ISO/IEC 38500
IT Governance

ISO/IEC 38500 standard provides guiding principles for members of governing bodies of organizations (which can comprise owners, directors, partners, executive managers, or similar) on the effective, efficient, and acceptable use of information technology (IT) within their organizations.

It also provides guidance to those advising, informing, or assisting governing bodies. They include the following:

• executive managers;
  members of groups monitoring the resources within the organization;
• external business or technical specialists, such as legal or
• accounting specialists, retail or industrial associations, or
• professional bodies;
• internal and external service providers (including consultants);
• auditors.