In this episode of the ASIAL Security Insider Podcast, we speak with Matthew Curtis, one of the authors and a principal driver of the new ISO 22340 Security and Resilience — Protective Security — Guidelines for an Enterprise Protective Security Architecture and Framework, the first-ever standard providing guidance on protective security. This new standard has been developed and completed within the auspices of the International Organization for Standardization. The draft has now passed the final ballot – the process of resolving final editorial matters, conducting the final edit, and, ultimately, publication will then follow.

In this podcast, we discuss how the standard is designed to meet a pressing need for organisations to adopt enterprise governance arrangements, enabling formulation implementation of all security controls coordinated within a single framework and strategically aligned with the business of the organisation.

ISO 22340 is the first international standard on protective security and following its planned adoption as an Australian standard, the first of its kind here in Australia as well.

Matthew went to great lengths to ensure that he explained the development and deployment of this standard was a team effort, stating, “I owe a great debt of gratitude to the team of professionals who have given so much of their time, knowledge and intellectual rigour to the project. These include Jason Brown, Head of Delegation for Australia to ISO/TC 292, Anna Harris, Chair of the Standards Australia committee MB-025 Security and Resilience, Alex Webling, Julian Talbot, Adam Incher, Matt Warmington, David Harding and Robert Gore, and more latterly, Vern Amey. Also of great value were the contributions and support of colleagues on the project team representing France, United States of America, Norway, Japan, Sweden, Republic of Korea and United Kingdom.”