New ISO management system standards for records facilitate transparency in corporate governance

ISO.Ref.:1487.2011-11-16 In the wake of recent failures in corporate governance, two new ISO standards will help organizations to disclose corporate information quickly and effectively. Increased pressure by industry regulators obliges companies to provide such information because irregularities in financial management, ethical dealings, disclosure, and transparency of decisions have become common.

ISO 30300:2011, Information and documentation - Management systems for records - Fundamentals and vocabulary, and ISO 30301:2011, Information and documentation - Management systems for records - Requirements, distil the expertise of experts drawn from 27 countries on five continents.

These standards have been developed to be compatible with and complementary to other management system standards (MSSs) developed by ISO, such as ISO 9001 (quality management), ISO 14001 (environmental management), and ISO/IEC 27001 (information security management).

ISO 30300 is the umbrella standard which includes the fundamentals and vocabulary common to the whole series, while ISO 30301 specifies requirements for an MSR (management system for records). Further standards in the ISO 30300 series are under development.

Judith Ellis and Carlota Bustelo, leaders of the working groups that developed the standards, underline that, "The ISO 30300 series offers the methodology for a systematic approach to the creation and management of records, aligned with organizational objectives and strategies. Managing records using an MSS supports cost-effective operational processes, such as storage, information retrieval, information re-use, litigation and due diligence."

The cost of developing an MSR depends on the scope of implementation within each organization and is determined by business needs and an assessment of risk, and can provide both short- and long-term returns on investment, as well as cost avoidance.

Global factors drive organizations, both profit and non-profit, commercial and government, large and small, to reduce their costs and increase their responsiveness to the external environment by implementing an MSR. They include

• Intensified commercial competition
• Technological change leading to e-commerce and e-government
• Speed of communications and dissemination of information through the Internet
• Increasing complexity of the regulatory environment – local, national and international
• Increased expectations of citizens that organizations should operate in an accountable, transparent and socially responsible manner
• Heightened risk from the external environment including security threats and natural disasters.

Creation of records is integral to any organization’s activities, processes and systems. An MSR enables business efficiency, accountability, risk management and business continuity and empowers organizations to capitalize on the value of their information resources as business, commercial and knowledge assets. At the same time, an MSR contributes to the preservation of organizational memory, in response to the challenges of the global and digital environment.

Sectors towards which the new ISO standards are targeted include governments, education, and manufacturing industry (especially pharmaceuticals and mining). Companies involved in social responsibility programmes as well as sectors with a strong need to demonstrate compliance, such as nuclear energy and telecommunications, are particularly expected to benefit from effective implementation.

Development of these new standards incorporates experience gained in the implementation of ISO15489, Information and documentation - Records management, published some 10 years ago.

ISO 30300:2011 and ISO30301:2011 were developed by ISO technical committee ISO/TC 46, Information and documentation, subcommittee SC 11, Archives/records management, and are available from ISO national member bodies (see list for contact details). They may also be obtained directly from the ISO Central Secretariat, price is 86 and 106 Swiss francs, through the ISO Store or by contacting the Marketing, Communication & Information department.

Related standards

• ISO 30300:2011
  Information and documentation -- Management systems for records -- Fundamentals and vocabulary
• ISO 30301:2011
  Information and documentation -- Management systems for records -- Requirements

The "car of the future" on agenda when car makers meet standards makers

How international standards can support the development of "the car of the future" and the intelligent transport systems that will support it will be among the main items on the agenda at the next Fully Networked Car workshop.

The seventh edition of the workshop will be held in Geneva, Switzerland, on 7-8 March 2012 at the Geneva International Motor Show. The workshop is organized every year at the Geneva show by the World Standards Cooperation (WSC), a partnership comprising the International Electrotechnical Commission (IEC), ISO (International Organization for Standardization) and the International Union of Telecommunication (ITU).

The Fully Networked Car workshop is a unique opportunity for the automotive industry to engage with the three organizations and discuss needs and priorities for international standards in coming years.It will bring together key players involved in the development of technologies and standards, as well as other major industry representatives.

The workshop will provide a forum for strategic discussions between IEC, ISO and ITU in this area to continue. In addition, through a series of roundtable panels and discussions, it will explore a number of related topics, including but not limited to

• Electric vehicles and electromobility
• Regional perspectives on intelligent transport systems (ITS)
• Safety
• ITS communications
• The car of the future.

Related links

• The Fully Networked Car 2012
• International Electrotechnical Commission (IEC)
• ITU-T Web site

ISO/IEC TR 27008:2011, Information technology – Security techniques – Guidelines for auditors on information security controls

An ISO/IEC technical report (TR) providing technical controls and compliance guidelines for auditors can improve the effectiveness of an organization’s information security system.

ISO/IEC TR 27008:2011, Information technology – Security techniques – Guidelines for auditors on information security controls, aims to instill confidence in the controls underpinning an organization’s information security management system. The review applies to all parts of the organization, including business processes and its information systems environment.

“The business environment is constantly changing – along with threats to a company’s survival. Organizations need to be ahead of the game, and an excellent defence can be built around audit of the controls used to support the information security,” says Edward Humphreys, leader of the working group that developed the new document.

“ISO/IEC TR 27008:2011 supports a rigorous organizational security audit and review programme for information security controls, to enable the organization to have confidence that their controls have been appropriately implemented and operated and that their information security is ‘fit for purpose’.”

ISO/IEC 27008 provides guidance on reviewing the implementation and operation of controls, including technical compliance checking. The document is principally aimed at information security auditors who need to check the technical compliance of an organization’s information security controls against ISO/IEC 27002 and any other control standards used by the organization. ISO/IEC TR 27008 will help them to:

• Identify and understand the extent of potential problems and shortfalls of information security controls
• Identify and understand the potential organizational impacts of inadequately mitigated information security threats and vulnerabilities
• Prioritize information security risk mitigation activities
• Confirm that previously identified or emergent weaknesses or deficiencies have been adequately addressed
• Support budgetary decisions within the investment process and other management decisions relating to improvement of organization’s information security management.

ISO/IEC 27008 will thus be of benefit to all types of organizations, including public and private companies, government entities, and not-for-profit organizations. It is the eight document available in a series of standards (ISO/IEC 27000) on information security management systems.

Edward Humphreys adds, “In every business model and organizational structure, every business sector and every business relationship, information is a key commodity and the ISO/IEC 27000 series of standards can be utilized to protect this important business commodity.”

ISO/IEC TR 27008:2011, Information technology – Security techniques Guidelines for auditors on information security controls, costs 136 Swiss francs and is available from ISO national member institutes (see the complete list with contact details) and from ISO Central Secretariat through the ISO Store or by contacting the Marketing & Communication department (see right-hand column)

ISO/IEC TR 27008:2011, Information technology – Security techniques – Guidelines for auditors on information security controls

Ref.:1485.2011-11-08

Mrs. Sonia Rosas FriotAssistant, Marketing Services
Marketing, Communication and Information
Tel. +41 22 749 03 36
Fax +41 22 749 09 47
E-mail sales@iso.org

ISO 9836:2011, Performance standards in building – Definition and calculation of area and space indicators

A new ISO standard will help the building industry, real estate sector and financiers to evaluate better the performance of a building

.

ISO 9836:2011, Performance standards in building – Definition and calculation of area and space indicators, uses the "intra-muros" concept used in many parts of the world. This refers to indicators of surface and volume in evaluating buildings and in turn help to evaluate the economic characteristics of a building. The relationship between the area taken up by the building and usable area indicates whether the building costs and materials have been used to their best advantage.

The standard is intended to be used when establishing:

• Specifications for the geometric performance of a building and its spaces (e.g. in design, purchasing procedures, etc., or in building regulations where appropriate)
• Technical documentation relating to the performance of whole buildings prepared by designers, contractors and manufacturers
• The amount of floor area that will not be effectively available for the placement of an individual’s workplace, furniture, equipment, or for circulation
• Evaluation, comparison or control of the properties of a building which are connected to its geometric performance.

Area and volume indicators are basic data for calculation and comparison of capital costs and for running costs and maintenance. They give a basis for the minimization of running costs by Iimiting the amount of space and the cost of individual materials.

The relationship between the area of the building envelope and the usable area shows the extent to which basic savings have been made on the envelope and the running cost of the heating and air conditioning systems.

For example, the standard provides rules for determining the amount of floor area (including attics, terraces, service floor, storage floors) and volume available for functional use of a building.

The standard also mentioned examples of using building loss factors (the percentage difference between rentable and usable area) when setting requirements for new construction. Some physical elements such as a column, a curve wall, where for example furniture can’t be put, has to be taken into account when fitting out a space.

Mr. Gerald Davis, project leader of this standard comments, “Many countries have local rules for measuring surfaces and volumes but such rules differ from one country to another. ISO 9836:2011 will provide a set of rules which can be applied in any country and therefore enables comparability of measurements and will help in calculation of costs and benefits of buildings.”

ISO 9836:2011, Performance standards in building – Definition and calculation of area and space indicators, was developed by ISO technical committee ISO/TC 59, Buildings and civil engineering works, subcommittee SC 3, Functional/user requirements and performance in building construction. The standard is available from ISO national member institutes (see the complete list with contact details). It may also be obtained directly from the ISO Central Secretariat, price 98 Swiss francs through the ISO Store or by contacting the Marketing, Communication & Information department (see right-hand column).

Sales enquiries:

Mrs. Sonia Rosas Friot
Assistant, Marketing Services
Marketing, Communication and Information
Tel. +41 22 749 03 36
Fax +41 22 749 09 47
E-mail sales@iso.org

Related standards

• ISO 9836:2011
  Performance standards in building -- Definition and calculation of area and space indicators
• More standards

Related information

• Building construction
• TC 59/SC 3 - Functional/user requirements and performance in building construction

http://www.iso.org/iso/pressrelease.htm?refid=Ref1484 Ref.: 1484-2011-11-03

New ISO standard on traceability of fish products will help improve food safety

The use of a new ISO standard on the traceability of finfish products will help improve food safety by supplying stakeholders throughout the supply chain with accurate information about the origin and nature of these products.

Finfish constitute an important part of the modern food industry. We consume more and more products coming from the four corners of the globe and fish, in particular, may be caught thousands of kilometers from their place of consumption.

During the past decade, several food crises have seriously affected many countries. Following the outbreak, the concept of traceability of food products has become a matter of special interest to policy makers and scientists.

ISO 12875:2011, Traceability of finfish products – Specification on the information to be recorded in captured finfish distribution chains, specifies the information to be recorded in marine-captured finfish supply chains in order to establish traceability.

It specifies how traded fishery products are to be identified, and the information to be generated and held on those products by each of the food businesses that physically trade them through the distribution chains. The standard deals with the distribution for human consumption of marine-captured finfish and their products, from catch through to retailers or caterers.

The ISO definition of traceability concerns the ability to trace the history, application and location of that which is under consideration, and for products this can include the origin of materials and parts, the processing history and the distribution and location of the product after delivery. Traceability includes not only the principal requirement to be able to physically trace products through the distribution chain, from origin to destination, but also to be able to provide information on what they are made of and what has happened to them. These further aspects of traceability are important in relation to food safety, quality and labelling.

Regarding recent food crisis, legislation often requires traceability to facilitate the recall of products or to prevent them from reaching the consumer.

Mr. Rolf Duus the secretary of the Working Group that developed the standard comments,” In the last few years, there has been an increased interest in traceability and the responsibility for the supply of safe, healthy and nutritious food is shared between all actors involved in the production, processing, marketing and consumption of fish and seafood. ISO 12875:2011 provides a generic basis for traceability and will help to guarantee the health protection of consumers and ensure fair practices in food trade of finfish products.”

Potential users of the new standard include:

• Fishing vessels
• Vessel-landing businesses and auction markets
• Processors
• Transporters and storers
• Traders and wholesalers
• Retailers and caterers.

A similar standard for farmed finfish distribution chains is also developed: ISO 12877:2011, Traceability of finfish products – Specification on the information to be recorded in farmed finfish distribution chains.

ISO 12875:2011, Traceability of finfish products – Specification on the information to be recorded in captured finfish distribution chains, was developed by ISO technical committee ISO/TC 234, Fisheries and aquaculture .It is available from ISO national member institutes (see the complete list with contact details). It may also be obtained directly from the ISO Central Secretariat, price 118 Swiss francs respectively through the ISO Store or by contacting the Marketing, Communication & Information department (see right-hand column).

Traceability of finfish products--Specification on the information to be recorded in captured finfish distribution chains

Economic benefits of standards.

A series of ground-breaking case studies by ISO and partner organizations based on the experiences of 11 companies operating in a variety of business sectors in 10 countries shows that implementing standards can provide economic benefits from between 0,5 % and 4 % of their annual sales revenues.

The case studies are collected in the newly published ISO book, Economic benefits of standards. The 11 companies that participated come from Indonesia, Singapore, Thailand, Viet Nam, Brazil, Colombia, Peru, Botswana, South Africa and Germany (two case studies). The size of the companies varies from a small business with 25 employees and annual sales revenue of around USD 4,5 million to companies with several thousand employees and annual revenue of over USD 1,5 billion.

They operate in a variety of business sectors: agri-food, chemicals, construction and construction materials, electrical appliances, electrical power transmission, food retail/food logistics, industrial automation equipment, and information and telecommunication.

Over the last decade, several studies have been conducted with the aim of determining the economic and other benefits of the use of standards. These studies were undertaken by ISO national member institutes and other organizations and had mainly a macroeconomic focus. Although each of the studies confirmed that the use of standards had positive effects and resulted in economic and other benefits, it is difficult to compare the results achieved by the different studies because each used different approaches to measure the impacts of standards.

For this reason, with the support of Roland Berger Strategy Consultants, ISO developed “the ISO Methodology” for the assessment and quantification of the economic benefits of standards. Its objective is to arrive at reliable quantitative calculations of the impacts of standards on organizations. By being based on the application of the same methodology, it is expected that the results of the different studies can be compared to build a common stock of knowledge about economic benefits of standards.

Economic benefits of standards breaks new ground in providing the first set of case studies based on the ISO Methodology. According to the chapter giving an overview of the project and its initial results, “Standards can indeed play a central role in creating confidence for potential customers in a new technology, or allowing companies that enter a new market to deliver consistently products and services with the quality required by their customers.”

These case studies were undertaken in close cooperation between an ISO member body, an academic institution, a company in the respective country and staff of the ISO Central Secretariat acting as advisors to the project team.

This is the first set of case studies and more studies are currently being carried out. Readers interested in more details of the preliminary case studies can find the full versions of the reports originally developed by the project teams and summary presentations about each project online at: www.iso.org/benefits_of_standards

Economic benefits of standards – International case studies (ISBN 978-92-10556-7), A5 format, 303 pages, English edition only, is available from ISO national member institutes (see the complete list with contact details). It may also be obtained directly from the ISO Central Secretariat, price 38 Swiss francs for paper or PDF edition through the ISO Store or by contacting the Marketing, Communication & Information department (see right-hand column).

Economic benefits of standards

International case studies

Download the full reports and presentations below
Order the book

Title	Full report	Presentation
PT. Wijaya Karya (WIKA) Beton, Indonesia	PDF [1.4MB]	PDF [457kB]
NTUC Fairprice, Singapore	PDF [1.7MB]	PDF [1.3MB]
PTT Chemical Public Company Limited (PTTCH), Thailand	PDF [860kB]	PDF [347kB]
Electrical Devices Joint Stock Company No. 1 (VINAKIP), Vietnam	PDF [597kB]	PDF [326kB]
Festo Brasil, Brazil	PDF [506kB]	PDF [396kB]
Gerfor, Colombia	PDF [1.8MB]	PDF [419kB]
DanPer Trujillo and Civil Association FrioAereo, Peru	PDF [1.2MB]	PDF [477kB]
Lobatse Clay Works (PTY) Ltd, Botswana	PDF [720kB]	PDF [343kB]
Pretoria Portland Cement Company Limited (PPC Cement), South Africa	PDF [1.6MB]	PDF [462kB]
Siemens AG, Germany	PDF [1MB]	PDF [409kB]
Nanotron Technologies GmbH, Germany	PDF [446kB]	PDF [619kB]