Browse Definitions :
Definition

ISO/IEC 38500

What is ISO/IEC 38500?

ISO/IEC 38500 is an international standard created to guide corporate governance of information technology (IT). The standard provides broad guidelines and a framework of practices for IT oversight within an organization. The purpose of ISO/IEC 38500 is to make IT governance a critical component of corporate governance.

ISO/IEC 38500 is based on an Australian standard, AS 8015, and was issued jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The standard was approved by all ISO members and published in 2008.

According to the ISO website:

"ISO/IEC 38500:2008 provides guiding principles for directors of organizations (including owners, board members, directors, partners, senior executives, or others) on the effective, efficient, and acceptable use of IT within their organizations.

This standard is applicable to all organizations, which include public and private companies, government entities and not-for-profit organizations. The standard is applicable to organizations of all sizes from the smallest to the largest, regardless of the extent of their IT usage."

The standard's six principles for IT governance are:

  1. Establish responsibilities.
  2. Plan to best support the organization.
  3. Acquire validly.
  4. Ensure performance when required.
  5. Ensure comformance with rules.
  6. Ensure respect for human factors.

Learn More About IT:
> The ISO 38500 standard may be purchased and downloaded from the ISO website.

This was last updated in January 2010

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.

-ADS BY GOOGLE

File Extensions and File Formats

Powered by:

SearchCompliance

SearchSecurity

  • time-based one-time password (TOTP)

    A time-based one-time password (TOTP) is a temporary code, generated by an algorithm, for use in authenticating access to ...

  • Security Operations Center (SOC)

    A security operations center (SOC) is a command center facility for a team of IT professionals with expertise in information ...

  • incident response team

    An incident response team is a group of IT professionals in charge of preparing for and reacting to any type of organizational ...

SearchHealthIT

SearchDisasterRecovery

  • disaster recovery team

    A disaster recovery team is a group of individuals focused on planning, implementing, maintaining, auditing and testing an ...

  • cloud insurance

    Cloud insurance is any type of financial or data protection obtained by a cloud service provider. 

  • business continuity software

    Business continuity software is an application or suite designed to make business continuity planning/business continuity ...

SearchStorage

  • storage class memory (SCM)

    Storage class memory (SCM) is a type of NAND flash that includes a power source to ensure that data won't be lost due to a system...

  • Hadoop as a service (HaaS)

    Hadoop as a service (HaaS), also known as Hadoop in the cloud, is a big data analytics framework that stores and analyzes data in...

  • blockchain storage

    Blockchain storage is a way of saving data in a decentralized network which utilizes the unused hard disk space of users across ...

Close