The ISO/IEC 38500:2008 Corporate governance of information technology standard provides a framework for effective governance of IT to assist those at the highest level of organizations to understand and fulfill their legal  regulatory  and ethical obligations in respect of their organizations use of IT