National foreword

This British Standard is the UK implementation of ISO 22320:2018.

The UK participation in its preparation was entrusted to Technical Committee SSM/1, Societal security management.

A list of organizations represented on this committee can be obtained on request to its secretary.

This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application.

Compliance with a British Standard cannot confer immunity from legal obligations.

This British Standard was published under the authority of the Standards Policy and Strategy Committee on 30 November 2018.

Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see http://www.iso.org/directives).

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received (see http://www.iso.org/patents).

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO’s adherence to the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT) see http://www.iso.org/iso/foreword.html.

This document was prepared by Technical Committee ISO/TC 292, Security and resilience.

This second edition cancels and replaces the first edition (ISO 22320:2011), which has been technically revised.

Any feedback or questions on this document should be directed to the user’s national standards body. A complete listing of these bodies can be found at http://www.iso.org/members.html.

Introduction

In recent years, there have been many disasters, both natural and human-induced, and other major incidents which have shown the importance of incident management in order to save lives, reduce harm and damage, and to ensure an appropriate level of continuity of essential societal functions.

Such functions include health, telecommunication, water and food supply, and access to electricity and fuel. While in the past the focus of incident management has been national, regional or within single organizations, today and for the future there is a need for a multinational and multi-organizational approach. This need is driven by relationships and interdependencies between governments, non-governmental organizations (NGO), civil society organizations (CSO) and the private sector internationally.

Factors such as increased urbanization, critical infrastructure dependencies and interdependencies, socio-economic dynamics, environmental change, animal and human diseases and the heightened movement of people and goods around the world have increased the potential for disruptions and disasters that transcend geographic and political boundaries and impact the incident management capability.

This document provides guidance for organizations to improve their handling of all types of incidents (for example, emergencies, crisis, disruptions and disasters). The multiple incident management activities are often shared between organizations and agencies, with the private sector, regional organizations, and governments, have different levels of jurisdiction. Thus, there is a need to guide all involved parties in how to prepare and implement incident management.

Cross-organization-region or -border assistance during incident management is expected to be appropriate to the needs of the affected population and to be culturally sensitive. Therefore, multi-stakeholder participation, which focuses on community involvement in the development and implementation of incident management, is desirable where appropriate. Involved organizations require the ability to share a common approach across geographical, political and organizational boundaries.

This document is applicable to any organization responsible for preparing for or responding to incidents at the local, regional, national and, possibly, international level, including those who

are responsible for, and participating in, incident preparation,
offer guidance and direction in incident management,
are responsible for communication and interaction with the public, and
do research in the field of incident management.

Organizations benefit from using a common approach for incident management as this enables collaborative work and ensures more coherent and complementary actions among organizations.

Most incidents are local in nature and are managed at the local, municipal, regional, state or provincial level.

1 Scope

This document gives guidelines for incident management, including

principles that communicate the value and explain the purpose of incident management,
basic components of incident management including process and structure, which focus on roles and responsibilities, tasks and management of resources, and
working together through joint direction and cooperation.

This document is applicable to any organization involved in responding to incidents of any type and scale.

This document is applicable to any organization with one organizational structure as well as for two or more organizations that choose to work together while continuing to use their own organizational structure or to use a combined organizational structure.

2 Normative references

3 Terms and definitions

4 Principles

4.1 General

4.2 Ethics

4.3 Unity of command

4.4 Working together

4.5 All-hazards approach

4.6 Risk management

4.7 Preparedness

4.8 Information sharing

4.9 Safety

4.10 Flexibility

4.11 Human and cultural factors

4.12 Continual improvement

5 Incident management

5.1 General

5.2 Incident management process

5.3 Incident management structure

6 Working together

6.1 General

6.2 Prerequisites for achieving coordination and cooperation

6.3 Developing and implementing methods for working together

Bibliography

BS ISO 22320:2018

Security and resilience. Emergency management. Guidelines for incident management

Current

Published:

30 Nov 2018