENTS, NOTIFICATION
OF ANY RELEVANT PATENT RIGHTS OF WHICH
CP 401 • Ch. de Blandonnet 8
THEY ARE AWARE AND TO PROVIDE SUPPOR TING
CH-1214 Vernier, Geneva
DOCUMENTATION.
Phone: [phone]
IN ADDITION TO THEIR EVALUATION AS
Reference number
Email: [e-mail]
BEING ACCEPTABLE FOR INDUSTRIAL, TECHNO­
ISO/IEC FDIS 38500:2023(E)
Website: www.iso.org
LOGICAL, COMMERCIAL AND USER PURPOSES,
DRAFT INTERNATIONAL STANDARDS MAY ON
Published in Switzerland
OCCASION HAVE TO BE CONSIDERED IN THE
LIGHT OF THEIR POTENTIAL TO BECOME STAN­
DARDS TO WHICH REFERENCE MAY BE MADE IN
ii
  © ISO/IEC 2023 – All rights reserved
NATIONAL REGULATIONS. © ISO/IEC 2023

---------------------- Page: 2 ----------------------
ISO/IEC FDIS 38500:2023(E)
Contents Page
Foreword .v
Introduction . vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Good governance of IT .2
4.1 Outcomes of good governance of IT . 2
4.1.1 Overview . 2
4.1.2 Effective performance . 3
4.1.3 Responsible stewardship . 3
4.1.4 Ethical behaviour . 4
4.2 Principles, model and framework.
...

ISO/IEC DIS FDIS 38500:2022(E)
Date: 2022-12-19
ISO/IEC JTC 1/SC 40/WG 1
Secretariat: SA
Date: 2023-06-13
Information technology — Governance of IT for the organization
Secretariat: SA

---------------------- Page: 1 ----------------------
Technologies de l'information — Gouvernance des technologies de l'information pour l'entreprise
FDIS stage

---------------------- Page: 2 ----------------------
ISO/IEC FDIS 38500:2023(E)
© ISO 2022/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this
publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical,
including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can
be requested from either ISO at the address below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: + 41 22 749 01 11
EmailE-mail: [e-mail]
Website: www.iso.orgwww.iso.org
Published in Switzerland
© ISO/IEC 2023 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO/IEC FDIS 38500:2023(E)
Contents
Foreword . viii
Introduction . x
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Good governance of IT . 3
4.1 Outcomes of good governance of IT . 3
4.1.1 Overview . 3
4.1.2 Effective performance . 3
4.1.3 Responsible stewardship . 4
4.1.4 Ethical behaviour . 4
4.2 Principles, model and framework . 5
5 Principles for the governance of IT . 5
5.1 Overview . 5
5.2 Purpose . 7
5.2.1 Principle . 7
5.2.2 Governance implications for use of IT . 7
5.2.3 Outcomes . 7
5.3 Value generation . 8
5.3.1 Principle . 8
5.3.2 Governance implications for use of IT .
...