ISO 22322:2022

Security and resilience - Emergency management - Guidelines for public warning

This document gives guidance on developing, managing and implementing public warning before, during and after incidents. This document is applicable to any organization responsible for public warning. It is applicable at all levels, from local up to international. Before planning and implementing the public warning system, the risks and consequences of potential hazards are assessed. This process is not part of this document.

Sécurité et résilience — Gestion des situations d'urgence — Lignes directrices relatives aux mises en garde de la population

General Information

• Status: Published
• Publication Date: 13-Dec-2022
• ICS: 03.100.01 - Company organization and management in general
• Technical Committee: ISO/TC 292 - Security and resilience
• Drafting Committee: ISO/TC 292 - Security and resilience
• Current Stage: 6060 - International Standard published
• Start Date: 14-Dec-2022
• Due Date: 21-Jul-2023
• Completion Date: 14-Dec-2022

Relations

• Revises: ISO 22322:2015 - Societal security - Emergency management - Guidelines for public warning
• Effective Date: 06-Jun-2022

Overview

ISO 22322:2022 - Security and resilience - Emergency management - Guidelines for public warning - provides guidance for developing, managing and implementing public warning before, during and after incidents. Applicable to any organization responsible for public warning (local to international), the standard defines a structured public warning system built around two core functions: hazard monitoring and warning dissemination. (Note: prior risk assessment of hazards is outside the scope of this standard.)

Key topics and requirements

• Public warning system requirements: establish, document, implement, maintain and continually improve a public warning system based on a public warning policy. System elements must be planned, resourced, communicated and regularly trained.
• Two-function framework:
  • Hazard monitoring function - identify hazards, set monitoring indicators, collect scientific or credible evidence, provide early information and notify the warning dissemination function.
  • Warning dissemination function - convert evidence into alerts and notifications, specify dissemination procedures, consider diverse information needs (including vulnerable groups), and promptly distribute warnings.
• Authorization and decision-making: designate trained individuals or groups responsible for authorizing public warning based on inputs from monitoring and dissemination functions and the public warning policy.
• Public warning process: procedures for identifying hazards, defining criteria for notifications/alerts/all-clear, capturing affected areas, specifying message content, selecting methods and disseminating warnings.
• Human factors & public awareness: address communication needs of diverse and vulnerable populations; maintain continuous public awareness (see Annex B).
• Evaluation and improvement: evaluate performance of monitoring and dissemination regularly (intervals not exceeding five years) and whenever expected public safety actions do not occur. Maintain retrievable operational logs.
• Informative annexes: relationship between alert and notification (Annex A) and public awareness guidance (Annex B).

Applications and users

ISO 22322:2022 is intended for:

• Emergency response organizations and public authorities
• National, regional and local civil protection agencies
• Utilities, transport operators and critical infrastructure owners
• NGOs, community groups and private-sector organizations with public-facing responsibilities Practical uses include designing public warning systems, defining alert/notification criteria, assigning authorization roles, selecting dissemination channels, planning training and public awareness campaigns, and conducting regular system evaluations.

Related standards

• ISO 22300 - Security and resilience - Vocabulary (referenced for terms and definitions)
• ISO 22320 - Guidelines for incident management (relevant for incident response coordination)

Keywords: ISO 22322:2022, public warning, emergency management, hazard monitoring, warning dissemination, alert, notification, incident response, public awareness.

Standards Content (Sample)

INTERNATIONAL ISO
STANDARD 22322
Second edition
2022-12
Security and resilience — Emergency
management — Guidelines for public
warning
Sécurité et résilience — Gestion des situations d'urgence — Lignes
directrices relatives aux mises en garde de la population
Reference number
© ISO 2022
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Public warning system . 1
4.1 General . 1
4.2 Design the framework . 2
4.2.1 General . 2
4.2.2 Hazard monitoring function . 3
4.2.3 Warning dissemination function . 3
4.2.4 Responsibility for authorizing public warning . 3
4.3 Identify public warning objectives . 4
4.4 Implement the public warning process . 4
4.5 Evaluate and improve . . 4
5 Public warning process . 4
5.1 General . 4
5.2 Hazard monitoring process. 5
5.2.1 Identify the hazards to be monitored . 5
5.2.2 Monitor the hazards . 6
5.2.3 Identify the area to receive the public warning . 6
5.2.4 Communicate status updates . 6
5.3 Operational decision-making . 6
5.4 Warning dissemination process . 6
5.4.1 General . 6
5.4.2 Capturing of the characteristics of the area to receive the public warning . 7
5.4.3 Specify information content . 7
5.4.4 Select warning methods . 8
5.4.5 Disseminate public warning . 8
5.5 Human factor considerations . 9
Annex A (informative) Relationship between alert and notification in public warning .10
Annex B (informative) Public awareness .11
Bibliography .12
iii
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www.iso.org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as information about ISO’s adherence to
the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see
www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 292, Security and resilience.
This second edition cancels and replaces the first edition (ISO 22322:2015), of which it constitutes a
minor revision.
The changes are as follows:
— the title has been updated;
— references to guidance in other relevant standards have been added;
— the Bibliography has been updated.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html.
iv
Introduction
Disasters, terrorist attacks and other major incidents need an effective incident response in order to
save lives, mitigate harm and damage. Emergency response organizations need to respond quickly to a
developing emergency situation. Time to communicate is limited and often a specific message involving
practical action is to be disseminated to a large group. Simple procedures that send the message
efficiently and create the desired response can save lives, protect health and prevent major disruptions.
The protection of people at risk from harm is an important part of an incident response. Public warning
enables response organizations to alert their responders and allows people at risk to take safety
measures to reduce the impact of incidents. Effective public warning consisting of alert and notification
can prevent panic reactions and support response organizations in optimizing their responses and
mitigating the impact.
Effective incident response needs a structured and pre-planned public warning. Public warning is
based on two functions: hazard monitoring and warning dissemination. It is also necessary to establish
a mechanism for risk identification, hazard monitoring, decision-making and warning dissemination,
and to evaluate and improve.
v
INTERNATIONAL STANDARD ISO 22322:2022(E)
Security and resilience — Emergency management —
Guidelines for public warning
1 Scope
This document gives guidance on developing, managing and implementing public warning before,
during and after incidents.
This document is applicable to any organization responsible for public warning. It is applicable at all
levels, from local up to international.
Before planning and implementing the public warning system, the risks and consequences of potential
hazards are assessed. This process is not part of this document.
2 Normative references
The following documents are referred to in the text in such a way that some or all of their content
constitutes requirements of this document. For dated references, only the edition cited applies. For
undated references, the latest edition of the referenced document (including any amendments) applies.
ISO 22300, Security and resilience — Vocabulary
3 Terms and definitions
For the purposes of this document, the terms and definitions given in ISO 22300 apply.
ISO and IEC maintain terminology databases for use in standardization at the following addresses:
— ISO Online browsing platform: available at https:// www .iso .org/ obp
— IEC Electropedia: available at https:// www .electropedia .org/
4 Public warning system
4.1 General
The organization should establish, document, implement, maintain and continually improve a public
warning system (see Figure 1) based on a public warning policy.
NOTE 1 This document does not describe the public warning policy.
Figure 1 — Overview of the public warning system
The organization should assess the potential hazards that can occur within a defined area and the
level of potential risk each presents. The results of this assessment should determine the type of public
warning that can be required and should be documented for future reference. The public warning
system developed by the organization should:
a) provide the framework for setting and reviewing public warning objectives;
b) be planned in advance;
c) be documented, implemented and maintained;
d) have the human and technical resources to plan, implement, maintain and improve the public
warning system;
e) be communicated to all persons working for or on behalf of the organization;
f) provide suitable training for responders;
g) be available and communicated to the public generally and especially to the people at potential
risk;
h) involve appropriate consultation with community representatives (this may include, but not be
limited to, community groups, mutual aid networks, political representatives, charities and non-
governmental organizations (NGOs), trade, and business associations) or bodies concerned with
public interests;
i) include a commitment to continual improvement.
NOTE 2 ISO 22320 provides guideline for incident management to any organization involved in responding to
incidents of any type and scale.
4.2 Design the framework
4.2.1 General
The organization should design a framework based on two functions: hazard monitoring and warning
dissemination. The responsibility for issuing public warning should be assigned to the interested
parties who are individual experts, groups of experts, or organizations in the private or public sectors
at the local up to the international level. Those who contribute to both functions should:
a) be familiar with the capabilities and capacities of the public warning system so that relevant,
accurate, reliable and timely warnings will be disseminated;
b) make continuous effort to raise and maintain public awareness (see Annex B);
c) specify safety actions within the warning.
4.2.2 Hazard monitoring function
Hazard monitoring is based on the risk assessment conducted to determine the hazards to be monitored.
Those involved in the hazard monitoring function are responsible for the following:
a) understanding hazard monitoring operations from local up to international agencies and having
channels to communicate with them;
b) ongoing monitoring of identified risks within a defined area and within their range of expertise;
c) providing early information on emergin
...