Overview
ISO 28000:2022/Amd 1:2024 is the latest amendment to the ISO 28000:2022 standard, which defines the requirements for security management systems focused on organizational security and resilience. This important update integrates climate action considerations into security management systems, reflecting the growing global emphasis on environmental sustainability and climate-related risks. Developed by ISO Technical Committee ISO/TC 292 on Security and Resilience, this amendment ensures organizations address climate change as a relevant factor in their security management processes.
Key Topics
- Climate Change Integration: Organizations are now required to determine whether climate change is a relevant issue within their security management system.
- Interested Parties’ Requirements: The amendment recognizes that relevant stakeholders may have climate change-related requirements that organizations must consider.
- Security and Resilience Enhancement: Incorporating climate action into security management enhances an organization’s ability to anticipate, prepare for, respond to, and recover from climate-related security threats.
- Systematic Approach: The amendment promotes a systematic approach to assessing climate impacts within the framework of existing security management requirements.
- Alignment with Sustainability Goals: By addressing climate-related factors, organizations align their security management systems with broader sustainability and environmental objectives.
Applications
ISO 28000:2022/Amd 1:2024 is applicable to organizations seeking to strengthen their security management systems against emerging risks related to climate change. Practical applications include:
- Risk Assessment: Identifying and evaluating security risks linked to climate change impacts such as extreme weather events, supply chain disruptions, and infrastructure vulnerabilities.
- Stakeholder Engagement: Understanding and incorporating the needs of interested parties concerned with climate change into security policies and procedures.
- Business Continuity Planning: Enhancing resilience plans to incorporate climate-related scenarios ensuring uninterrupted operations during environmental disruptions.
- Compliance and Reporting: Supporting compliance with environmental and climate-related regulations and facilitating transparent reporting on climate risks within security management.
- Cross-sector Implementation: Relevant for diverse sectors including transportation, manufacturing, logistics, and critical infrastructure where security resilience is crucial.
Related Standards
ISO 28000:2022/Amd 1:2024 complements and aligns with several other international standards and frameworks focused on security, resilience, and environmental management:
- ISO 28000:2022 - Core standard on security management systems requirements.
- ISO 31000 - Risk management guidelines, useful for integrating climate risks.
- ISO 22301 - Business continuity management systems to support resilience initiatives.
- ISO 14001 - Environmental management systems, providing context for climate considerations.
- ISO 50001 - Energy management, contributing to sustainability strategies.
- ISO/IEC 27001 - Information security management systems, relevant for comprehensive organizational risk management.
Conclusion
ISO 28000:2022/Amd 1:2024 represents a critical evolution in security and resilience standards by embedding climate action into security management system requirements. Organizations implementing this amendment can better anticipate climate-related security challenges, meet stakeholder expectations, and contribute to sustainable development goals. This integration of climate considerations ensures a forward-looking approach to managing security risks in a rapidly changing global environment.
Keywords: ISO 28000 amendment, security management systems, climate action, resilience, climate change risk, organizational security, ISO TC 292, business continuity, environmental sustainability standards, interested parties climate requirements
Open preview (PDF)Security and resilience — Security management systems — Requirements — Amendment 1: Climate action changes