BS ISO IEC 38500 2008

Corporate governance of information technology

BS ISO/IEC 38500 is an international standard for the senior executive, such as Board, Directors and Partners, of an organisation that provides a set of guiding principles on the effective, efficient, acceptable use of Information Technology (IT), its evaluation and monitoring within their organisations.

The standard adopts a framework approach to establish a set of principles and working model that ensures for effective governance and assistance to those responsible within the organisation for their legal, regulatory and ethical obligations with respect to their use of IT.

The standard is based on sound goverenace principles as defined in the Cadbury Report of 1992 and adopted by the OECD in 1999 and 2004.

It is applicable to organisations and companies or all sizes and its value is in ensuring the establishment of best practices by management when defining and implementing policies, organisational structres and business processes that support their goverance responsibilities.