ISO/IEC 38500:2024
Principles for the governance of IT – ISO/IEC 38500:2024

ISO/IEC 38500:2024 5.4.2: Strategy: governance implications for use of IT

What the strategy principle means for the governance of IT: the IT strategy is aligned with and built into the organizational strategy, and the way IT, data and digital capabilities are provided and used follows that strategy; in turn the organizational strategy makes proper use of what digital innovation offers, adapting to internal and external needs through the right investments, and it includes plans for recovering from IT system failures and for dealing with technology becoming obsolete.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 18 controls across 8 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC TR 24028:2020 · 5 controls

  • 8.1 General: vulnerabilities, threats and challenges
  • 8.3.1 AI specific privacy threats: general
  • 9.11.1 Compliance
  • 9.3.1 Explainability: general
  • 9.4.1 Controllability: general

ISO/IEC 23894:2023 · 4 controls

COBIT 2019 · 3 controls

  • APO02.03 APO02.03 Define target digital capabilities
  • APO02.05 APO02.05 Define the strategic plan and road map
  • APO08.02 APO08.02 Align I&T strategy with business expectations and identify opportunities for IT to enhance the business

ISO/IEC 42001:2023 · 2 controls

  • 7.2 Competence
  • 9.2 Internal audit

BCBS 239 · 1 control

  • BCBS239-P1 Governance
  • CAT-D1-1 Governance

ISO 37001:2016 · 1 control

  • 5.1.1 5.1.1 Governing body

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Principles for the governance of IT – ISO/IEC 38500:2024

Query this from an agent

The graph holds this control, the 18 it maps to, and the evidence behind each claim, over MCP and REST.