• SA/SNZ TR ISO/IEC 38505.2:2019

    Current The latest, up-to-date edition.

    Information technology - Governance of IT - Governance of data Implications of ISO/IEC 38505-1 for data management

    Available format(s):  Hardcopy, PDF 1 User, PDF 3 Users, PDF 5 Users, PDF 9 Users

    Language(s):  English

    Published date:  03-10-2019

    Publisher:  Standards Australia

    Add To Cart

    Abstract - (Show below) - (Hide below)

    The objective of this Technical Report is to provide guidance to the members of governing bodies of organizations and their executive managers on the implications of AS ISO/IEC 38505.1 for data management. It assumes understanding of the principles of AS ISO/IEC 38500 and familiarization with the data accountability map and associated matrix of considerations, as presented in AS ISO/IEC 38505.1.

    Scope - (Show below) - (Hide below)

    This document provides guidance to the members of governing bodies of organizations and their executive managers on the implications of ISO/IEC 38505-1 for data management. It assumes understanding of the principles of ISO/IEC 38500 and familiarization with the data accountability map and associated matrix of considerations, as presented in ISO/IEC 38505-1.
    This document enables an informed dialogue between the governing body and the senior/executive management team of an organization to ensure that the data use throughout the organization aligns with the strategic direction set by the governing body.
    This document covers the following:
    — identifying the information that a governing body requires in order to evaluate and direct the strategies and policies relating to a data-driven business;
    — identifying the capabilities and potential of measurement systems that can be used to monitor the performance of data and its uses.

    General Product Information - (Show below) - (Hide below)

    Committee IT-030
    Document Type Technical Report
    Publisher Standards Australia
    Status Current
    Supersedes

    History - (Show below) - (Hide below)

    First published as SA/SNZ TR ISO/IEC 38505.2:2019.

    Standards Referenced By This Book - (Show below) - (Hide below)

    ISO/IEC 20889:2018 Privacy enhancing data de-identification terminology and classification of techniques
    ISO/IEC 27002:2013 Information technology Security techniques Code of practice for information security controls
    ISO/IEC 38500:2015 Information technology — Governance of IT for the organization
    ISO/IEC 17788:2014 Information technology — Cloud computing — Overview and vocabulary
    ISO/IEC 17789:2014 Information technology — Cloud computing — Reference architecture
    ISO/IEC 19770-1:2017 Information technology — IT asset management — Part 1: IT asset management systems — Requirements
    ISO/IEC 27017:2015 Information technology — Security techniques — Code of practice for information security controls based on ISO/IEC 27002 for cloud services
    ISO/IEC 27018:2019 Information technology — Security techniques — Code of practice for protection of personally identifiable information (PII) in public clouds acting as PII processors
    ISO/TR 31004:2013 Risk management — Guidance for the implementation of ISO 31000
    ISO/IEC 38505-1:2017 Information technology — Governance of IT — Governance of data — Part 1: Application of ISO/IEC 38500 to the governance of data
    ISO/IEC 20000-1:2018 Information technology — Service management — Part 1: Service management system requirements
    ISO/IEC 19944:2017 Information technology Cloud computing Cloud services and devices: Data flow, data categories and data use
    ISO/IEC 29100:2011 Information technology — Security techniques — Privacy framework
    ISO 31000:2018 Risk management — Guidelines
    ISO/IEC 27000:2018 Information technology — Security techniques — Information security management systems — Overview and vocabulary
    ISO/IEC TR 38502:2017 Information technology — Governance of IT — Framework and model
    ISO/IEC 19941:2017 Information technology — Cloud computing — Interoperability and portability
    ISO/IEC 27035-1:2016 Information technology — Security techniques — Information security incident management — Part 1: Principles of incident management
    ISO/IEC 19086-1:2016 Information technology Cloud computing Service level agreement (SLA) framework Part 1: Overview and concepts
    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective