Information technology. Governance of IT. Implementation guide

Abstract

Information technology (IT) has become pervasive in supporting and enabling the strategy of organizations and this prevalence mandates the governance of IT as an organizational imperative.

Organizations have made significant investments in IT to automate business processes and to communicate and transact electronically with their customers and suppliers. The benefits from these investments have unfortunately not always materialised and in some instances, organizations have incurred significant financial and reputational damage as a result of IT failures. This has further heightened governing body awareness of the need for the governance of IT and of their responsibilities in this regard.

It might be, however, that some governing bodies are uncertain of what arrangements they need to have in place for the governance of IT.

This Technical Specification has therefore been developed to provide guidance on the implementation of governance of IT within organizations. It considers governance, both from the perspective of gaining assurance that the risks associated with the use of IT are appropriately managed, as well as ensuring that the organization maximizes the value from its investments in IT.

It expands on the model and principles for good governance of IT, as described in ISO/IEC 38500 and ISO/IEC/TR 38502, and provides guidance on a methodology for implementing principles-based governance of IT. © ISO/IEC 2022 All rights reserved

Scope

This Technical Specification provides guidance on how to implement arrangements for effective governance of IT within an organization.

This Technical Specification identifies the key activities that an organization has to undertake to implement governance of IT, in accordance with ISO/IEC 38500. © ISO/IEC 2022 All rights reserved

Purpose

It provides guidance on the design and establishment of the arrangements for the governance of IT, clarifying roles and responsibilities of key stakeholders within the organization, as well as providing examples of matters to consider in the design of the governance of IT.

This Technical Specification can be used by individuals responsible for governance of IT within an organization and individuals supporting in the governance of organizations. This Technical Specification is applicable to organizations of all sizes and types. © ISO/IEC 2022 All rights reserved

External Links