What is ISO/IEC 38500? - Definition from WhatIs.com
Part of the Data and data management glossary:

What is ISO/IEC 38500?

ISO/IEC 38500 is an international standard created to guide corporate governance of information technology (IT). The standard provides broad guidelines and a framework of practices for IT oversight within an organization. The purpose of ISO/IEC 38500 is to make IT governance a critical component of corporate governance.

ISO/IEC 38500 is based on an Australian standard, AS 8015, and was issued jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The standard was approved by all ISO members and published in 2008.

According to the ISO website:

"ISO/IEC 38500:2008 provides guiding principles for directors of organizations (including owners, board members, directors, partners, senior executives, or others) on the effective, efficient, and acceptable use of IT within their organizations.

This standard is applicable to all organizations, which include public and private companies, government entities and not-for-profit organizations. The standard is applicable to organizations of all sizes from the smallest to the largest, regardless of the extent of their IT usage."

The standard's six principles for IT governance are:

  1. Establish responsibilities.
  2. Plan to best support the organization.
  3. Acquire validly.
  4. Ensure performance when required.
  5. Ensure comformance with rules.
  6. Ensure respect for human factors.

Learn More About IT:
> The ISO 38500 standard may be purchased and downloaded from the ISO website.

This was last updated in January 2010
Posted by: Margaret Rouse

Related Terms

Definitions

  • perishable data

    - Perishable data is the specific bits of data within large volumes gathered that must be quickly acted upon to realize any benefit to a business. (WhatIs.com)

  • data shadow

    - A data shadow is the collective body of data that is automatically generated and recorded as we go about our lives rather than intentionally created. Sources include sensors and IP surveillance, me... (WhatIs.com)

  • chief data officer (CDO)

    - A chief data officer (CDO) is a C-level corporate executive who is responsible for an organization's data governance. The position is related to, but separate from, the job of the chief information... (WhatIs.com)

Glossaries

  • Data and data management

    - Terms related to data, including definitions about data warehousing and words and phrases about data management.

  • Internet applications

    - This WhatIs.com glossary contains terms related to Internet applications, including definitions about Software as a Service (SaaS) delivery models and words and phrases about web sites, e-commerce ...

Ask a Question About ISO/IEC 38500Powered by ITKnowledgeExchange.com

Get answers from your peers on your most technical challenges

Tech TalkComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.