ISO 22340:2024 PDF

Name: ISO 22340:2024 — Security and resilience — Protective security — Guidelines for an enterprise protective security architecture and framework
SKU: ISO 22340:2024
Price: 25 EUR
Availability: InStock

Security and resilience — Protective security — Guidelines for an enterprise protective security architecture and framework

Название (английский):

ISO 22340:2024

Security and resilience — Protective security — Guidelines for an enterprise protective security architecture and framework

Статус документа:: Действующий
Формат:: Электронный (PDF)
Количество страниц:: 31
Дата публикации:: 1 ноября 2024 г.
Издание:: ISO IS 22340 edition 1 version 1
ICS:: 03.100.01

Тип поставки:

Full version465 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:6 раб. дн. (перевод)

Цена:465 €

Описание (английский):

This document provides guidance on the enterprise protective security architecture and the framework of protective security policies, processes and types of controls necessary to mitigate and manage security risks across the protective security domains, including: a) security governance; b) personnel security; c) information security; d) cybersecurity; e) physical security. This document is applicable for any organization.

Abstract

Похожие стандарты

Упомянутые в описании и другие стандарты ISO

Overview

ISO 22340:2024 - Security and resilience - Protective security - Guidelines for an enterprise protective security architecture and framework - provides high‑level guidance for designing an enterprise protective security architecture and an integrated protective security framework. The standard explains how organizations can align security governance, policies, processes and controls with business objectives using a risk‑based approach. It is applicable to any organization and focuses on coordination across five core protective security domains: security governance, personnel security, information security, cybersecurity, and physical security.

Key Topics

Enterprise protective security architecture: structure and elements for documenting governance arrangements and the security framework that delivers protective security outcomes.

Protective security domains: clear coverage of governance, personnel, information, cyber and physical security and how they integrate.

Risk‑based principles: emphasis on understanding business impact, applying risk management and selecting controls proportionate to risk.

Security governance: roles and responsibilities including the responsible security executive, security management structures and implementation oversight.

Personnel security: eligibility, suitability checks, ongoing assessment, separation processes and HR–security cooperation.

Information security: classification of information, business impact analysis and access control to organizational information.

Cybersecurity: defining systems, selecting and evaluating cyber controls, system authorization and ongoing monitoring; considerations for rapid digital change.

Physical security: protecting organizational assets and facilities through policy, procedures and controls.

Security maturity & continuous improvement: guidance on developing organizational security capability and measuring progress.

Scope & limitations: provides strategic guidance rather than detailed technical or operational procedures.

Applications

ISO 22340:2024 is intended for managers, security leaders, risk officers and consultants who need to:

Build or revise an enterprise protective security framework that integrates multiple security disciplines.

Align security controls with business objectives and risk appetite.

Define governance structures and clear security roles and responsibilities.

Guide procurement of security services and design of cross‑domain security programs.

Improve organizational security maturity and foster a security‑aware culture.

Practical uses include strategic security planning, policy harmonization, vendor requirements for integrated security services, and as a reference when developing organization‑wide protective security roadmaps.

ISO 22340:2024 PDF

Abstract

Похожие стандарты

Overview

Key Topics

Applications

Related standards

Технические детали

SIST EN ISO 22300:2026

Security and resilience - Vocabulary (ISO 22300:2025)

ISO 8689-1:2000

Water quality — Biological classification of rivers — Part 1: Guidance on the interpretation of biological qu…

ISO/ASTM51540-04(2012)

Standard Practice for Use of a Radiochromic Liquid Dosimetry System (Withdrawn 2020)

ISO/ASTM51204-04

Standard Practice for Dosimetry in Gamma Irradiation Facilities for Food Processing (Withdrawn 2013)

ISO/ASTM51431-05

Standard Practice for Dosimetry in Electron Beam and X-Ray (Bremsstrahlung) Irradiation Facilities for Food P…

ISO/ASTM52628-20e1

Standard Practice for Dosimetry in Radiation Processing

ISO/ASTM52921-13(2019)

Standard Terminology for Additive Manufacturing—Coordinate Systems and Test Methodologies

ISO/ASTMTR52917-EB

Additive Manufacturing — Round Robin Testing — General Guidelines