ISO/IEC 38500:2024
Framework for the governance of IT – ISO/IEC 38500:2024

ISO/IEC 38500:2024 7.1: Framework: general

The framework holds the elements that are basic to practising governance of IT: setting and keeping up to date the policies, decision-making structures, behaviours and accountabilities that make sure the operating model delivers value, controls risk and meets stakeholder expectations. Each organization implements it in its own way, with the aim that everyone involved in the governance of IT works together effectively.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 17 controls across 8 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO/IEC 23894:2023 · 5 controls

ISO/IEC TR 24028:2020 · 3 controls

  • 6.1 General concepts
  • 8.1 General: vulnerabilities, threats and challenges
  • 9.1 General: mitigation measures

ISO 27005:2022 · 2 controls

ISO/IEC 42001:2023 · 2 controls

COBIT 2019 · 1 control

  • APO01.01 APO01.01 Design the management system for enterprise I&T

ISO 10006:2003 · 1 control

  • 7.1 Product realization: General

ISO 13485:2016 · 1 control

  • 4.1 General requirements

ISO 14004:2016 · 1 control

  • 8.1.1 General guidance: Operational control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Framework for the governance of IT – ISO/IEC 38500:2024

Query this from an agent

The graph holds this control, the 17 it maps to, and the evidence behind each claim, over MCP and REST.