| Framework | Best for | Level | ISO 38505 fit | |-----------|----------|-------|----------------| | | Data management practitioners | Operational | Complementary (DAMA details what 38505 directs) | | COBIT 2019 | IT audit & control | Tactical | Overlap; COBIT is more prescriptive | | ISO 38500 | General IT governance | Strategic | 38505 is a specialization | | DCAM (EDM Council) | Financial data governance | Implementation | More detailed than 38505 | | NIST Privacy Framework | Privacy & ethics | Risk-based | Different focus (privacy vs. governance) |
The standard applies to: