ISO/IEC 38503:2022
Information technology - Governance of IT - Assessment of the governance of IT
ISO/IEC 38503:2022 This document provides guidance on the assessment of governance of information technology (IT) based on the principles, definitions and model for the governance of IT outlined in ISO/IEC 38500 and ISO/IEC TR 38502 and the implementation considerations outlined in ISO/IEC TS 38501.
This document includes approaches for conducting the assessment, the criteria against which the assessment can be made, guidance on the evidence that can be used for the assessment, as well as a method for determining the maturity of the organization’s governance of IT.
This document is applicable to organizations of all sizes, regardless of the extent of their use of IT.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$240.87 NZD
|
|
| HardCopy |
$277.39 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Benefits of the assessment of the governance of IT
4.1 Context
4.2 Benefits of assessing the governance of IT
5 Assessment scope and approach
5.1 Establish scope
5.2 Assessment approach and involved parties
5.3 Roles, responsibilities and competencies
5.3.1 Roles associated with the assessment of the governance of IT
5.3.2 Governing body
5.3.3 Sponsor
5.3.4 Executive management
5.3.5 Assessment expert (assessor)
5.3.6 Business expert
5.3.7 Technical expert
6 Assessment of the governance of IT
6.1 Assessment overview
6.2 Reference model for the governance of IT
6.2.1 Governance of IT practice areas
6.2.2 Governance of IT characteristics
6.2.3 Measurement model for the governance of IT
6.2.4 Assessment framework for the governance of IT
6.3 Assessment of the governance of IT
6.4 Governance of IT maturity model
7 Assessment activities
7.1 Plan the assessment
7.2 Perform the assessment
7.2.1 Collect the data
7.2.2 Conduct the assessment
7.3 Report the assessment
Annex A (Informative) Assessment framework — Governance of IT practice areas
Keep me up-to-date
Register to receive notifications when updates are made to this standard.
Related Information
Similar Standards
-
AS/NZS 3802:1997
Data elements and interchange formats - Information interchange - Representation of dates and times
-
AS/NZS 5121:2015
Information technology - Vocabulary - Learning, education and training -
AS/NZS 5813.1:2012
Information technology equipment - Energy performance of computers - Part 1: Methods of measurement of energy performance -
AS/NZS 5813.2:2012
Information technology equipment - Energy performance of computers - Part 2: Minimum energy performance standards (MEPS) for computers
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Benefits of the assessment of the governance of IT
4.1 Context
4.2 Benefits of assessing the governance of IT
5 Assessment scope and approach
5.1 Establish scope
5.2 Assessment approach and involved parties
5.3 Roles, responsibilities and competencies
5.3.1 Roles associated with the assessment of the governance of IT
5.3.2 Governing body
5.3.3 Sponsor
5.3.4 Executive management
5.3.5 Assessment expert (assessor)
5.3.6 Business expert
5.3.7 Technical expert
6 Assessment of the governance of IT
6.1 Assessment overview
6.2 Reference model for the governance of IT
6.2.1 Governance of IT practice areas
6.2.2 Governance of IT characteristics
6.2.3 Measurement model for the governance of IT
6.2.4 Assessment framework for the governance of IT
6.3 Assessment of the governance of IT
6.4 Governance of IT maturity model
7 Assessment activities
7.1 Plan the assessment
7.2 Perform the assessment
7.2.1 Collect the data
7.2.2 Conduct the assessment
7.3 Report the assessment
Annex A (Informative) Assessment framework — Governance of IT practice areas