Until the formulation of the new Australian standard there was nothing anywhere to tackle the issue of governance, Toomey says.

He outlines six high-level principles:

' Establish clearly understood responsibilities for ICT

' Plan ICT to best support the organization

' Acquire ICT validly (have good reasons for making the investment and don't do it just because other organizations have)