This document provides guidance on the assessment of governance of information technology (IT) based on the principles, definitions and model for the governance of IT outlined in ISO/IEC38500 and ISO/IECTR38502 and the implementation considerations outlined in ISO/IECTS38501.
This document includes approaches for conducting the assessment, the criteria against which the assessment can be made, guidance on the evidence that can be used for the assessment, as well as a method for determining the maturity of the organizations governance of IT.
This document is applicable to organizations of all sizes, regardless of the extent of their use of IT.