PECB ISO/IEC 38500 Foundation Exam Practice & IT Governance Study Guide study plan

Define governance of IT using ISO/IEC 38500 vocabulary (govern, evaluate, direct, monitor) in your own words

Distinguish governance from management across at least six criteria (accountability, decision rights, time horizon, focus, outputs, escalation)

Explain how governance of IT connects to corporate governance and why directors, not IT managers, own it

Recite the six principles (Responsibility, Strategy, Acquisition, Performance, Conformance, Human Behaviour) from memory and state the intent of each

Map the roles involved in governing IT: board, executive management, IT management, assurance providers, and stakeholders

Interpret what each of the six principles requires in practice, giving two concrete evidence items an assessor would look for per principle

Analyse the consequences of failing each principle in a realistic organisational scenario

Apply the principles to evaluate a given decision (e.g., approving a major IT investment) and justify the verdict

Explain the principle of Human Behaviour and why it is treated as a governance concern rather than a HR topic

Differentiate the principle of Conformance from Performance and from Acquisition with contrasting examples

Describe the three governance tasks of the ISO/IEC 38500 model - Evaluate, Direct, Monitor - and state the inputs, activities, and outputs of each

Explain how the six principles drive the content of each governance task

Classify a list of 15 board-level decisions into the correct governance task

Outline the framework for good governance of IT as described in the standard, including the business pressures and the IT governance cycle

Explain the relationship between principles, model, and framework in ISO/IEC 38500 without conflating them

Describe how the governing body sets direction and delegates implementation while retaining accountability

Describe typical monitoring mechanisms (performance reports, conformance reviews, independent assurance) and the purpose of each

Illustrate the governance cycle as a repeating loop, showing how monitoring feeds back into evaluation

Distinguish accountability from responsibility and give an example of each in an IT sourcing decision

Describe how escalation, delegation, and reporting lines operate within the governance model

Explain how ISO/IEC 38500 relates to (and differs from) other frameworks such as COBIT, ITIL, and ISO/IEC 27001 without treating them as substitutes

Outline a governance review cycle: what is evaluated, how often, and by whom

Identify who performs assurance activities and how their independence is protected

Apply the full Evaluate–Direct–Monitor model to a case such as a cloud migration, documenting evaluation criteria, directives issued, and monitoring metrics

Diagnose at least five governance weaknesses in a supplied case description and link each to a principle and a governance task

Formulate recommendations that reference the standard's principles rather than generic best practice

Explain how the principles and the model would be used to handle a failing IT programme

Re-derive the six principles and the three governance tasks from memory after a two-minute blank-page exercise

Review every missed question from previous mocks and write the corrected rationale in your own words

Practise timed scenario questions under exam pacing (roughly 60 seconds per item) to build speed

Re-teach the weakest sub-topic aloud or in writing as if explaining it to a colleague

Complete two full-length timed mocks under exam conditions without notes

Recite definitions of governance of IT, the six principles, and the three governance tasks verbatim from memory

Consolidate all notes into a single one-page master sheet suitable for last-minute review

Verify that every missed item from weeks 1–7 now has a written, correct explanation