National foreword

This British Standard is the UK implementation of ISO 22398:2013.

The UK participation in its preparation was entrusted to Technical Committee SSM/1, Societal security management.

A list of organizations represented on this committee can be obtained on request to its secretary.

This publication does not purport to include all the necessary provisions of a contract. Users are responsible for its correct application.

Compliance with a British Standard cannot confer immunity from legal obligations.

This British Standard was published under the authority of the Standards Policy and Strategy Committee on 31 October 2013.

Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the different types of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2. www.iso.org/directives

Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of any patent rights identified during the development of the document will be in the Introduction and/or on the ISO list of patent declarations received. www.iso.org/patents

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation on the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the WTO principles in the Technical Barriers to Trade (TBT) see the following URL: Foreword - Supplementary information

The committee responsible for this document is ISO/TC 223, Societal security.

Introduction

This International Standard describes the elements of a generic approach to planning, conducting and improving exercise programmes and projects. The purpose of this International Standard is to:

provide a basis for understanding, developing and implementing an effective exercise programme within an organization;
provide guidelines for planning and conducting an exercise project;
enhance the organization’s ability to conduct exercises with internal and external involved parties;
assist the organization with developing and assessing its exercising capability in a consistent and risk-assessed manner that reflects good practice; and,
enable continual improvement in exercise programmes and projects within an organization.

It is applicable to all organizations, regardless of type, size and nature, whether private or public. The guidance can be adapted to the needs, objectives, resources, and constraints of the organization.

Exercises are an important management tool intended to identify gaps and areas for improvement as well as to determine the effectiveness of response and recovery strategies. In addition to measuring the competence of the organization and its personnel, exercises are excellent tools to assess revised plans and changed programmes for completeness, relevancy and accuracy.

Exercises can be used for validating policies, plans, procedures, training, equipment, and inter-organizational agreements; testing information and communication technology (ICT) disaster recovery systems; clarifying and training personnel in roles and responsibilities; improving inter-organizational coordination and communications; identifying gaps in resources; improving individual performance; identifying opportunities for improvement; and, providing a controlled opportunity to practice improvisation.

Exercise projects usually have performance objectives such as:

orientation/demonstration: simulating experience of an expected situation to increase awareness of vulnerabilities and the importance of effective action in response to the simulated conditions;
learning: enhancing knowledge, skills, or abilities by individuals or groups with the goal of mastering specific competencies;
cooperation: providing an opportunity for people to work together to achieve a common end result;
experimenting: trying new methods and/or procedures with the intent of refinement; and,
testing: evaluating a method and/or procedure to assess which components are sufficiently developed.

See Figure 1.

1 Scope

This International Standard recommends good practice and guidelines for an organization to plan, conduct, and improve its exercise projects which may be organized within an exercise programme.

It is applicable to all organizations regardless of type, size or nature, whether private or public. The guidance can be adapted to the needs, objectives, resources, and constraints of the organization.

It is intended for use by anyone with responsibility for ensuring the competence of the organization’s personnel, particularly the leadership of the organization, and those responsible for managing exercise programmes and exercise projects.

2 Normative references

3 Terms and definitions

4 Planning, conducting and improving an exercise programme

4.1 General

4.2 Planning

4.3 Conducting

4.4 Reviewing and improving the exercise programme

5 Planning, conducting and improving exercise projects

5.1 General

5.2 Planning

5.3 Conducting

5.4 Improving

6 Continual improvement

6.1 General

6.2 Evaluation

6.3 Management review and corrective action

Bibliography

BS ISO 22398:2013

Societal security. Guidelines for exercises

Current

Published:

31 Oct 2013