Cloud Incident Response

ISO 22095:2020 Chain of custody - General terminology and models

  • 1.  ISO 22095:2020 Chain of custody - General terminology and models

    Posted Nov 02, 2020 03:24:00 PM
    Hi All,

    ISO just issued ISO 22095:2020 Chain of custody - General terminology and models


    This document defines a framework for a chain of custody by providing:

    - a consistent generic approach to the design, implementation, and management of chains of custody;

    - harmonized terminology;

    - general requirements for different chain of custody models;

    - general guidance on the application of the defined chain of custody models, including initial guidance on the circumstances under which each chain of custody model might be appropriate.

    This document is applicable to all materials and products. It does not apply to services as final outputs.

    This document can be used by any organization operating at any step in a supply chain, as well as by standard-setting organizations as a reference point for a specific chain of custody standards.

    This document can enhance the transparency of specific claims regarding materials or products and thereby support the reliability of these claims. It is not intended to be used on its own to make or verify such claims.

    This document is not, on its own, able to support claims about an organization's materials or products. This is misleading, especially to consumers and other end customers, as the existence of a chain of custody system alone does not specify the characteristics or the conditions under which materials or products are produced. This document includes requirements and guidance regarding this issue.

    You can buy this standard at: https://www.iso.org/standard/72532.html

    You can find the preview here: https://www.iso.org/obp/ui/#iso:std:iso:22095:ed-1:v1:en

    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------