Want FREE Templates on Organization, Change, & Culture? Download our FREE compilation of 50+ slides. This is an exclusive promotion being run on LinkedIn.







Flevy Management Insights Q&A
What are the implications of ISO 38500 on the governance of emerging technologies like IoT and edge computing?


This article provides a detailed response to: What are the implications of ISO 38500 on the governance of emerging technologies like IoT and edge computing? For a comprehensive understanding of ISO 38500, we also include relevant case studies for further reading and links to ISO 38500 best practice resources.

TLDR ISO 38500 provides a governance framework for IoT and edge computing, emphasizing Strategic Alignment, Risk Management, and Performance Management to maximize value and mitigate risks.

Reading time: 5 minutes


ISO 38500, the international standard for corporate governance of information technology, provides a framework for effective governance of IT to support an organization in achieving its goals. As emerging technologies like IoT (Internet of Things) and edge computing become increasingly integral to business operations and strategy, the implications of ISO 38500 on their governance are profound and multifaceted. This discussion delves into the strategic alignment, risk management, and performance management aspects of ISO 38500 and how they relate to governing these technologies.

Strategic Alignment and Value Creation

ISO 38500 emphasizes the importance of aligning IT governance with business strategy to ensure that investments in technology generate value and support organizational objectives. In the context of IoT and edge computing, this means that organizations must carefully consider how these technologies fit into their broader business strategies. For instance, a report by McKinsey highlights that IoT technologies can unlock significant value across sectors by enabling new business models, enhancing productivity, and improving customer experiences. However, realizing this potential requires a strategic approach to technology investment and deployment, guided by clear governance principles.

Organizations should establish governance frameworks that facilitate cross-functional collaboration and ensure that IoT and edge computing initiatives are closely aligned with strategic priorities. This involves setting clear objectives for technology deployments, defining metrics to measure success, and ensuring that technology decisions are made with a clear understanding of their strategic implications. For example, a retail organization might deploy IoT devices to improve inventory management and customer experience, but this should be part of a larger digital transformation strategy aimed at enhancing operational efficiency and driving growth.

Moreover, effective governance under ISO 38500 helps ensure that investments in emerging technologies are not just technically sound but also support value creation. This requires ongoing evaluation of technology initiatives against strategic objectives and adjusting course as necessary to ensure alignment. By doing so, organizations can maximize the benefits of IoT and edge computing while minimizing risks and inefficiencies.

Explore related management topics: Digital Transformation Customer Experience Inventory Management Value Creation ISO 38500 IT Governance

Are you familiar with Flevy? We are you shortcut to immediate value.
Flevy provides business best practices—the same as those produced by top-tier consulting firms and used by Fortune 100 companies. Our best practice business frameworks, financial models, and templates are of the same caliber as those produced by top-tier management consulting firms, like McKinsey, BCG, Bain, Deloitte, and Accenture. Most were developed by seasoned executives and consultants with 20+ years of experience.

Trusted by over 10,000+ Client Organizations
Since 2012, we have provided best practices to over 10,000 businesses and organizations of all sizes, from startups and small businesses to the Fortune 100, in over 130 countries.
AT&T GE Cisco Intel IBM Coke Dell Toyota HP Nike Samsung Microsoft Astrazeneca JP Morgan KPMG Walgreens Walmart 3M Kaiser Oracle SAP Google E&Y Volvo Bosch Merck Fedex Shell Amgen Eli Lilly Roche AIG Abbott Amazon PwC T-Mobile Broadcom Bayer Pearson Titleist ConEd Pfizer NTT Data Schwab

Risk Management in the Age of IoT and Edge Computing

The proliferation of IoT and edge computing technologies introduces new risks, including cybersecurity threats, data privacy concerns, and compliance challenges. ISO 38500 underscores the need for robust risk management practices to identify, assess, and mitigate these risks. According to a survey by PwC, cybersecurity is a top concern for executives when deploying IoT solutions, with many organizations recognizing the need for comprehensive security strategies to protect connected devices and data.

Organizations must adopt a proactive approach to risk management, integrating security and privacy considerations into the design and deployment of IoT and edge computing solutions. This includes conducting regular risk assessments, implementing security controls tailored to the specific risks of IoT and edge computing environments, and ensuring compliance with relevant regulations and standards. For example, deploying encryption technologies to secure data transmitted by IoT devices and adopting edge computing architectures that minimize data exposure can help mitigate cybersecurity risks.

Furthermore, effective governance according to ISO 38500 involves establishing clear accountability for risk management within the organization. This means assigning responsibility for identifying and managing risks associated with IoT and edge computing to specific roles or committees and ensuring that risk management practices are integrated into the overall IT governance framework. By doing so, organizations can create a culture of risk awareness and ensure that risk management is a continuous process, aligned with strategic objectives and responsive to the evolving risk landscape.

Explore related management topics: Risk Management Data Privacy

Performance Management and Continuous Improvement

ISO 38500 also focuses on the importance of monitoring and evaluating the performance of IT investments, including those in IoT and edge computing. This involves setting performance metrics, collecting data to assess performance against these metrics, and using this information to drive continuous improvement. A study by Gartner suggests that organizations that effectively measure the performance of their IoT initiatives are more likely to achieve their strategic objectives, highlighting the critical role of performance management in realizing the value of emerging technologies.

For IoT and edge computing projects, performance management should consider not only technical metrics, such as device uptime or data processing speed but also business outcomes, such as cost savings, revenue growth, or customer satisfaction improvements. Organizations should establish a performance management framework that links technology performance to business results, enabling them to make informed decisions about technology investments and adjustments.

Moreover, ISO 38500 encourages organizations to adopt a continuous improvement mindset, leveraging performance data to identify opportunities for optimization and innovation. For example, analyzing data from IoT devices can reveal insights into operational inefficiencies or customer behavior patterns, informing strategies to enhance products, services, or processes. By embedding performance management and continuous improvement into the governance of IoT and edge computing, organizations can ensure that these technologies contribute to long-term strategic success and competitive advantage.

In conclusion, the governance of IoT and edge computing under ISO 38500 involves strategic alignment, risk management, and performance management. By adhering to these principles, organizations can navigate the complexities of emerging technologies, maximize their value, and mitigate associated risks, positioning themselves for success in an increasingly digital world.

Explore related management topics: Performance Management Competitive Advantage Continuous Improvement Customer Satisfaction Revenue Growth

Best Practices in ISO 38500

Here are best practices relevant to ISO 38500 from the Flevy Marketplace. View all our ISO 38500 materials here.

Did you know?
The average daily rate of a McKinsey consultant is $6,625 (not including expenses). The average price of a Flevy document is $65.

Explore all of our best practices in: ISO 38500

ISO 38500 Case Studies

For a practical understanding of ISO 38500, take a look at these case studies.

ISO 38500 Compliance Enhancement in Agritech

Scenario: The organization is a global agritech player specializing in sustainable farming solutions.

Read Full Case Study

IT Governance Enhancement in Power & Utilities

Scenario: The organization is a regional leader in the Power & Utilities sector, grappling with aligning its IT investments with business goals in accordance with ISO 38500.

Read Full Case Study

ISO 38500 Compliance Strategy for D2C Education Platform

Scenario: The organization is a direct-to-consumer (D2C) online education platform that has recently scaled operations globally.

Read Full Case Study

ISO 38500 Compliance Enhancement for Electronics Firm

Scenario: The organization is a mid-sized electronics manufacturer specializing in consumer gadgets, facing challenges in aligning its IT governance with the principles of ISO 38500.

Read Full Case Study

ISO 38500 Compliance for Power & Utilities in North America

Scenario: A firm in the power and utilities sector is grappling with governance issues related to information technology as outlined in ISO 38500.

Read Full Case Study

ISO 38500 Governance Enhancement - Luxury Retail

Scenario: A luxury goods retailer, operating globally with a focus on high-end fashion and accessories, is facing challenges in aligning its IT governance framework with the principles of ISO 38500.

Read Full Case Study


Explore all Flevy Management Case Studies

Related Questions

Here are our additional questions you may be interested in.

What are the key indicators of success for an ISO 38500 implementation within an organization?
The key success indicators for ISO 38500 implementation include IT and Business Strategy Alignment, Enhanced Risk Management and Compliance, and Improved Performance and Resource Management, reflecting its role in transforming IT into a strategic organizational asset. [Read full explanation]
How can ISO 38500 assist in the governance of data privacy and protection in the era of big data?
ISO 38500 offers a strategic IT governance framework that helps organizations manage data privacy and protection efficiently, aligning IT usage with business strategies and regulatory requirements. [Read full explanation]
What role does ISO 38500 play in the governance of IT outsourcing and cloud services?
ISO 38500 offers a governance framework for IT outsourcing and cloud services, emphasizing Strategic Alignment, Risk Management, and clear Responsibility and Accountability to support business objectives and compliance. [Read full explanation]
How does ISO 38500 support the governance of IT investments to ensure value creation and ROI?
ISO 38500 offers a framework for effective IT governance, focusing on Strategic Alignment, Risk Management, Performance Management, and accountability to ensure IT investments align with business strategies and contribute to value creation and ROI. [Read full explanation]
What are the best practices for integrating ISO 38500 guidelines with existing IT governance frameworks?
Integrating ISO 38500 with existing IT governance frameworks, like COBIT, ITIL, or CMMI, involves aligning principles, enhancing decision-making, and ensuring strategic alignment and compliance through a cultural shift and continuous improvement. [Read full explanation]
In what ways can ISO 38500 improve collaboration between IT and other business units?
ISO 38500 enhances IT and business unit collaboration by establishing a common governance framework, improving communication, and aligning IT investments with business goals, fostering operational efficiency and innovation. [Read full explanation]
How can ISO 38500 be applied to improve IT service management processes within an organization?
Applying ISO 38500 improves IT service management by aligning IT services with Organizational Strategy, managing IT-related Risks, and optimizing IT Resource Performance through a robust governance framework. [Read full explanation]
What strategies can organizations employ to align ISO 38500 with sustainable business practices?
Organizations can align ISO 38500 with sustainable business practices through Strategic Integration, focusing on Operational Excellence, and implementing robust Performance Management systems for continuous improvement in IT governance and sustainability. [Read full explanation]

Source: Executive Q&A: ISO 38500 Questions, Flevy Management Insights, 2024


Flevy is the world's largest knowledge base of best practices.


Leverage the Experience of Experts.

Find documents of the same caliber as those used by top-tier consulting firms, like McKinsey, BCG, Bain, Deloitte, Accenture.

Download Immediately and Use.

Our PowerPoint presentations, Excel workbooks, and Word documents are completely customizable, including rebrandable.

Save Time, Effort, and Money.

Save yourself and your employees countless hours. Use that time to work on more value-added and fulfilling activities.




Read Customer Testimonials



Download our FREE Strategy & Transformation Framework Templates

Download our free compilation of 50+ Strategy & Transformation slides and templates. Frameworks include McKinsey 7-S Strategy Model, Balanced Scorecard, Disruptive Innovation, BCG Experience Curve, and many more.