ISO/DIS 37014 · stage 40.60 Close of voting Ballot closed 10 June 2026 Planning date 15 Sep 2027, our estimate Official record
37014ISO 37014 Revision CheckerGroup governance maturity, before publication

All 35 requirements · Governance maturity model

Model requirement 6.2.2

Governance principles

What ISO 37004:2023 asks at 6.2.2, in our own words, and how it reads inside a controlled group. The draft's public contents heading for it is 6.2 Governance maturity dimensions.

01The requirement

What the model asks

The other dimensions to be evaluated are the eleven governance principles of ISO 37000, which are meant to be applied together and at the same time, each with its own key aspects of practice. In alphabetical order they are: accountability; data and decisions; leadership; oversight; purpose; risk governance; social responsibility; stakeholder engagement; strategy; value generation; and viability and performance over time.

02In a controlled group

What it means when one board controls another

The eleven principles are meant to be applied together, which in a group means the controller cannot pick the ones it finds comfortable and leave the entity to carry the rest. Record which principles each board applied and where the split falls, because selective application is a named gap in the model.

03What to record

Evidence an evaluator asks for

A maturity rating is a claim about how the group governs. The evidence is what proves it operated. Keep both, and keep them together.

  • Governance principles: Evaluation covering each of the eleven principles against the three aspects
04Gaps

Where evaluations commonly find gaps

  • Principles evaluated selectively, omitting those the body finds uncomfortable
05How it is rated

How this requirement enters the rating

This unit defines the dimensions. List every condition and every principle before rating, and rate each at the level where it operates. The full dimension list is on /dimensions/.

It carries 1 evidence item and 1 common gap in the model. One item is enough only if it is the artefact that proves the practice operated, not a policy that says it should. The group application on this page is ours; the requirement and evidence are the model's, stated in our own words.

06Read next
07Source

Source for this page

Retrieved 2026-10-21. The requirement above is our statement of the clause in our own words; the official text is linked so you can check it.

Note on the draft: The requirement, evidence and gaps on this page are read from ISO 37004:2023, which the draft states it builds on. The draft's own clause body is not public, so this page does not state it. The clause reference at the top is the draft's public contents heading that this requirement sits under.

The maturity kit, USD 299 one off. The 35-requirement register, the 54-cell maturity worksheet, the evidence list and a dated plan, as PDF, CSV and XLSX.

See the kit Open the free specimen