ASIS Standard Approved by ISO

August 4, 2011

The latest member of the ISO 28000 series, the ISO 28002 standard for resilience in the supply chain, has been approved for publication by the International Organization for Standardization (ISO). Based on the ANSI/ASIS Organizational Resilience Standard (ANSI/ASIS.SPC.1), the ISO 28002 provides a basis for an organization to evaluate both its organizational and supply chain risks and to develop a comprehensive strategy to manage the risks that may disrupt its operations. The ISO 28000 series of standards seamlessly integrate with the ISO 31000 risk management standard, thereby allowing organizations to develop a cost effective holistic approach to managing risk. With ratification of the ISO 28002, the ASIS/ANSI.SPC.1 Standard becomes the only U.S. Department of Homeland Security Private Sector Preparedness (PS-Prep) standard with a ratified ISO counterpart.

“Nearly all organizations today are in some sort of supply chain,” says Dr. Marc Siegel, commissioner, ASIS International Global Standards Initiative. “By implementing the ISO 28002 with the ANSI/ASIS.SPC.1 Standard, organizations can demonstrate conformance with all the requirements of the PS-Prep Program, C-TPAT Program, the security requirements of the ISO 28000, as well as the requirements of the upcoming ISO business continuity and organizational resilience standards, not to mention the key reason for implementing a standard in the first place: assuring uninterrupted delivery of products and services.”

ASIS congratulates ISO/TC 8, the ISO technical committee that developed the ISO 28000 series, for developing a single approach for organizations to manage the risks of disruptive events. Like the ANSI/ASIS.SPC.1, the ISO 28002 eliminates the old paradigm of siloing disciplines into separate security, crisis, and continuity programs. By converging disciplines in one approach, organizations can better manage risks before, during, and after a disruptive event, ASIS says.

To help organizations implement the ANSI/ASIS.SPC.1 and ISO 28002 standards, ASIS is working on an organizational resilience maturity model for phased implementation ANSI standard. In addition, ASIS is in the final stages of certification for an accredited RABQSA-RES lead auditor course that will follow the internationally accepted standards for management system auditing and covers all the PS-Prep management system standards, as well as the ISO 28000 series and the upcoming ISO business continuity and organizational resilience standards.

You must login or register in order to post a comment.

ON DEMAND: DevSecOps creates an environment of shared responsibility for security, where AppSec and development teams become more collaborative. With the right training and tools, developers can become more hands-on with security and, with that upskilling, stand out among their peers... however, they need the security specialists on-side, factoring them into securing code from the start and championing this mindset across the company.

The security ecosystem protects digital assets, physical assets, and people - the newly distributed workforce creates new and increased physical and cybersecurity risks. Situational and security awareness is a role every employee must play, and you’ll help get them there with awareness, cybersecurity hygiene and security practices that help keep company, employee and customer information safe.

Security Magazine

2020 August

This month in Security magazine, we examine how physical security leaders are being propelled into a unique position of revenue preservers and risk managers for their businesses. In addition, we profile Scott Ashworth, Director of Security for Atlanta United. Also, security leaders discuss how to develop cybersecurity careers, election security, data protection strategies, measuring and reporting security operations maturity and more!

View More Create Account

ASIS Standard Approved by ISO

Related Articles

Report Abusive Comment