ISO/IEC 38500

Citation
ISO/IEC 38500:2008 Corporate governance of information technology.

Overview
This standard provides a framework for effective governance of IT to assist those at the highest level of organizations to understand and fulfill their legal, regulatory, and ethical obligations in respect of their organisations' use of IT.