Digital Lexicon Hub

An international standard providing guidance to governing bodies on the implications of an organization's use of artificial intelligence.

It helps leadership distinguish governance responsibilities from operational management and ask informed questions about AI investment, risk, oversight, and value.

A board uses ISO/IEC 38507 to define decision rights for high-impact AI, require management reporting, review acquisition criteria, and monitor whether AI outcomes remain aligned with policy.

The standard provides governance guidance, not detailed engineering controls or certification requirements. Effective application depends on reliable information from management and clear organizational accountability.

The standard extends governance-of-IT principles to AI. It addresses accountability, strategy, acquisition, performance, conformance, and human behavior, helping boards and governing bodies evaluate whether AI use aligns with organizational purpose, obligations, and stakeholder expectations.