CSA ISO/IEC TR 38502:15 (R2020)

CSA Preface Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the Canadian Advisory Committee (CAC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T). Scope This Technical Report provides guidance on the nature and mechanisms of governance and management together with the relationships between them, in the context of IT within an organization. The purpose of this Technical Report is to provide information on a framework and model that can be used to establish the boundaries and relationships between governance and management of an organization’s current and future use of IT. This Technical Report provides guidance for: — governing bodies; — managers who have to work within the authority and accountability established by governance; — advisors or those assisting in the governance of organizations of all sizes and types; and — developers of standards in the areas of governance of IT and management of IT.

CSA Preface Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the Canadian Advisory Committee (CAC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T). Scope This Technical Report provides guidance on the nature and mechanisms of governance and management together with the relationships between them, in the context of IT within an organization. The purpose of this Technical Report is to provide information on a framework and model that can be used to establish the boundaries and relationships between governance and management of an organization’s current and future use of IT. This Technical Report provides guidance for: — governing bodies; — managers who have to work within the authority and accountability established by governance; — advisors or those assisting in the governance of organizations of all sizes and types; and — developers of standards in the areas of governance of IT and management of IT.