ASIS Standard Approved by ISO

August 4, 2011

The latest member of the ISO 28000 series, the ISO 28002 standard for resilience in the supply chain, has been approved for publication by the International Organization for Standardization (ISO). Based on the ANSI/ASIS Organizational Resilience Standard (ANSI/ASIS.SPC.1), the ISO 28002 provides a basis for an organization to evaluate both its organizational and supply chain risks and to develop a comprehensive strategy to manage the risks that may disrupt its operations. The ISO 28000 series of standards seamlessly integrate with the ISO 31000 risk management standard, thereby allowing organizations to develop a cost effective holistic approach to managing risk. With ratification of the ISO 28002, the ASIS/ANSI.SPC.1 Standard becomes the only U.S. Department of Homeland Security Private Sector Preparedness (PS-Prep) standard with a ratified ISO counterpart.

“Nearly all organizations today are in some sort of supply chain,” says Dr. Marc Siegel, commissioner, ASIS International Global Standards Initiative. “By implementing the ISO 28002 with the ANSI/ASIS.SPC.1 Standard, organizations can demonstrate conformance with all the requirements of the PS-Prep Program, C-TPAT Program, the security requirements of the ISO 28000, as well as the requirements of the upcoming ISO business continuity and organizational resilience standards, not to mention the key reason for implementing a standard in the first place: assuring uninterrupted delivery of products and services.”

ASIS congratulates ISO/TC 8, the ISO technical committee that developed the ISO 28000 series, for developing a single approach for organizations to manage the risks of disruptive events. Like the ANSI/ASIS.SPC.1, the ISO 28002 eliminates the old paradigm of siloing disciplines into separate security, crisis, and continuity programs. By converging disciplines in one approach, organizations can better manage risks before, during, and after a disruptive event, ASIS says.

To help organizations implement the ANSI/ASIS.SPC.1 and ISO 28002 standards, ASIS is working on an organizational resilience maturity model for phased implementation ANSI standard. In addition, ASIS is in the final stages of certification for an accredited RABQSA-RES lead auditor course that will follow the internationally accepted standards for management system auditing and covers all the PS-Prep management system standards, as well as the ISO 28000 series and the upcoming ISO business continuity and organizational resilience standards.

You must login or register in order to post a comment.

ON DEMAND: DevSecOps creates an environment of shared responsibility for security, where AppSec and development teams become more collaborative. With the right training and tools, developers can become more hands-on with security and, with that upskilling, stand out among their peers... however, they need the security specialists on-side, factoring them into securing code from the start and championing this mindset across the company.

ON DEMAND: The insider threat—consisting of scores of different types of crimes and incidents—is a scourge even during the best of times. But the chaos, instability and desperation that characterize crises also catalyze both intentional and unwitting insider attacks. Learn how your workers, contractors, volunteers and partners are exploiting the dislocation caused by today's climate of Coronavirus, unemployment, disinformation and social unrest.

Security Magazine

2020 October

This month in Security magazine, we explore how Corning's global security group ensured business continuity and employee safety during the global COVID-19 pandemic. Also, we highlight the global security team at Uber and their recent security programs and initiatives. Industry experts discuss travel safety programs, career hackers, working for terrible bosses, group attribution error and more.

View More Create Account

ASIS Standard Approved by ISO

Related Articles

Report Abusive Comment