ISO/IEC 38500:2024
Principles for the governance of IT – ISO/IEC 38500:2024

ISO/IEC 38500:2024 5.12.2: Viability and performance over time: governance implications for use of IT

What the viability and performance over time principle means for the governance of IT: an organization's long-run viability and performance now depend on its digital capabilities; IT systems are provided in a way that follows the organization's changing business needs and priorities; and the effectiveness of the IT infrastructure, including infrastructure run by external providers, is maintained continuously, which includes protecting it in an increasingly complex and hostile environment.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 15 controls across 7 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 42001:2023 · 4 controls

ISO/IEC TR 24028:2020 · 4 controls

  • 8.1 General: vulnerabilities, threats and challenges
  • 9.1 General: mitigation measures
  • 9.10.1 Testing and evaluation: general
  • 9.11.1 Compliance

ISO/IEC 23894:2023 · 3 controls

BCBS 239 · 1 control

  • BCBS239-P1 Governance
  • CAT-D1-1 Governance

ISO 37001:2016 · 1 control

  • 5.1.1 5.1.1 Governing body

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Principles for the governance of IT – ISO/IEC 38500:2024

Query this from an agent

The graph holds this control, the 15 it maps to, and the evidence behind each claim, over MCP and REST.