In order to fully comprehend the challenges and develop a potent solution, we can implement a 6-phase resolution plan.

1. Project Initiation: Identify challenges faced during adherence to ISO 38500. Review current policies and approach towards IT governance. Develop a hypothesis on how a system in line with ISO 38500 should ideally function.

2. Analysis: Investigate existing systems, processes, and IT governance policies of the company. Analyze the gap between current practices and ideal governance as dictated by ISO 38500.

3. Development of Strategy: Design a strategic plan that fills the identified gaps. Include a detailed implementation plan that will gradually move the company towards complete ISO 38500 compliance.

4. Implementation: Execute the plan as per guidelines formulated in the strategy. Monitor changes and rectify, as and when required.

5. Evaluating Outcome: Analyze the results of the implementation in terms of Key Performance Indicators (KPIs) as determined at the outset. Identify areas of success stories, areas requiring adjustment or reevaluations.

6. Handover and Continuous Improvement: Finalize documentation and handover the improved system to the organization for ongoing use. Establish continuous improvement strategies and milestones.

Understanding that changes, especially those involving IT governance can be complex and often need justification. Keeping that in mind, it's crucial to address potential concerns during the course of the project. These include:

The Virtual Expansion: The expansion of an organizational facility to a virtual environment, with the adoption of cloud computing, is not just about mitigating costs—it also calls for the adaptation of organizational leadership, its operational model as well as its IT infrastructure to accommodate the virtual change.

The Maturity Model: Adopting the ISO 38500 IT Governance maturity model can streamline processes and frameworks applied across the enterprise. A Strategic Planning approach to implementing the guidelines can ensure a smooth transition throughout the organization, positively impacting Business Transformation.

The Regulatory Approach: Applying the regulatory approach by translating the ISO 38500 directives into a comprehensive risk management framework can be of immense benefit. The challenge lies in ensuring a balance between achieving compliance and operating efficiency. This can be overcome by implementing a phased and corporeal methodology towards ISO 38500 adherence.

• Improved IT governance, leading to optimised operational efficiency and higher productivity.
• A sustainable and effective ISO 38500 compliance framework that will support future expansion plans of the company.
• Robust risk management protocols that minimize potential risks and helps in preserving brand reputation.

Case Studies

• The successful ISO 38500 adoption by Microsoft, resulting in their improved ability to capture and cater to customer demands. The company's focus on compliance as a part of their corporate responsibility strategy significantly paid off.
• IBM’s instance of successfully leveraging ISO 38500 to enhance IT governance, significantly improving decision-making on IT investments, and delivering value.

Sample Deliverables

1. Risk Analysis Report (Word)
2. Strategic Plan for ISO 38500 Compliance (PowerPoint)
3. IT Governance Policy (Word)
4. ISO 38500 Compliance Metric Dashboard (Excel)
5. Project Completion Report (Word)

Successful ISO 38500 compliance is not solely the responsibility of IT teams; instead, it's a collective effort involving all parts of the organization. Steering the course of a robust IT governance model following ISO 38500's pillars is essential to a sustainable success. These pillars include Leadership, Governance Framework, Strategy and Performance Management.

ISO 38500 serves not only as a regulatory compliance tool but can also contribute to the organization’s strategic goals. By aligning IT governance with business objectives, it boosts overall enterprise governance, thus driving value creation and growth.

With an effectively designed and enforced IT governance system, the company can anticipate improved operational performance, increased trust from stakeholders given the increased control, and stronger regulatory compliance. This paves the way for future expansions and strengthens its market positioning.