Flevy Management Insights Q&A
How is ISO 38500 evolving to accommodate the rise of artificial intelligence in business operations?
     David Tang    |    ISO 38500


This article provides a detailed response to: How is ISO 38500 evolving to accommodate the rise of artificial intelligence in business operations? For a comprehensive understanding of ISO 38500, we also include relevant case studies for further reading and links to ISO 38500 best practice resources.

TLDR ISO 38500 is evolving to address AI's unique challenges in governance, emphasizing ethical use, risk management, and data governance, ensuring organizations leverage AI responsibly.

Reading time: 5 minutes

Before we begin, let's review some important management concepts, as they related to this question.

What does Corporate Governance of Information Technology mean?
What does Ethical AI Use mean?
What does Risk Management in AI mean?
What does Data Governance for AI mean?


ISO 38500, the international standard for corporate governance of information technology, provides a framework for organizations to ensure effective, efficient, and acceptable use of IT within their operations. As the rise of artificial intelligence (AI) in business operations becomes more pronounced, ISO 38500 is evolving to accommodate these changes, ensuring that organizations can leverage AI technologies while maintaining strong governance and oversight. This evolution is critical for organizations to harness the full potential of AI, manage risks effectively, and ensure ethical considerations are front and center in their AI initiatives.

Understanding the Impact of AI on Corporate Governance

The integration of AI into business operations presents unique challenges and opportunities for corporate governance. AI technologies, by their nature, introduce complexities in decision-making processes, data management, and ethical considerations. For instance, AI systems can process and analyze data at a scale and speed beyond human capabilities, leading to more informed decision-making. However, this also raises questions about data privacy, security, and the potential for biased outcomes. As such, organizations must adapt their governance frameworks to address these challenges, ensuring that AI technologies are used responsibly and transparently. ISO 38500 provides a foundation for this adaptation, emphasizing the importance of aligning IT governance with overall corporate governance to achieve strategic objectives.

Moreover, the rise of AI necessitates a shift in the skills and competencies required for effective governance. Leaders and board members must now understand the basics of AI technologies to make informed decisions about their deployment and management. This includes knowledge of AI ethics, risk management, and the regulatory landscape, which is becoming increasingly complex as governments and international bodies introduce new regulations to address the challenges posed by AI. The evolving ISO 38500 standard is expected to reflect these needs, guiding organizations in developing governance practices that are robust yet flexible enough to adapt to the rapid advancements in AI technology.

Real-world examples of AI's impact on corporate governance are already emerging. For instance, financial institutions are using AI for risk assessment and fraud detection, requiring adjustments in their governance structures to oversee these technologies effectively. Similarly, healthcare organizations leveraging AI for patient diagnosis and treatment must navigate ethical considerations and regulatory compliance, underscoring the need for a governance framework that can accommodate such advanced technologies.

Are you familiar with Flevy? We are you shortcut to immediate value.
Flevy provides business best practices—the same as those produced by top-tier consulting firms and used by Fortune 100 companies. Our best practice business frameworks, financial models, and templates are of the same caliber as those produced by top-tier management consulting firms, like McKinsey, BCG, Bain, Deloitte, and Accenture. Most were developed by seasoned executives and consultants with 20+ years of experience.

Trusted by over 10,000+ Client Organizations
Since 2012, we have provided best practices to over 10,000 businesses and organizations of all sizes, from startups and small businesses to the Fortune 100, in over 130 countries.
AT&T GE Cisco Intel IBM Coke Dell Toyota HP Nike Samsung Microsoft Astrazeneca JP Morgan KPMG Walgreens Walmart 3M Kaiser Oracle SAP Google E&Y Volvo Bosch Merck Fedex Shell Amgen Eli Lilly Roche AIG Abbott Amazon PwC T-Mobile Broadcom Bayer Pearson Titleist ConEd Pfizer NTT Data Schwab

Adapting ISO 38500 for AI Governance

To accommodate the rise of AI, ISO 38500 is evolving in several key areas. First, it is placing a greater emphasis on ethical considerations and the social impact of AI technologies. This includes guidelines for ethical AI use, ensuring that AI systems are designed and deployed in a manner that respects privacy, promotes fairness, and avoids bias. Organizations are encouraged to establish ethical principles for AI use, aligning with ISO 38500's focus on responsibility and accountability in IT governance.

Second, the standard is adapting to emphasize the importance of risk management in the context of AI. This involves identifying, assessing, and mitigating risks associated with AI technologies, such as data breaches, biased outcomes, and operational failures. ISO 38500's evolution reflects the need for a comprehensive approach to risk management that encompasses the unique challenges posed by AI, including the potential for unpredictable behaviors and the need for continuous monitoring and adaptation of AI systems.

Finally, ISO 38500 is incorporating guidance on the governance of AI-related data. The effective use of AI depends on the availability of high-quality, relevant data, making data governance a critical component of AI governance. This includes ensuring data accuracy, integrity, and security, as well as compliance with data protection regulations. By evolving to address these aspects, ISO 38500 is helping organizations to establish robust governance frameworks that support the responsible use of AI technologies.

Implementing Evolved Governance Practices

For organizations looking to implement the evolved ISO 38500 standard in the context of AI, a strategic approach is essential. This involves establishing clear governance structures and processes for AI initiatives, including defining roles and responsibilities for oversight, decision-making, and risk management. Organizations should also invest in building AI literacy among leaders and board members, ensuring they have the knowledge needed to govern AI technologies effectively.

In addition to internal governance practices, organizations must also engage with external stakeholders, including regulators, industry groups, and civil society, to stay informed about emerging trends and regulations related to AI. This external engagement can provide valuable insights for refining governance practices and ensuring compliance with legal and ethical standards.

Finally, organizations should leverage frameworks and tools designed to support AI governance, such as AI impact assessments and ethical AI guidelines. These tools can help organizations to systematically assess the implications of AI technologies and make informed decisions about their deployment and management, in alignment with the principles of ISO 38500.

By evolving to address the unique challenges and opportunities presented by AI, ISO 38500 is enabling organizations to harness the power of AI technologies in a responsible, ethical, and effective manner. This evolution reflects a broader shift towards more adaptive, forward-looking governance frameworks that can accommodate the rapid pace of technological change, ensuring that organizations can achieve their strategic objectives while managing risks and upholding ethical standards.

Best Practices in ISO 38500

Here are best practices relevant to ISO 38500 from the Flevy Marketplace. View all our ISO 38500 materials here.

Did you know?
The average daily rate of a McKinsey consultant is $6,625 (not including expenses). The average price of a Flevy document is $65.

Explore all of our best practices in: ISO 38500

ISO 38500 Case Studies

For a practical understanding of ISO 38500, take a look at these case studies.

ISO 38500 Governance Enhancement - Luxury Retail

Scenario: A luxury goods retailer, operating globally with a focus on high-end fashion and accessories, is facing challenges in aligning its IT governance framework with the principles of ISO 38500.

Read Full Case Study

ISO 38500 Governance Framework Overhaul for Mid-Sized Oil & Gas Firm

Scenario: A mid-sized oil and gas firm operating in North America has identified lapses in its IT governance in line with ISO 38500 standards.

Read Full Case Study

ISO 38500 Governance Enhancement for Telecom

Scenario: The organization is a telecommunications provider with a global footprint, facing challenges in aligning IT governance with organizational goals in accordance with ISO 38500 standards.

Read Full Case Study

ISO 38500 Compliance Project for Expanding Tech Company

Scenario: An upscale global tech company is struggling with adhering to the guidelines of ISO 38500 due to its rapid expansion and development.

Read Full Case Study

ISO 38500 Compliance Initiative for Metals Industry Leader

Scenario: A prominent firm in the metals sector is struggling with governance issues related to IT management as per ISO 38500 standards.

Read Full Case Study

IT Governance Enhancement in Telecom Sector

Scenario: The organization is a telecommunications provider facing challenges in aligning IT governance with corporate governance, as outlined in ISO 38500.

Read Full Case Study




Flevy is the world's largest knowledge base of best practices.


Leverage the Experience of Experts.

Find documents of the same caliber as those used by top-tier consulting firms, like McKinsey, BCG, Bain, Deloitte, Accenture.

Download Immediately and Use.

Our PowerPoint presentations, Excel workbooks, and Word documents are completely customizable, including rebrandable.

Save Time, Effort, and Money.

Save yourself and your employees countless hours. Use that time to work on more value-added and fulfilling activities.




Read Customer Testimonials

  •  
    "As an Independent Management Consultant, I find Flevy to add great value as a source of best practices, templates and information on new trends. Flevy has matured and the quality and quantity of the library is excellent. Lastly the price charged is reasonable, creating a win-win value for "

    – Jim Schoen, Principal at FRC Group
  •  
    "FlevyPro provides business frameworks from many of the global giants in management consulting that allow you to provide best in class solutions for your clients."

    – David Harris, Managing Director at Futures Strategy
  •  
    "I have used Flevy services for a number of years and have never, ever been disappointed. As a matter of fact, David and his team continue, time after time, to impress me with their willingness to assist and in the real sense of the word. I have concluded in fact "

    – Roberto Pelliccia, Senior Executive in International Hospitality
  •  
    "Flevy is now a part of my business routine. I visit Flevy at least 3 times each month.

    Flevy has become my preferred learning source, because what it provides is practical, current, and useful in this era where the business world is being rewritten.

    In today's environment where there are so "

    – Omar HernĂ¡n Montes Parra, CEO at Quantum SFE
  •  
    "As a young consulting firm, requests for input from clients vary and it's sometimes impossible to provide expert solutions across a broad spectrum of requirements. That was before I discovered Flevy.com.

    Through subscription to this invaluable site of a plethora of topics that are key and crucial to consulting, I "

    – Nishi Singh, Strategist and MD at NSP Consultants
  •  
    "I have found Flevy to be an amazing resource and library of useful presentations for lean sigma, change management and so many other topics. This has reduced the time I need to spend on preparing for my performance consultation. The library is easily accessible and updates are regularly provided. A wealth of great information."

    – Cynthia Howard RN, PhD, Executive Coach at Ei Leadership
  •  
    "Flevy.com has proven to be an invaluable resource library to our Independent Management Consultancy, supporting and enabling us to better serve our enterprise clients.

    The value derived from our [FlevyPro] subscription in terms of the business it has helped to gain far exceeds the investment made, making a subscription a no-brainer for any growing consultancy – or in-house strategy team."

    – Dean Carlton, Chief Transformation Officer, Global Village Transformations Pty Ltd.
  •  
    "[Flevy] produces some great work that has been/continues to be of immense help not only to myself, but as I seek to provide professional services to my clients, it give me a large "tool box" of resources that are critical to provide them with the quality of service and outcomes they are expecting."

    – Royston Knowles, Executive with 50+ Years of Board Level Experience



Download our FREE Strategy & Transformation Framework Templates

Download our free compilation of 50+ Strategy & Transformation slides and templates. Frameworks include McKinsey 7-S Strategy Model, Balanced Scorecard, Disruptive Innovation, BCG Experience Curve, and many more.