Application governance, made traceable
Application governance: portfolio, AI, and access controls, traceable to ISO/IEC 19770, COBIT 2019, ISO/IEC 27001, and ISO/IEC 42001.
The App Governance Kit is a free, MIT-licensed set of seven governance methods by Eve McGivern. It is not a platform, certification, or legal advice.
Six stages, request to retirement
Three areas, one set of tools
Application portfolio management
Application portfolio management keeps the inventory accurate, assigns ownership, and runs rationalization reviews so a portfolio doesn't quietly outgrow what anyone can govern.
AI governance
Application governance can touch on new AI systems, score their risk, and keep them inventoried and reviewed alongside the rest of the software estate, not tracked separately or missed.
Access controls
Access controls run periodic reviews, catch orphaned and excessive access, and hold privileged accounts to a shorter, tighter review cycle.
See how it maps to the frameworks
Every piece of work in this kit traces back to a clause in ISO/IEC 19770, COBIT 2019, ISO/IEC 27001, or ISO/IEC 42001. The crosswalk explorer shows that mapping row by row; the impact map shows the same coverage as a single grid across all four frameworks.
Ask the right question at every stage
An application moves through six stages from request to retirement, each with its own questions to ask. The lifecycle wheel walks through all six, tied to the crosswalk row each question satisfies and the kit tool that handles it.