ISO/IEC 38500:2024 情報技術 | ページ 6

3.1

direct

communicate desired purposes and outcomes

Note 1 to entry: Within the context of the governance of IT, directing involves setting objectives, strategies and policies to be adopted by the members of the organization, to ensure that the use of IT meets business objectives.

Note 2 to entry: Objectives, strategies and policies can be set by management if they have the relevant authority delegated to them by the governing body.

3.2

evaluate

consider and make informed judgements

Note 1 to entry: Within the context of the governance of IT, evaluating involves making judgements about the circumstances and opportunities (internal and external, current and future) relating to the organization's current, and future use of IT.

3.3

governance

human-based system comprising directing, overseeing and accountability

3.4

governance of IT

system by which the current and future use of IT is governed

Note 1 to entry: Governance of IT is a component or a domain of governance of organizations.

Note 2 to entry: The term"governance of IT" is equivalent to the terms"corporate governance of IT","enterprise governance of IT" and"organizational governance of IT".

3.5

information technology

it

resources used to acquire, process, store and disseminate information or data

Note 1 to entry: Resources can include computer or communication equipment, sensors, software, cloud computing and other software-based services.

3.6

investment

allocation of resources to achieve defined objectives and other benefits

3.7

management

fulfilment of the organization’s objectives within the authority and accountability established by governance

Note 1 to entry: The term"management" is often used as a collective term for those with responsibility for controlling an organization or parts of an organization.

3.8

monitor

review as a basis for appropriate decisions and adjustments

Note 1 to entry: Monitoring involves routinely obtaining information about progress against plans as well as the periodic examination of overall achievements against agreed strategies and outcomes to provide a basis for decision-making and adjustments to plans.

Note 2 to entry: Monitoring includes reviewing compliance with relevant legislation, regulations and organizational policies.

3.9

use of IT

planning, design, development, deployment, operation, management and application of IT to fulfil business objectives and create value for the organization

Note 1 to entry: The use of IT includes both the demand for, and the supply of, IT.

3.10

digital capability

IT to enable or support a service, product or process of the organization