IT Governance
What is IT Governance?
The framework of policies, processes, and organizational structures that ensure IT investments support business objectives and manage technology risks.
Terms that appear alongside it governance
Each of these is named in at least one of the same controls as it governance. The number is how many controls name both.
- governance 9 shared controls
- impact assessment 3 shared controls
- privacy risk 3 shared controls
- privacy by design 3 shared controls
- records of processing activities 3 shared controls
- high risk processing 3 shared controls
- data protection 3 shared controls
- data protection impact assessment 3 shared controls
Frameworks that govern it governance
What the standards actually require on it governance
Requirements naming it governance across 6 standards, quoted from the control text.
The bank puts in place a robust IT governance framework built on strategic alignment, risk management, resource management, performance management and business continuity and DR management (paragraph 11), which specifies the governance structure and processes...
rbi-cybersecurity-framework-for-banks::12 · Para 12: IT governance framework on the five focus areas →Review the IT governance policies and procedures of supply chain partners on a recurring cycle.
CCM-STA-13 · Supply Chain Governance Review →The board sets the tone and direction for IT, understands IT activities and risks, and through itself or a committee reviews and approves an IT strategic plan aligned with the business strategy and carrying an information security strategy against ongoing and...
ffiec-it-examination-handbook::MGT-I.A.1 · I.A.1 Board of Directors Oversight (Management) →Gives the general principles for managing technology risk: IT governance (control policies, oversight and organisation of IT, a technology risk management function, technology audits, staff competence, IT support from overseas offices);
hkma-spm::TM-G-1 · TM-G-1 General Principles for Technology Risk Management →Build, operate and continuously improve AI governance, including organisational processes to identify, assess and address risks across the whole lifecycle (design, development, provision, implementation), such as monitoring and evaluation mechanisms involving...
japan-ai-guidelines::GL13-2.1 · Article 13 Guideline 2(1) Overall appropriateness through AI governance →Per Norwegian PDPA + GDPR Articles 25 + 30 + 35: accountability instruments. Requirements include (a) conduct Data Protection Impact Assessment (DPIA) for high-risk processing per GDPR Article 35 + Datatilsynet lists + (b) implement Privacy by Design and Defau...
NORWAY-4 · DPIA, Privacy by Design, Records of Processing →Questions people ask about it governance
What is IT Governance?
Why is IT Governance important for compliance?
Which compliance frameworks address IT Governance?
Where can I learn more about IT Governance?
See how IT Governance applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.