ISO/IEC 38500 IT Governance Manager study guide
ISO/IEC 38500 IT Governance Manager · Work through your exam, one topic at a time.
The ISO/IEC 38500 IT Governance Manager certification is a professional credential aimed at the people who direct and control IT on behalf of an organisation rather than those who run it day to day. It suits board members, non-executive directors, CIOs and IT leaders, programme and assurance managers, and consultants who advise governing bodies on how technology is evaluated, directed and monitored. Because the certification's product page on the APMG International site returned a 404 error when checked on 7 November 2026, the exam's length, duration, pass mark, fee, question format, retake arrangements and certificate validity could not be confirmed from the source. Those details are therefore not stated here, and candidates should confirm them on the live certification page or the official syllabus before booking. The ISO/IEC 38500 IT Governance Manager study guide has 4 sections and about 1,274 words.
01Governance and IT Governance Concepts
This domain tests whether you can separate governance from management and explain why IT governance is a corporate, not a technical, concern. ISO/IEC 38500 describes governance of IT as the system by which the current and future use of IT is directed and controlled.
337 words, about 2 min02The ISO/IEC 38500 Model for the Corporate Governance of IT (Evaluate, Direct, Monitor)
This domain tests the ISO/IEC 38500 model itself: the Evaluate–Direct–Monitor cycle and the six principles. You need to recognize what each principle requires and how the model is used iteratively, not as a one-off project stage.
325 words, about 2 min03Principles and Application of the Standard in an Organization
This domain tests application: how the six principles are translated into policies, decision rights, and evidence in a specific organization. The standard expects proportionality to size, complexity, risk, and sector, not a copied template.
296 words, about 1 min04Implementing and Sustaining IT Governance (Roles, Responsibilities, Assurance)
This domain tests implementation and sustainment: who does what, how assurance works, and how governance survives after the initial project. ISO/IEC 38500 expects the governing body to set the framework and receive assurance, while management operates the system.
316 words, about 2 min