ISO 22380:2018 Security and resilience – Authenticity, integrity and trust for products and documents – General principles for product fraud risk and countermeasures, is an international standard developed by ISO/TC 292 Security and resilience and published by the International Organization for Standardization in 2018.[1]
ISO 22380 is a guidance document that provides principles on how to identify the risks related to various types of product fraud and product fraudsters. The included guidance can be used by any type of organization in order to establish strategic, countermeasures to prevent or reduce any harm from fraudulent attacks.[2]

Scope and contents

ISO 22380 includes the following main clauses:[3]

  1. Scope
  2. Normative references
  3. Terms and definitions
  4. General principles for product fraud risk and countermeasures
  • 4.1 Evaluation of situational context of product fraud
  • 4.2 Classification of intention and motive of product fraud
  • 4.3 Classification of product fraud activities
  • 4.4 Classification of product fraudsters
  • 4.5 Profiling and conducting a risk assessment of product fraud
  • 4.6 Selection and implementation of countermeasures
  • 4.7 Effectiveness assessment of countermeasures

Annex A Examples of profiling, risk assessment and countermeasures
Annex B Decision making on security countermeasure investments

ISO 22380 is part a series of documents on Authenticity, integrity and trust for products and documents, including[4]

  • ISO 22381:2018 Security and resilience – Authenticity, integrity and trust for products and documents – Guidelines for interoperability of product identification and authentication systems[5]
  • ISO 22382:2018 Security and resilience – Authenticity, integrity and trust for products and documents – Guidelines for the content, security and issuance of excise tax stamps[6]
  • ISO 12931:2012 Performance criteria for authentication solutions used to combat counterfeiting of material goods[7]
  • ISO 16678:2014 Guidelines for interoperable object identification and related authentication systems to deter counterfeiting and illicit trade[8]

History

ISO 22380 was first being developed in ISO/TC 247 Fraud countermeasures and controls under the number ISO 19564.[9] The standard got a new number when ISO/TC 247 was merged into ISO/TC 292 in 2015.

Year Description
2018ISO 22380 (1st Edition)

See also

References

  1. ↑ "ISOTC292". www.isotc292online.org.
  2. ↑ "ISO 22380:2018". ISO.
  3. ↑ "Security and resilience — Authenticity, integrity and trust for products and documents — General principles for product fraud risk and countermeasures" (PDF). www.sis.se. Retrieved 2020-09-04.
  4. ↑ "ISOTC292". www.isotc292online.org. Archived from the original on 2020-09-22. Retrieved 2020-09-03.
  5. ↑ "ISO 22381:2018". ISO.
  6. ↑ "ISO 22382:2018". ISO. 5 December 2018.
  7. ↑ "ISO 12931:2012". ISO. 8 January 2014.
  8. ↑ "ISO 16678:2014". ISO.
  9. ↑ "ISOTC292". www.isotc292online.org.
  • ISO 22380— Security and resilience – Authenticity, integrity and trust for products and documents – General principles for product fraud risk and countermeasures
  • ISO TC 292— Security and resilience
  • ISO 22380 at www.isotc292online.org
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.