Episode 121 - Introducing the new Protective Security Policy Standard

In this episode of the ASIAL Security Insider Podcast, we speak
with Matthew Curtis, one of the authors and a principal driver of
the new ISO 22340 Security and Resilience — Protective
Security — Guidelines for an Enterprise Protective Security
Architecture and Framework, the first-ever standard
providing guidance on protective security. This new standard has
been developed and completed within the auspices of the
International Organization for Standardization. The draft has now
passed the final ballot – the process of resolving final
editorial matters, conducting the final edit, and, ultimately,
publication will then follow.


In this podcast, we discuss how the standard is designed to meet
a pressing need for organisations to adopt enterprise governance
arrangements, enabling formulation implementation of all security
controls coordinated within a single framework and strategically
aligned with the business of the organisation.


ISO 22340 is the first international standard on protective
security and following its planned adoption as an Australian
standard, the first of its kind here in Australia as well.


Matthew went to great lengths to ensure that he explained the
development and deployment of this standard was a team effort,
stating, “I owe a great debt of gratitude to the team of
professionals who have given so much of their time, knowledge and
intellectual rigour to the project. These include Jason Brown,
Head of Delegation for Australia to ISO/TC 292, Anna Harris,
Chair of the Standards Australia committee MB-025 Security and
Resilience, Alex Webling, Julian Talbot, Adam Incher, Matt
Warmington, David Harding and Robert Gore, and more latterly,
Vern Amey. Also of great value were the contributions and support
of colleagues on the project team representing France, United
States of America, Norway, Japan, Sweden, Republic of Korea and
United Kingdom.”