ISO 22380 explained

ISO 22380:2018 Security and resilience – Authenticity, integrity and trust for products and documents – General principles for product fraud risk and countermeasures, is an international standard developed by ISO/TC 292 Security and resilience and published by the International Organization for Standardization in 2018.^[1]
ISO 22380 is a guidance document that provides principles on how to identify the risks related to various types of product fraud and product fraudsters. The included guidance can be used by any type of organization in order to establish strategic, countermeasures to prevent or reduce any harm from fraudulent attacks.^[2]

Scope and contents

ISO 22380 includes the following main clauses:^[3]

1. Scope
   
2. Normative references
   
3. Terms and definitions
   
4. General principles for product fraud risk and countermeasures
   

• 4.1 Evaluation of situational context of product fraud
• 4.2 Classification of intention and motive of product fraud
• 4.3 Classification of product fraud activities
• 4.4 Classification of product fraudsters
• 4.5 Profiling and conducting a risk assessment of product fraud
• 4.6 Selection and implementation of countermeasures
• 4.7 Effectiveness assessment of countermeasures

Annex A Examples of profiling, risk assessment and countermeasures
Annex B Decision making on security countermeasure investments

Related standards

ISO 22380 is part a series of documents on Authenticity, integrity and trust for products and documents, including^[4]

• ISO 22381:2018 Security and resilience – Authenticity, integrity and trust for products and documents – Guidelines for interoperability of product identification and authentication systems^[5]
• ISO 22382:2018 Security and resilience – Authenticity, integrity and trust for products and documents – Guidelines for the content, security and issuance of excise tax stamps^[6]
• ISO 12931:2012 Performance criteria for authentication solutions used to combat counterfeiting of material goods^[7]
• ISO 16678:2014 Guidelines for interoperable object identification and related authentication systems to deter counterfeiting and illicit trade^[8]

History

ISO 22380 was first being developed in ISO/TC 247 Fraud countermeasures and controls under the number ISO 19564.^[9] The standard got a new number when ISO/TC 247 was merged into ISO/TC 292 in 2015.

See also

• List of ISO standards
• International Organization for Standardization

External links

• ISO 22380— Security and resilience – Authenticity, integrity and trust for products and documents – General principles for product fraud risk and countermeasures
• ISO TC 292— Security and resilience
• ISO 22380 at www.isotc292online.org

Notes and References

1. Web site: ISOTC292. www.isotc292online.org.
2. Web site: ISO 22380:2018. ISO.
3. Web site: Security and resilience — Authenticity, integrity and trust for products and documents — General principles for product fraud risk and countermeasures . www.sis.se . PDF. 2020-09-04.
4. Web site: ISOTC292. www.isotc292online.org. 2020-09-03. 2020-09-22. https://web.archive.org/web/20200922060718/https://www.isotc292online.org/publications/. dead.
5. Web site: ISO 22381:2018. ISO.
6. Web site: ISO 22382:2018. ISO. 5 December 2018 .
7. Web site: ISO 12931:2012. ISO. 8 January 2014 .
8. Web site: ISO 16678:2014. ISO.
9. Web site: ISOTC292. www.isotc292online.org.