The final board presentation was not about a “project.” It was about embedding the standard into the annual planning cycle. The board approved a new policy: every major data asset would have a named Owner, a defined purpose, and a quarterly review of conformance. No more orphaned spreadsheets. No more “I thought IT was handling that.”
The standard’s full name was , Governance of IT — Governance of data — Part 1: Application of ISO/IEC 38500 to the governance of data . The first thing she noticed was the word governance , not management . There was a difference, the document explained. Management is about the tools and tactics—cleaning the data, backing it up, securing the servers. Governance was about the direction —evaluating, directing, and monitoring how data is used to achieve organizational goals. iso 38505 pdf
She printed a large version of the Accountability Matrix and stuck it on the wall of the boardroom. Then she invited the heads of Sales, Operations, Finance, and Legal to a two-hour workshop. The final board presentation was not about a “project
Elara pulled up the PDF. She expected dense, impenetrable jargon. Instead, she found a guide. No more “I thought IT was handling that
Walking back to her desk, Elara glanced at the PDF on her screen. It wasn’t a technical manual. It was a constitution for the information age. It didn't tell her how to encrypt a drive or write a SQL query. It told her something far more important: who had the power and the responsibility to decide.
And in a world drowning in data, that was the only map that mattered.
“We’re not building a system,” she began. “We’re agreeing on who makes decisions.”