EN ISO 22397:2018

SLOVENSKI STANDARD
01-december-2018
Družbena varnost - Smernice za vzpostavitev partnerskih dogovorov (ISO
22397:2014)
Societal security - Guidelines for establishing partnering arrangements (ISO 22397:2014)
Sicherheit und Schutz des Gemeinwesens - Leitfaden zur Erstellung von Vereibarungen
für Partnerschaften (ISO 22397:2014)
Sécurité sociétale - Lignes directrices pour établir des partenariats (ISO 22397:2014)
Ta slovenski standard je istoveten z: EN ISO 22397:2018
ICS:
03.100.01 Organizacija in vodenje Company organization and
podjetja na splošno management in general
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EN ISO 22397
EUROPEAN STANDARD
NORME EUROPÉENNE
September 2018
EUROPÄISCHE NORM
ICS 03.100.01
English Version
Societal security - Guidelines for establishing partnering
arrangements (ISO 22397:2014)
Sécurité sociétale - Lignes directrices pour Sicherheit und Schutz des Gemeinwesens - Leitfaden
l'établissement d'accords de partenariat (ISO zur Erstellung von Vereibarungen für Partnerschaften
22397:2014) (ISO 22397:2014)
This European Standard was approved by CEN on 23 July 2017.

CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this
European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references
concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to any CEN
member.
This European Standard exists in three official versions (English, French, German). A version in any other language made by
translation under the responsibility of a CEN member into its own language and notified to the CEN-CENELEC Management
Centre has the same status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and United Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

CEN-CENELEC Management Centre: Rue de la Science 23, B-1040 Brussels
© 2018 CEN All rights of exploitation in any form and by any means reserved Ref. No. EN ISO 22397:2018 E
worldwide for CEN national Members.

Contents Page
European foreword . 3

European foreword
The text of ISO 22397:2014 has been prepared by Technical Committee ISO/TC 292 "Security and
resilience” of the International Organization for Standardization (ISO) and has been taken over as
of which is held by NEN.
This European Standard shall be given the status of a national standard, either by publication of an
identical text or by endorsement, at the latest by March 2019, and conflicting national standards shall
be withdrawn at the latest by March 2019.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN shall not be held responsible for identifying any or all such patent rights.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria,
Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia,
France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta,
Netherlands, Norway, Poland, Portugal, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland,
Turkey and the United Kingdom.
Endorsement notice
The text of ISO 22397:2014 has been approved by CEN as EN ISO 22397:2018 without any modification.
INTERNATIONAL ISO
STANDARD 22397
First edition
2014-07-15
Societal security — Guidelines for
establishing partnering arrangements
Sécurité sociétale — Lignes directrices pour l’établissement d’accords
de partenariat
Reference number
ISO 22397:2014(E)
©
ISO 2014
ISO 22397:2014(E)
© ISO 2014
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Published in Switzerland
ii © ISO 2014 – All rights reserved

ISO 22397:2014(E)
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Plan the partnering arrangement . 1
4.1 Define the purpose of the partnering arrangement. 1
4.2 Identify partners to the arrangement . 1
4.3 Arrange initial dialogue with potential partners . 2
5 Develop the partnering arrangement . 2
5.1 Set the priorities . 2
5.2 Conduct a risk assessment . 2
5.3 Agree on the scope of the partnering arrangement . 3
5.4 Identify objectives, tasks and resources . 3
5.5 Identify roles, responsibilities and levels of authority . 4
5.6 Establish relationship rules and how to resolve challenges . 4
5.7 Determine communication and consultation needs. 4
5.8 Determine need for training and exercises . 4
6 Implement the partnering arrangement . 5
6.1 Apply partnering principles . 5
6.2 Select contractual tools . 5
7 Review the partnering arrangement . 6
Annex A (informative) How to generate the information necessary to establish relationship
rules — Example . 7
Annex B (informative) Potential obstacles to the partnering arrangement .10
Annex C (informative) Partnering review checklist .11
Bibliography .13
ISO 22397:2014(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of any
patent rights identified during the development of the document will be in the Introduction and/or on
the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the meaning of ISO specific terms and expressions related to conformity
assessment, as well as information about ISO’s adherence to the WTO principles in the Technical Barriers
to Trade (TBT) see the following URL: Foreword - Supplementary information
The committee responsible for this document is ISO/TC 223, Societal security.
iv © ISO 2014 – All rights reserved

ISO 22397:2014(E)
Introduction
The world has evolved into a global community of interdependent societies. Changes in technical and
economic relationships have resulted in cross-jurisdictional and trans-boundary interdependencies for
vital societal functions and assets. The security and well-being of people increasingly depend on the
continuity of vital functions of organizations, local communities, nations and the global community.
The impact of incidents has increased the need for enhanced preparedness, response and recovery
programmes.
There are many different roles and responsibilities within and between public, private and not-for-
profit organizations. Some roles and responsibilities are primarily the responsibility of individual
organizations while others can be adequately addressed only by the multiple organizations in order to
manage risks. In a complex and changing world, organizations need to consider partnering. Partnering
is the association with others in an activity or area of common interest in order to achieve individual
and collective objectives.
This International Standard provides principles and a process to develop the relationship among
organizations in a partnering arrangement. Figure 1 illustrates the process for planning, developing,
implementing and reviewing partnering arrangements.
Figure 1 — Process for planning, developing, implementing and reviewing partnering
arrangements
A partnering arrangement can be between two or more organizations. It can improve the capacity of
organizations to enhance prevention, preparedness, response, and recovery programmes. This for a
wide range of event(s) which may include natural, human induced disasters with potential impact on
an organization, community or society and the environment on which it depends. There are a variety
of possible partnering arrangements, both formal and informal. For example, contracts, memoranda
of understanding (MoUs), mutual aid agreements, partnerships, cooperation agreements, coordination
agreements, operational agreements, supply agreement, etc.
This International Standard is not intended to replace local, national or international regulations.
Organizations are advised to seek legal counsel before entering into partnering arrangements.
INTERNATIONAL STANDARD ISO 22397:2014(E)
Societal security — Guidelines for establishing partnering
arrangements
1 Scope
This International Standard provides guidelines for establishing partnering arrangements among
organizations to manage multiple relationships for events impacting on societal security. It incorporates
principles and describes the process for planning, developing, implementing and reviewing partnering
arrangements.
This International Standard is applicable to all organizations regardless of type, size and nature of
activity whether in or between the private, public, or not-for-profit sectors.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this document and are
indispensable for its application. For dated references, only the edition cited applies. For undated
references, the latest edition of the referenced document (including any amendments) applies.
ISO 22300, Societal security — Terminology
ISO 31000:2009, Risk management — Principles and guidelines
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO 22300 and the following apply.
3.1
interoperability
ability of diverse systems and organizations to work together i.e. to inter-operate
3.2
partnering
association with others in an activity or area of common interest in order to achieve individual and
collective objectives
4 Plan the partnering arrangement
4.1 Define the purpose of the partnering arrangement
The organization(s) initiating the partnering arrangement should:
— clearly identify the need for a partnering arrangement, and
— consider existing policies, roles, responsibilities and interests and the benefits to itself and other
potential partners.
4.2 Identify partners to the arrangement
The organization(s) initiating the partnering arrangement should identify other organizations with the
appropriate attributes as potential partners.
ISO 22397:2014(E)
These are organizations which could become partners to the arrangement as they could:
— be directly or indirectly effected or impacted by an event;
— support or contribute to the work of preventing, preparing, responding and/or recovering from an
event;
— be required to comply with legislation and regulation.
Because the impact of an event may be uncertain, the initiating organization(s) should continually
monitor and evaluate potential partners.
4.3 Arrange initial dialogue with potential partners
The initiating organization(s) should contact potential partners that may be interested in partnering.
Before entering into a partnering arrangement, the initiating organization(s) should request each
potential partner to consider:
— the purpose of the partnering arrangement;
— the specific objectives to be achieved by each organization;
— the advantage of implementing the partnering arrangement;
— their capability and competence with respect to the partnering arrangement;
— any internal constraints that may interfere with effective implementation.
5 Develop the partnering arrangement
5.1 Set the priorities
When developing the partnering arrangement, different events may be identified. This enables types
of events to be determined and priorities to be set. The partners to the arrangement should establish
a process to identify the issues related to each type of events, thereby decide on the most appropriate
arrangement.
The partners to the arrangement should ensure that applicable legal, regulatory, and other requirements
to which the organization subscribes are considered in developing the partnering arrangement.
5.2 Conduct a risk assessment
The partners to the arrangement should undertake a risk assessment in accordance with ISO 31000:2009,
5.4. The results of the risk assessment are intended to provide information such as:
— vulnerability of critical assets;
— high priority risk sources;
— risk treatments;
— risk profile;
— organizational capability (prevention, preparedness, response and recovery).
When undertaking risk assessment, the following should be considered:
— respect confidentiality, policies and expectations of the partnering arrangement when sharing
information;
2 © ISO 2014 – All rights reserved

ISO 22397:2014(E)
— identify risk sources whether or not they are under the control of the partners to the arrangement
and even when the
...