Overview

IT governance is the framework by which organizations direct and control IT, ensure IT delivers value, and manage IT-related risks. For software engineers, this means understanding the decisions, accountability structures, and frameworks that shape how technology is funded, prioritized, and measured in every company you will ever work at.

What Is IT Governance?

IT governance answers three questions every organization must address:

1. Who decides? — Decision rights for IT investments, architecture, and risk
2. What is delivered? — Value realization from IT investments
3. What is the risk? — Managing risk and ensuring compliance

The primary international frameworks are COBIT 2019 (ISACA), ISO/IEC 38500:2024, and ITIL 4 / ITIL V5 (PeopleCert). These frameworks are used by audit committees, boards, CIOs, and IT governance professionals in organizations of every size.

Why Software Engineers Need This

As you advance in your career, you will encounter IT governance in:

• Architecture reviews — why your tech decisions need a governance gate
• Change management — why deployments require CAB approval
• Audit requests — why auditors want evidence of your controls
• Compliance questionnaires — why your team is filling out ISO 27001 or SOC 2 forms
• Investment decisions — why IT projects need business cases and benefit realization plans

Understanding IT governance makes you a more effective contributor in these conversations and a stronger candidate for tech lead and senior engineering roles.

Learning Paths

Track	Who It Is For
IT-GRC by Example	Engineers, tech leads, and aspiring GRC professionals who want to understand IT governance, risk, and compliance through annotated real-world scenarios