Data Management Frameworks
ISO/IEC 38505
Governance of Data
Formal standard
Global
ISO/IEC JTC 1/SC 40
Since 2017
Applies the ISO/IEC 38500 IT governance principles specifically to data, giving boards and executives a model for the accountability, strategy and conformance of data use.
Deliberately high level: it tells a governing body what questions to ask, not how to implement controls. Pair it with a control framework if you need something auditable.
At a glance
- Category
- Data Management Frameworks
- Jurisdiction
- Global
- Governance
- ISO/IEC JTC 1/SC 40
- Status
- Part 1 published 2017; Part 2 (data analytics) 2018
- First released
- 2017
Links
Related frameworks
Other entries under Data Management Frameworks.
- DAMA-DMBOK2: Data Management Body of Knowledge, 2nd Edition
- DCAM: Data Management Capability Assessment Model
- CDMC: Cloud Data Management Capabilities
See ISO/IEC 38505 in context
Open the interactive Data Landscape for Regulation to compare ISO/IEC 38505 against every other framework, or grab the raw JSON. Certification schemes and editions move — follow the source links before relying on this page.