Introduction

General

This International Standard specifies requirements for a security printing management system for security printers.

Current security printing management practices lack sufficient guarantees that effective security controls are maintained to protect the interest of the customer as well as the general public. Using this International Standard the organization establishes, documents, implements and maintains a security printing management system. This security printing management system is regularly reviewed to continually improve its effectiveness. It is recognized that customer requirements sometimes exceed the requirements of this International Standard so the security printing management system also addresses customer requirements that are beyond the scope of this International Standard.

The adoption of a security printing management system is a strategic decision of an organization. The design and implementation of an organization’s security printing management system is influenced by varying needs, particular objectives, products provided, processes employed, security environment, cultural issues, legal limitations, risk assessment and by size and structure of the organization.

To achieve the objectives of this security printing management system standard measures are taken to mitigate all of the security threats determined by an organizational risk assessment. Such controls focus upon reducing, eliminating and preventing acts that compromise the security printing management system of the organization.

It is not the intent of this International Standard to obtain uniformity in the structure of the security printing management system or uniformity of documented information. The security printing management system complies with laws and regulations in force. The requirements specified in this International Standard are supplementary to requirements for products and processes of an organization and allow for additional specific requirements from the customer.

This International Standard is intended to apply to security printers. It contains requirements that when implemented by a security printer may be objectively audited for certification/registration purposes.

Process approach

This International Standard promotes the adoption of a process approach when developing, implementing and improving the effectiveness of a security printing management system.

The application of a system of processes within an organization, together with the identification and interaction of these processes, and their management, is referred to as a “process approach”. An advantage of a “process approach” is the ongoing control that it provides over the interaction between individual processes within the system of processes, as well as over their combination.

Basic principles

When implemented, the security printing management system:

a) achieves the security of products, processes, means of production, premises, information, raw material supplies;
b) is used to continue to meet demonstrably the requirements, and naturally, the needs of customers;
c) affords management the confidence that the targeted degree of security is actually achieved and remains effective;
d) affords the customers the confidence that the agreed nature and degree of security is or will be attained.

This International Standard prescribes which elements a security printing management system contains and not how a specific organization implements these elements.

BS ISO 14298:2013

Graphic technology. Management of security printing processes

Published:

30 Apr 2013

Withdrawn:

12 Aug 2021