ISO 22361:2022 セキュリティとレジリエンス — 危機管理 — ガイドライン | ページ 6

3.1

capability

ability to accomplish an undertaking with a defined intended outcome and within specified conditions

Note 1 to entry: An organizational capability depends on the available resources and organizational principles, framework (leadership, structure, culture, competences) and processes.

3.2

crisis

abnormal or extraordinary event or situation that threatens an organization (3.13) or community and requires a strategic, adaptive and timely response in order to preserve its viability and integrity

Note 1 to entry: The event or situation can include a high degree of complexity, instability and uncertainty.

Note 2 to entry: The event or situation can exceed the response capacity or capability (3.1) of the organization.

Note 3 to entry: Given the nature of a crisis, a flexible and dynamic approach is needed in addition to any rehearsed plans and procedures.

Note 4 to entry: Threats can impact upon the organization’s ability to function, its reputation, its brand, its physical, political or intellectual property, its organizational structure and its human, environment and economic factors.

Note 5 to entry: The term “organization” also includes governmental and non-governmental agencies and national authorities in the public sector, as well as non-governmental organizations (NGOs) and charities.

3.3

crisis management

coordinated activities to lead, direct and control an organization (3.13) with regard to crisis (3.2)

3.4

crisis management team

CMT

group of individuals functionally responsible for leading the organization's (3.13) crisis management (3.3) response

3.5

crisis management plan

CMP

document specifying which procedures and associated resources are to be applied by whom and where in a crisis (3.2)

3.6

incident

event or situation that can be, or could lead to, a disruption, loss, emergency or crisis (3.2)

[SOURCE:ISO 22300:2021, 3.1.122, modified — “or situation” has been added to the definition.]

3.7

interested party

stakeholder

person or organization (3.13) that can affect, be affected by, or perceive themselves to be affected by a decision or activity

3.8

governance

<organizations> human-based system by which an organization (3.13) is directed, overseen and held accountable for achieving its defined purpose

3.9

situation report

summary, either verbal or written, outlining the current state and potential development of an incident (3.6) or crisis (3.2) and the response to it

3.10

situational awareness

perception of the elements in the environment within a volume of time and space, the comprehension of their meaning and a projection of their status in the near future

3.11

top management

person or group of people who directs and controls an organization (3.13) at the highest level

3.12

issue

event or situation that does not currently present, but can develop into, a long-term or significant negative impact on the strategic objectives, reputation or viability of the organization (3.13)

Note 1 to entry: Effectively responding to emerging issues can result in the successful aversion of a crisis (3.2) .

3.13

organization

person or group of people that has its own functions with responsibilities, authorities and relationships to achieve its objectives

Note 1 to entry: The concept of organization includes, but is not limited to, sole-trader, company, corporation, firm, enterprise, authority, partnership, charity or institution, or part or combination thereof, whether incorporated or not, public or private.

3.14

crisis communication

communications both internal and external to provide information, updates and instructions to internal and external interested parties (3.7)

Note 1 to entry: Adequate crisis communication can also protect the organization's (3.13) reputation and brand and maintain its public image.