Show Notes
In this episode of the ASIAL Security Insider Podcast, we speak with Matthew Curtis, one of the authors and a principal driver of the new ISO 22340 Security and Resilience — Protective Security — Guidelines for an Enterprise Protective Security Architecture and Framework, the first-ever standard providing guidance on protective security. This new standard has been developed and completed within the auspices of the International Organization for Standardization. The draft has now passed the final ballot – the process of resolving final editorial matters, conducting the final edit, and, ultimately, publication will then follow.
In this podcast, we discuss how the standard is designed to meet a pressing need for organisations to adopt enterprise governance arrangements, enabling formulation implementation of all security controls coordinated within a single framework and strategically aligned with the business of the organisation.
ISO 22340 is the first international standard on protective security and following its planned adoption as an Australian standard, the first of its kind here in Australia as well. Matthew went to great lengths to ensure that he explained the development and deployment of this standard was a team effort, stating, “I owe a great debt of gratitude to the team of professionals who have given so much of their time, knowledge and intellectual rigour to the project. These include Jason Brown, Head of Delegation for Australia to ISO/TC 292, Anna Harris, Chair of the Standards Australia committee MB-025 Security and Resilience, Alex Webling, Julian Talbot, Adam Incher, Matt Warmington, David Harding and Robert Gore, and more latterly, Vern Amey. Also of great value were the contributions and support of colleagues on the project team representing France, United States of America, Norway, Japan, Sweden, Republic of Korea and United Kingdom.”
More from ASIAL Security Insider
Cybersecurity professionals spend enormous amounts of time and money building sophisticated systems designed to keep attackers out. But attackers do not always need to defeat the technology. Sometimes, they simply need to convince a person to open the door.
In Part One, we explored the key findings from ASIAL’s landmark Security 2030 report, discussing regulatory reform, procurement challenges, industry visibility and the structural issues that must be addressed if the sector is to meet the demands of the future.
Australia’s private security industry is entering a period of significant change. New technologies, evolving threats, workforce challenges, regulatory reform and increasing expectations around professionalisation are reshaping what security will look like over the next five years.
Australia’s critical infrastructure operators are entering a new phase of security and risk management. With enhanced obligations under the Security of Critical Infrastructure (SOCI) Act, rapidly advancing artificial intelligence, and growing supply chain vulnerabilities, organisations must rethink how they identify, manage, and respond to emerging threats.
Crowded public spaces present a unique security challenge. They must remain safe and resilient while also feeling open, welcoming and accessible.