Certification ISO/IEC 38500: governance of information technology

In IT governance, ISO/IEC 38500 gives organisations the means to ensure that their use of information technology contributes positively to business performance. PECB's individual ISO/IEC 38500 certifications therefore enable stakeholders to acquire the knowledge and skills needed to help an organisation choose a sound governance model suited to its needs.

 

What is ISO/IEC 38500?

ISO/IEC 38500 is an international standard providing a framework for the corporate governance of information technology (IT). It was first published in 2008 by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).

The ISO/IEC 38500:2015 version aims to help organisations ensure that their IT investments are aligned with their business objectives and that their IT activities maximise business value while minimising risk. It provides guidance on IT governance at the highest level of the organisation: the board of directors and executive management.

The standard addresses 6 principles of IT governance: responsibility, strategy, acquisition, performance, conformance and human behaviour. These principles are applied in practice, with an emphasis on transparency, accountability and ethics in IT governance.

ISO/IEC 38500 is applicable to organisations of all sizes and types and can be used alongside other standards, such as ISO 27001 (information security management) and ISO 20000 (IT service management).

What are the benefits of ISO/IEC 38500:2015?

ISO/IEC 38500 is among the first international standards published for the corporate governance of information technology (IT). Implementing it requires a sound understanding of the Evaluate, Direct and Monitor model and offers the following main benefits:

• Improved decision-making: the standard emphasises a structured approach to IT governance decisions, helping organisations make informed choices aligned with business objectives.
• Greater accountability: ISO/IEC 38500 requires organisations to define IT governance roles and responsibilities clearly, making it easier to assign responsibility and ensure that all stakeholders are accountable for their actions.
• Better risk management: the standard provides guidance on identifying, assessing and managing IT-related risks, helping organisations reduce the likelihood of IT incidents that could affect their operations.
• Better alignment of objectives: by aligning IT with business objectives, ISO/IEC 38500 ensures that information and communication technologies support the overall business strategy, improving the efficiency and effectiveness of IT-related activities.
• Increased transparency: the standard requires organisations to be transparent about their IT governance practices, making it easier for stakeholders to understand how IT supports the organisation and how it is managed.

Overall, ISO/IEC 38500 helps organisations improve IT asset management, reduce risk, increase accountability and ensure that IT is aligned with business objectives.

PECB ISO/IEC 38500 certification training

Whether you are a manager or a consultant responsible for sound IT governance within an organisation, we offer 3 certification training options covering ISO/IEC 38500.

ISO/IEC 38500 Foundation training

This 2-day introductory course teaches best practices for using information technology within your organisation. You will cover IT governance concepts and the fundamentals of the ISO/IEC 38500 Evaluate, Direct and Monitor model. On completing the course and successfully passing and validating the official examination, you will receive the title of PECB Certificate Holder in ISO/IEC 38500 Foundation.

ISO/IEC 38500 IT Corporate Governance Manager training

Understanding the basic concepts and principles of IT governance based on ISO/IEC 38500 is the aim of this 3-day course. Primarily intended for professionals seeking an IT governance management role, the programme enables you to obtain the title of PECB Certified ISO/IEC 38500 Lead IT Corporate Governance Manager after passing an examination.

ISO/IEC 38500 Lead IT Corporate Governance Manager training

This 5-day advanced course enables you to master the fundamental concepts and principles of IT governance. You will develop the skills required to support and lead an organisation effectively in evaluating, directing and monitoring the ISO/IEC 38500:2015 governance model. At the end of the course, you will also sit an examination to obtain the title of PECB Certified ISO/IEC 38500 Lead IT Governance Manager.

For more information about PECB ISO/IEC 38500 training and certifications, see the courses below.

Training related to ISO/IEC 38500: governance of information technology