Course Description
Corporate Governance of IT as specified in ISO/IEC 38500 of best practices used to appropriately govern a Corporate Governance of IT system across all the principles of ISO/IEC 38500. ISO/IEC 38500 applies to the governance of management processes (and decisions) relating to the information and communication services used by an organization. These processes could be controlled by IT specialists within the organization or external service providers, or by business units within the organization. This training is consistent with COBIT 5 and CGEIT (Certified in the Governance of Enterprise IT).
In the ISO/IEC 38500 model, the governing body is a generic entity (the individual or group of individuals) responsible and accountable for performance and conformance (through control) of the organization. While ISO/IEC 38500 makes clear the role of the governing body, it also allows that such delegation could result in a subsidiary entity giving more focused attention to the tasks in governance
Detailed Learning Outcomes
By earning the Project Management Certification (PMC), candidates demonstrate the ability to:
Module Information - 1
- ISO/IEC 38500 and Governance Model
- IT Governance Frameworks and Standards
- The Calder-Moir Framework
- Implementing IT Governance
- Decision Making
- Different Committee's
- IT Audit
- IT Management System of Tomorrow
- The Calder-Moir Implementation
Module 2 - ISMS Business Context
- Organisational Context
- Needs and Expectations
- ISMS Scope
- Interested Parties
- Requirements Relevant to the ISMS
- Gathering Requirements Relevant to the ISMS
Module 3 - ISMS Scope
- ISMS Scope
- What to Consider and What to Include
- Object of ISMS Scope
- Defining the ISMS Scope
- Scope Example
- External and Internal Connections
Module 4 - ISMS Risks
- The Importance of Risk and Opportunity
- Risk Management Process
- Ongoing Reassessment of Risk
Module 5 - ISMS Leadership and Support
- Management Policy
- Leadership
- Roles and Responsibilities
- Resources
- Awareness
Module 6 - Controls to Modify the Risks
- Determining the Controls
- System of Controls
- Policies and Procedures
- Sector-Specific Controls
Module 7 - ISMS Operations
- Operational ISMS Procedures
- Ongoing Risks Management
- Operational Threats
- Operational Processes
- Incident Management
- ISMS Availability and Business Continuity
Module 8 - Performance Evaluation
- Performance, Change and Improvement
- Monitoring and Operational Reviews
- ISMS Measurements Programme
- Ongoing Risk Management
- ISMS Audits
- Management Reviews of the ISMS
- Awareness and Communications
Module 9 - Improvements to the ISMS
- Continual Improvement
- Conformance and Nonconformance
- Making Improvements
Module 10 - Auditing
- Audit Process
- Nonconformities
- Audit Report
- Surveillance Audits
- Recertification
- Audit Trails
- Competence
Certification Validity & Renewal
The Project Management Certification (PMC) issued by GIPMC is valid for three (3) years from the date of certification award.
Renewal is designed to:
- Maintain professional credibility
- Ensure continued alignment with modern project practices
- Protect the long-term value of the certification
Renewal Process Includes:
- Completion of defined continuing professional development or knowledge refresh requirements
- Successful renewal assessment or verification, as applicable
- Submission of renewal application before certification expiry
Timely renewal allows professionals to retain active certification status without interruption.