
IT corporate governance
ISO/IEC 38500 Foundation
Two days on the corporate governance of IT. ISO/IEC 38500 is about the governing body's role, evaluate, direct and monitor, rather than about IT management practice. Confusing the two is the failure this standard exists to prevent.
Duration
2 days
Languages
English, French
Delivery
Classroom, In-company, Live online, Self-paced
Exam
Included in the price
CPD credits
14 Continuing Professional Development credits
Accreditation
PECB
Courseware and examination in English. Sessions facilitated in English or French.
Who it is for
Board members, executives and IT leaders who need a shared language for how technology decisions get made, and by whom.
Prerequisites
None.
What you will be able to do
- 01Distinguish the governance of IT from the management of IT.
- 02Apply the six principles of ISO/IEC 38500.
- 03Describe the evaluate, direct and monitor model and where each activity sits.
- 04Identify where accountability for technology decisions actually sits in your organisation today.
- 05Recognise the governance failures that produce failed programmes.
- 06Position ISO/IEC 38500 alongside COBIT, ITIL and ISO/IEC 42001.
What is covered
Governance against management
The distinction, and why it keeps collapsing.
The six principles
Responsibility, strategy, acquisition, performance, conformance, human behaviour.
Evaluate, direct, monitor
The model, and where each activity sits.
Accountability and the governing body
Who decides, and on what evidence.
Relationship to other frameworks
COBIT, ITIL and ISO/IEC 42001.
Exam
Sat at the end of the course and included in the price.
The exam and the certificate
The exam is sat at the end of the course and is included in the price. Certification is issued by PECB following successful examination and verification of professional experience against PECB’s published requirements, which vary by credential level. We tell candidates in advance where their experience may fall short of the credential they are aiming at.
The same examination leads to a graded credential, from Provisional through to Senior, and the grade you receive depends on your documented professional experience and project involvement, not on your exam mark. We tell candidates before they book which grade their experience currently supports.
The exam is sat at the end of the course and is included in the price. Certification is issued by PECB following successful examination and verification of professional experience against PECB's published requirements, which vary by credential level. We tell candidates in advance where their experience may fall short of the credential they are aiming at.Price
€1,150–1,450 per seat
All prices exclude VAT. Classroom sessions held in the Netherlands are subject to 21% Dutch VAT for all attendees, regardless of the attendee's country — EU rules tax admission to an educational event where the event takes place. Online and in-company delivery to businesses elsewhere in the EU is reverse-charged.
GSNA Solutions is a PECB Certified Partner and authorised reseller. PECB personnel certifications are issued under ISO/IEC 17024. Course participants who complete a certificate programme hold a certificate; they are not thereby certified, licensed, accredited or registered to practise an occupation. Certification follows successful examination and verification of professional experience against PECB's published requirements.
Other courses on this track
3 days
ISO/IEC 38500 IT Corporate Governance Manager
Three days on operating an IT corporate governance framework: turning six principles into decision rights, forums, reporting and evidence a board can act on. The practitioner track between Foundation and Lead.
5 days
ISO/IEC 38500 Lead IT Corporate Governance Manager
Five days on establishing and leading IT corporate governance across an organisation, from the governing body's mandate down to the evidence that shows the model works. The senior track, and the natural companion to ISO/IEC 42001 now that AI decisions have become board decisions.

Leave with your top three risks documented
Thirty minutes with a senior practitioner. No slideware, no sales engineer.