Acronym: ISO
Established: 1947
Address: Chemin de Blandonnet 8, 1214 Vernier, Geneva, Switzerland
Website: https://www.iso.org/iso/home.html
Stakeholder group: International and regional organisations
ISO is an international non-governmental organisation (NGO) composed of 165 national standard-setting bodies that are either part of governmental institutions or mandated by their respective governments. Each national standard-setting body therefore represents a member state. After receiving a request from a consumer group or an industry association, ISO convenes an expert group tasked with creating a particular standard through a consensus process. ISO develops international standards across a wide range of industries, including technology, food, and healthcare, to ensure that products and services are safe, reliable, of good quality, and ultimately, facilitate international trade. As such, it acts between the public and the private sector. To date, ISO has published more than 22,000 standards.
Digital activities
A large number of the international standards and related documents developed by ISO are related to information and communications technologies (ICTs), such as the Open Systems Interconnection (OSI) created in 1983; it established a universal reference model for communication protocols. The organisation is also active in the field of emerging technologies including blockchain, the internet of things (IoT), and artificial intelligence (AI).
The standards are developed by various technical committees dedicated to specific areas including information security, cybersecurity, privacy protection, AI, and intelligent transport systems. ISO contributes to all of the sustainable development goals (SDGs). Here you can see the number of ISO standards that apply to each SDG.
Digital policy issues
Artificial intelligence
The joint technical committee of ISO and the International Electrotechnical Commission (IEC) for AI is known as ISO/ IEC JTC1/SC 42 and is responsible for the development of standards in this area. To date, it has published one standard specifically pertaining to AI with 18 others in development.
ISO/IEC TR 24028 provides an overview of trustworthiness in AI systems, detailing the associated threats and risks and addresses approaches on availability, resiliency, reliability, accuracy, safety, security, and privacy. The standards under development include those that cover concepts and terminology for AI (ISO/IEC 22989), bias in AI systems and AI-aided decision-making (ISO/IEC TR 24027), AI risk management (ISO/IEC 23894), a framework for AI systems using machine learning (ML) (ISO/IEC 23053), and the assessment of ML classification performance (ISO/IEC TS 4213).
Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Cloud computing
ISO and the International Electrotechnical Commission (IEC) also have a joint committee for standards related to cloud computing, which currently has 19 published standards and a further 7 in development.
Of those published, two standards of note include ISO/ IEC 19086-1, which provides an overview, foundational concepts, and definitions for a cloud computing service level agreement framework, and ISO/IEC 17789, which specifies the cloud computing reference architecture.
Standards under development include those on health informatics (ISO/TR 21332.2); the audit of cloud services (ISO/IEC 22123-2.2); and data flow, categories, and use (ISO/IEC 19 944 -1). Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Internet of things
Recognising the ongoing developments in the field of IoT, ISO has a number of dedicated standards both published and in development, including those for intelligent transport systems (ISO 19079), future networks for IoT (ISO/IEC TR 29181-9), unique identification for IoT (ISO/ IEC 29161), Internet of Media Things (ISO/IEC 23093-3), trust-worthiness of IoT (IS O/IEC 30149), and industrial IoT systems (ISO/IEC 30162). IoT security is addressed in standards such as ISO/IEC 27001 and ISO/IEC 27002, which provide a common language for governance, risk, and compliance issues related to information security.
In addition, there are seven standards under development, some of which provide a methodology for the trustworthiness of an IoT system or service (ISO/IEC 30147), a trustworthiness framework (ISO/IEC 30149), the requirements of an IoT data exchange platform for various IoT services (ISO/IEC 30161), and a real-time IoT framework (ISO/IEC 30165). Up-to-date information on the ISO and IEC joint technical committee for IoT (e.g. scope, programme of work, contact details) can be found on the committee page.
Telecommunication infrastructure
ISO’s standardisation work in the field of telecommunications infrastructure covers areas such as planning and installation of networks (e.g. ISO/IEC 14763-2 and ISO/IEC TR 14763-2-1), corporate telecommunication networks (e.g. ISO/IEC 17343), local and metropolitan area networks (e.g. ISO/IEC/IEEE 8802-A), private integrated telecommunications networks (e.g. ISO/ IEC TR 14475), and wireless networks. Next-generation networks – packet-based public networks able to provide telecommunications services and make use of multiple quality of service enabled transport technology – are equally covered (e.g. ISO/IEC TR 26905).
ISO also has standards for the so-called future networks, which are intended to provide futuristic capabilities and services beyond the limitations of current networks, including the internet.
Up-to-date information on the joint ISO and IEC technical committee that develops these standards (e.g. scope, programme of work, contact details) can be found on the committee page.
Blockchain
ISO has published three standards on blockchain and distributed ledger technologies: ISO/TR 23455 gives an overview of smart contracts in blockchain and distributed ledger technologies, ISO/TR 23244 tackles privacy and personally identifiable information protection, and ISO 22739 covers fundamental blockchain terminology respectively.
ISO also has a further ten standards on blockchain in development. These include those related to security risks, threats, and vulnerabilities (ISO/TR 23245.2); security management of digital asset custodians (ISO/TR 23576); taxonomy and ontology (ISO/TS 23258); legally- binding smart contracts (ISO/TS 23259); and guidelines for governance (ISO/TS 23635).
Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Emerging technologies
ISO develops standards in the area of emerging technologies. Perhaps the largest number of standards in this area are those related to robotics. ISO has more than 40 different standards either published or in development that cover issues such as collaborative robots (e.g. ISO/TS 15066), safety requirements for industrial robots (e.g. ISO 10218-2), and personal care robots (e.g. ISO 13482).
Autonomous or so-called intelligent transport systems (ITS) standards are developed by ISO’s ITS Technical Committee and include those for forward vehicle collision warning systems (ISO 15623) and secure connections between trusted devices (ISO/TS 21185).
Standards are also being developed to address the use of virtual reality in learning, education, and training (e.g. ISO/ IEC 23843) and the display device interface for augmented reality (ISO/IEC 23763).
Encryption
As more and more information (including sensitive personal data) is stored, transmitted, and processed online, the security, integrity, and confidentiality of such information become increasingly important. To this end, ISO has a number of standards for the encryption of data. For example, ISO/IEC 18033-1, currently under development, addresses the nature of encryption and describes certain general aspects of its use and properties. Other standards include ISO/IEC 19772, which covers authenticated encryption; ISO/IEC 18033-3, which specifies encryption systems (ciphers) for the purpose of data confidentiality; and ISO 19092, which allows for the encryption of biometric data used for authentication of individuals in financial services for confidentiality or other reasons.
ISO also has standards that focus on identity-based ciphers, symmetric and asymmetric encryption, public key infrastructure, and many more related areas.
Data governance
Big data is another area of ISO standardisation, and around 80% of related standards are developed by the ISO/IEC AI committee. The terminology for big-data-related standards is outlined in ISO/IEC 20546, while ISO/ IEC 20547-3 covers big data reference architecture. ISO/IEC TR 20547-2 provides examples of big data use cases with application domains and technical considerations. ISO/IEC TR 20547-5 details a roadmap of existing and future standards in this area. A further eight standards are in development and include those for big data security and privacy (ISO/IEC 27045), terminology used in big data within the scope of predictive analytics (ISO 3534-5), and data science life cycle (ISO/TR 23347).
Up-to-date information on the technical committee (e.g. scope, programme of work, contact details) can be found on the committee page.
Digital identities
Digital signatures that validate digital identities help to ensure the integrity of data and the authenticity of particulars in online transactions. This, therefore, contributes to the security of online applications and services. Standards to support this technology cover elements such as anonymous digital signatures (e.g. ISO/IEC 20008-1 and ISO/IEC 20008-2); digital signatures for healthcare documents (e.g. ISO 17090-4 and ISO 17090-5); and blind digital signatures, which is where the content of the message to be signed is disguised, used in contexts where, for example, anonymity is required. Examples of such standards are ISO 18370-1 and ISO/IEC 18370-2.
Privacy and data protection
Privacy and data protection in the context of ICTs is another area covered by ISO’s standardisation activities. One example is ISO/IEC 29101, which describes a privacy architecture framework. Others include those for privacy-enhancing protocols and services for identification cards (ISO/IEC 19286); privacy protection requirements pertaining to learning, education, and training systems employing information technologies (ISO/IEC 29187-1); privacy aspects in the context of intelligent transport systems (ISO/TR 12859); and security and privacy requirements for health informatics (ISO/TS 14441).
ISO has developed an online browsing platform that provides up-to-date information on ISO standards, graphical symbols, publications, and terms and definitions.
Future of meetings
ISO’s meetings take place face-to-face, hybrid, or virtually. This is reflected in the ISO meeting calendar. ISO’s governance groups are also meeting face-to-face, hybrid, or virtually.
Social media channels
Facebook @isostandards
Instagram @iisostandards
LinkedIn @isostandards
Twitter @isostandards
YouTube @iso