ASIS Standard Approved by ISO

The latest member of the ISO 28000 series, the ISO 28002 standard for resilience in the supply chain, has been approved for publication by the International Organization for Standardization (ISO). Based on the ANSI/ASIS Organizational Resilience Standard (ANSI/ASIS.SPC.1), the ISO 28002 provides a basis for an organization to evaluate both its organizational and supply chain risks and to develop a comprehensive strategy to manage the risks that may disrupt its operations. The ISO 28000 series of standards seamlessly integrate with the ISO 31000 risk management standard, thereby allowing organizations to develop a cost effective holistic approach to managing risk. With ratification of the ISO 28002, the ASIS/ANSI.SPC.1 Standard becomes the only U.S. Department of Homeland Security Private Sector Preparedness (PS-Prep) standard with a ratified ISO counterpart.

“Nearly all organizations today are in some sort of supply chain,” says Dr. Marc Siegel, commissioner, ASIS International Global Standards Initiative. “By implementing the ISO 28002 with the ANSI/ASIS.SPC.1 Standard, organizations can demonstrate conformance with all the requirements of the PS-Prep Program, C-TPAT Program, the security requirements of the ISO 28000, as well as the requirements of the upcoming ISO business continuity and organizational resilience standards, not to mention the key reason for implementing a standard in the first place: assuring uninterrupted delivery of products and services.”

ASIS congratulates ISO/TC 8, the ISO technical committee that developed the ISO 28000 series, for developing a single approach for organizations to manage the risks of disruptive events. Like the ANSI/ASIS.SPC.1, the ISO 28002 eliminates the old paradigm of siloing disciplines into separate security, crisis, and continuity programs. By converging disciplines in one approach, organizations can better manage risks before, during, and after a disruptive event, ASIS says.

To help organizations implement the ANSI/ASIS.SPC.1 and ISO 28002 standards, ASIS is working on an organizational resilience maturity model for phased implementation ANSI standard. In addition, ASIS is in the final stages of certification for an accredited RABQSA-RES lead auditor course that will follow the internationally accepted standards for management system auditing and covers all the PS-Prep management system standards, as well as the ISO 28000 series and the upcoming ISO business continuity and organizational resilience standards.

In today's rapidly evolving security landscape, organizations face an ever-growing array of disruptive events, security threats and risks. Traditional reactive approaches to security intelligence often leave businesses vulnerable and ill-prepared to anticipate and mitigate emerging threats that could impact the safety of their people, facilities or operations.

ON DEMAND: Apple Mac computer use is growing in the corporate space. Having the solutions and the knowledge base to respond to events that include Mac computers is just as important as their Windows counterparts.