INTERNATIONAL ISO STANDARD 22396 First edition 2020-02 Security and resilience — Community resilience — Guidelines for information exchange between organizations Sécurité et résilience — Résilience des communautés — Lignes directrices pour l’échange d’informations entre les organismes iTeh STANDARD PREVIEW (standards.iteh.ai) ISO 22396:2020 https://standards.iteh.ai/catalog/standards/sist/3ad535df-d2ae-406f-82d1- c6974bbb433b/iso-22396-2020 Reference number ISO 22396:2020(E) © ISO 2020 ISO 22396:2020(E) iTeh STANDARD PREVIEW (standards.iteh.ai) ISO 22396:2020 https://standards.iteh.ai/catalog/standards/sist/3ad535df-d2ae-406f-82d1- c6974bbb433b/iso-22396-2020 COPYRIGHT PROTECTED DOCUMENT © ISO 2020 All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of the requester. ISO copyright office CP 401 • Ch. de Blandonnet 8 CH-1214 Vernier, Geneva Phone: +41 22 749 01 11 Fax:Website: +41 22www.iso.org 749 09 47 Email: [email protected] iiPublished in Switzerland © ISO 2020 – All rights reserved ISO 22396:2020(E) Contents Page Foreword ........................................................................................................................................................................................................................................iv Introduction ..................................................................................................................................................................................................................................v 1 Scope ................................................................................................................................................................................................................................. 1 2 Normative references ...................................................................................................................................................................................... 1 3 Terms and definitions ..................................................................................................................................................................................... 1 4 Principles ..................................................................................................................................................................................................................... 1 ........................................................................................................................................................................................................... ................................................................................................................................................................................ 2 4.1 General 1 5 Framework ................................................................................................................................................................................................................. 2 4.2 Guiding principles ........................................................................................................................................................................................................... 2 ..................................................................................................................................................... 3 5.1 General ..................................................................................................................................................................................... 3 5.2 Leadership and commitment ......................................................................................................................... 5.3 Context analysis ...................................................................................................................................................................................... 5.4 Designing and establishing ..................................................................................................................................................................... a framework 4 5.5 Implementation .................................................................................................................................................................. 4 5.6 Monitoring and review 4 6 Process ............................................................................................................................................................................................................................ 5 5.7 Continual improvement 4 ........................................................................................................................................................................................................... 5 iTeh ST..............................................................................................................................................................................ANDARD PREVIEW 5 6.1 General ...................................................................................................................................................................................... 5 6.2 Establish the needs(standa ..................................................................................................................................................rds.iteh.ai) 6 6.2.1 General ............................................................................................................................................................ 6 6.2.2 Expression ..................................................................................................................................................................................... of interestISO 22396:2020 6 6.3 Preparehttp seach://stan dorganizationard s.....................................................................................................................................................................................iteh.ai/catalog/standards/sist/3ad535df-d2ae-406f-82d1- 6 6.3.1 Internal c6974bbb433b/iso-22396- 2...................................................................................................................020 6 6.3.2 External...................................................................................................................................................................................... 6 6.4 Define the information .................................................................................................................................................................................... exchange structure 6 6.4.1 General .............................................................................................................................................. 6 6.4.2 Purpose ..................................................................................................................... 6.4.3 Membership guidelines ..................................................................................................... 6.4.4 Information...................................................................................................................................................................................... classification system 7 6.5 Operate6.5.2 Meetingsand maintain .................................................................................................................................................................................. the information exchange 7 6.5.1 General ............................................................................................................................... 7 ............................................................................................................................................................. 8 6.5.3 Information sharing ..................................................................................................................................................................... platform 8 6.5.4 Technical...................................................................................................................................................................................... aspects 8 6.6 Monitoring and review ............................................................................................................................................. 89 6.6.1 General 8 Annex A Traffic light protocol (TLP) ............................................................................................................................10 6.6.2 Continual improvement Annex B Examples ...........................................................................................................................................................................11 (informative) Bibliography .............................................................................................................................................................................................................................13 (informative) © ISO 2020 – All rights reserved iii ISO 22396:2020(E) Foreword ISO (the International