• Flag for EnglishEnglish
    Flag for FrançaisFrançais
    Flag for العربيةالعربية
    Flag for DutchDutch
    Flag for EnglishEnglish

Key Principles of ISO 38500

IT Governance

Further information

Speak to a GRC expert

If you have any questions or need assistance, please don't hesitate to contact us.

Share on social media

Image

Clear Accountability

This principle ensures all IT - related roles, responsibilities, and accountabilities are explicitly defined and assigned.

This creates clear ownership, ensuring someone is always answerable for IT performance and conformance results.

These responsibilities must cover both the business use of IT and the supply of IT services.

Strategic Alignment

This principle ensures the organization's business strategy is supported by its IT capabilities.

Justified Investments

This principle ensures major IT investments are justified through a transparent and valid business case.

image
image
image
image
Image

Business-Focused Performance

This principle ensures that IT effectively supports business processes and delivers the promised value and services.

  • Service Level Delivery
  • Value Realization
  • Resource Efficiency
  • Supporting Business Processes
  • Performance Monitoring
  • Clear Metrics (KPIs)
  • Lifecycle Management
  • Continuous Improvement

Regulatory and Policy Compliance

This principle ensures that IT usage adheres to all applicable legislation, regulations, and internal policies.

FAQ Image
  • IT must comply with all relevant international and national laws. This includes data privacy, cybersecurity, and specific industry regulations.
  • All IT activities must align with the organization's own policies. This ensures consistent, controlled, and predictable operations across the business.
  • IT must meet all obligations agreed upon with third parties. This includes service level agreements with vendors and client contracts.
  • The organization must be able to prove its conformance status. This is often achieved through regular audits and detailed reporting.

Related pages

Continue Reading

Ready to learn more about ISO 38500 Framework Structure?