
How To Protect Your Employees From Romance Scams
When reading “romance scam” it’s common that the first thing that comes to mind is falling for the classic …
If you have ever wondered about the lifecycle of an ISO standard, or wanted to know more about what ISO is, then this article is for you.
Founded in 1947 by a group of delegates from 25 countries, the International Organization for Standardization (ISO) is a nongovernmental organization made up of national standards bodies with a unified goal of ensuring products and services are safe, reliable, and of good quality.
It develops and publishes a wide range of proprietary, industrial, and commercial standards and is comprised of representatives from various national standards organizations. In this article we will focus on the Information Technology (IT) arena.
ISO has a Joint Technical Committee (JTC) with the International Electrotechnical Commission (IEC) to develop standards relating to IT. The process to create such a standard is comprised of 6 stages:
Note: The stages marked with an asterisk (*) are mandatory and cannot be skipped.
ISO has a Joint Technical Committee (JTC) with the International Electrotechnical Commission (IEC) to develop standards relating to IT. Known as JTC 1, it was created in 1987 and whose mission is “to develop worldwide Information and Communication Technology (ICT) standards for business and consumer applications”.
The process starts with a study period, the outcome of which is a New work item Proposal (NP). This is usually submitted to the JTC 1, which is formed of National Bodies (NB) and a Techincal Committee (TC).
The NP document includes enough information about the project to allow a NB to decide if it is going to participate in a project. This information includes the obvious things like title, scope, and program of work as well as a business case that sets out the purpose and justification for doing the standardization.
Once an NP is created, it is submitted to a vote within JTC 1. In order to achieve acceptance, it needs to meet the two following conditions:
Once the NP is approved, it is assigned to a subcommittee (SC) to work on it. The SC establishes a Working Group (WG) to take responsibility, find a project editor for the project, and create a Working Draft (WD).
The draft will go through several revisions, process that can prove time consuming. For this, JTC 1 can flag anything that is stagnating in this stage 3 years after the NP’s creation date. Factors that cause stagnations are issues related to copyright, patents and conformity assessment.
Once the WG decides that the document respects the standard format and has the right content, it forwards it to the WG’s parent committee who will decide which stage to go to next:
During this optional stage, the WG sends the document as a Commitee Draft (CD) to the members of the parent committee who then comment and vote. This can happen repeatedly, until the parent committee agrees that the technical content is correct and complete.
At this stage, the committee submits the document for registration for Draft International Standard (DIS) ballot.
The Draft International Standard (DIS) is submitted to ISO Central Secretariat. It is then circulated to National Bodies (NB) who have 12 weeks to vote (Yes,, No or abstain) and comment on it.
If 2/3 of the P-members vote Yes and no more than 1/4 of the total number of votes cast are negative, the DIS is considered as approved and is sent directly to 6th and final stage: Publication.
On the other hand, if the DIS is not approved and technical changes are proposed, the committee further submits the document to the next stage as a Final Draft International Standard (FDIS).
The document is now sent out for a Final Draft International Standard (FDIS) vote. This is a two-month ballot, that requires at least two thirds of positive votes, along with no more than one-quarter of the total number of cast votes being negative.
If the vote fails, the document goes back to the CD stage. If it passes only minor editorial changes are possible to the document before it goes to the next stage for publishing.
At this stage the secretary submits the final document for publication. But if the standard has passed through the Approval stage, the manager may submit the project leader’s responses to member body comments on the FDIS.
Only editorial corrections can be made to the final text, which is then published by the ISO Central Secretariat as an International Standard.
As you can see, the ISO lifecycle may look simple on the surface, but its process can be tedious. With repeated rounds of proposals, comments, votes, revisions and approvals, one can see that the standardization process is not a quick one.
When reading “romance scam” it’s common that the first thing that comes to mind is falling for the classic …
October is recognized every year as the Cybersecurity Awareness Month. This campaign encourages individuals and …
If you’re interested in a complete Security Program without the high costs, a cyber security consultant is the best way to start.
Get started Now