WG 6 Corporate Governance of IT

Revision October 2018

Note: WG 6 “Corporate Governance of IT” has been disbanded at the 2012 JTC 1 Plenary when SC 7 WG 40 joined with WG 6 to form WG8.

Brief History of ISO/IEC JTC 1 WG6

The history of JTC 1 WG 6 Corporate Governance of IT actually starts in Australia where a national standards technical committee was formed in 2003 to produce, among other things, a standard on the governance of IT. In 2005 AS 8015:2005 Corporate Governance of Information & Communication Technology was published. The rationale behind this document was to provide guidance to the governing bodies of organizations to mitigate the enormous losses accruing due to failures in IT projects and to realise the true potential of IT. The intended audience of document was directors and senior management of organizations of all sizes, from the largest to the smallest.

As a result of considerable interest in this document Australia was invited by ISO/IEC JTC 1 SC 7 in 2006 (Plenary, Bangkok, 2006-5) to submit AS 8015 for processing under ISO/IEC JTC1 fast track procedures. At the same meeting SC7 started a Study Group on IT Governance to make recommendations regarding new and existing standards in the field. The Study Group was due to report by 2007-04-15. This report (ISO/IEC JTC1/SC7 /N3861) was delivered to SC7 2007-09-26.

In 2007-5 SC7 (Plenary, Moscow) set up an Ad Hoc Group to conduct a comment resolution meeting for the DIS resulting from the AS8015 fast track. This Ad Hoc was also charged with creating a working Group and assigning responsibility for the resulting FDIS and, if necessary, an NWIP for any major revisions. The IT Governance Study Group was re-established and a number of other Study Groups included Governance in their scope. As a result of the increasing activity in the field JTC 1 resolved, at its 2007 Plenary (Gold Coast, Australia) to set up a study Group (Resolution 18). This Study Group had some general and also some very specific requirements. As well as the broad requirements of understanding the current activities and future needs in the field it, had to, for example, define ICT governance, review current standards relevant to the field, and consider the work of the SC7 study group.

This Study Group was initially chaired by Dr Edward Lewis (AU) with the secretariat provided by Standards Australia. The Study Group had two successful meetings, the first in Sydney (19 th – 21 st Feb 2008, 16 attended) and the second in Berlin (17 th to 18 th May 2008, 25 attended). Dr Lewis resigned as Chair after the second meeting and John Graham (AU) was appointed as Chair in August. The report of the Study Group was completed for the 2008 Plenary of JTC1 (Nara, Japan) and presented to the JTC 1 meeting by John Graham. After vigorous discussion Resolution 41 establishing Working Group 6 was passed with the requirement to develop standards and related documents in the field including a gap analysis, frameworks and models for the corporate governance of IT and its relationship to management functions and systems, standardisation and harmonisation of terminology and the ongoing maintenance of 38500 with the development of associated guidelines. JTC1 appointed Standards Australia as the Secretariat and John Graham as the Convener.

Given that the meeting cycle of WG6 needed to fit in with the meeting cycles of both SC7 and JTC1 possible dates were somewhat limited. After the necessary administration was completed the first meeting of WG6 was scheduled for 18 th to 20 th May 2009 in London.

While all this was happening SC7 continued with its work in the field including a number of study groups and Working Group 1A (subsequently renamed working Group 40). This parallel work continued until the end of 2012 when WG 40 joined with WG 6 to form WG8.

Meetings WG 8:

1) Sydney, 5-8 th March 2013 JTC 1/WG 8 (Governance of IT) meeting after its establishment at the JTC 1 Plenary in November 2012. The Chair noted the participation of experts from both JTC 1/WG 6 and JTC 1/SC 7/WG 40 and the importance of this meeting to continue and develop standards for the Governance of IT.

2) Tokyo, Japan, 19 – 22 nd August 2013

3) Delf, Netherlands, 25 – 28 th March 2014

Meetings WG 6:

1) London, UK, 18-20 th May 2009, 26 members and 4 observers from 12 countries. Resulted in several teams being formed and 9 recommendations put to JTC1. Major issue was simply establishing valid starting points and navigating the complexities of having two groups working in the same field.

2) Singapore, 2 nd to 4 th December 2009

3) Helsinki, Finland, 3 5 th May 2010

4) Johannesburg, South Africa, 14 17 th September 2010

5) Jeju Island, Republic of Korea, 14 17 th March 2011

6) London, UK, 19 22 nd September 2011

7) Jeju Island, Republic of Korea, 21 st –25 th May 2012

8) Dublin, Ireland, 5 7 th September 2012