iso-14001-sdg-dqs-Ecosystem and Healthy Environment. Concepts and Nature Background. Tropical Rainfo

Consideration of Climate Change in ISMS

DQS Hong Kong

Founded in 1985 by the German Institute for Standardisation (DIN) and the German Society for Quality (DGQ), DQS is one of the world's most established independent management system certification bodies. DQS is a founding member of the International Certification Network (IQNet) and holds accreditations from the German Accreditation Body (DAkkS) alongside over 100 international accreditations, operating across more than 60 countries and regions.
Apr 30 , 2024

Amendment to ISO 27001 Standard

As a commitment to address climate change as stated in the ISO London Declaration, an amendment has been made by ISO and IAF to Chapter 4 of the Harmonized Structure (Appendix 2 of the Annex SL in the ISO/IEC Directives Part 1 Consolidated ISO Supplement). ISO 27001 is one of standards being affected. You can click here to learn more about it. 

 

Understanding the organization's context and the needs and expectations of interested parties is already required and explained in Chapter 4 of the ISO standard's Harmonized Structure. The additional step needed is to ensure that climate change is consistently considered during this analysis from now.

What should be considered in an ISMS under ISO 27001?

 

There is no standardized approach in the consideration of climate change in an information security management system under ISO 27001. For reference, the following is from a whitepaper issued by IQNet.

 

  • Physical Security and Infrastructure:
    Climate change can lead to more frequent and severe weather events like floods, storms, or wildfires, which can physically threaten IT infrastructure, thus additional considerations for protecting physical assets against these environmental threats may be required.

 

  • Disaster Recovery and Business Continuity:
    Risks related to environmental disasters may require a more robust disaster recovery and business continuity planning. If certified organizations consider this as a significant aspect, the ISMS should incorporate strategies for maintaining information security in the event of disruptions caused by climate-related disasters.

 

  • Supply Chain Security:
    Climate change can disrupt supply chains, including those for IT hardware and services. If relevant, the ISMS should account for these risks, ensuring that information security is not compromised by supply chain vulnerabilities.

 

  • Energy Management and Efficiency:
    As a response to climate change, there is a growing emphasis on energy efficiency and sustainability in IT operations. This may include the use of green data centers, energy-efficient hardware, and sustainable IT practices.

 

  • Regulatory Compliance and Reporting:
    With an increasing focus on sustainability and environmental impact, new regulations and reporting requirements related to climate change can emerge. Certified organizations must ensure compliance with these regulations, particularly those that have implications for data management and security.

 

  • Data Center Location and Design:
    The choice of location and design of data centers can be influenced by climate change considerations, such as areas less prone to natural disasters or designs that minimize environmental impact while ensuring security and availability.

 

About IQNet

  • IQNet Association, The International Certification Network, is an association of sizable certification bodies in a large number of countries.
  • IQNET Partners worldwide certification activities include more than 360,000 valid management system certificates issued in the world.
  • Around 1/5 of all management systems certificates were collectively issued by IQNET Partners.
  • DQS was one of the founders of IQNet.

 

 

Provided by DQS

Author

DQS Hong Kong

DQS – Leveraging Quality, Driving Success.

 

DQS empowers organizations worldwide to build trust, drive innovation, and achieve sustainable growth by certifying the future of business. Founded in 1985, DQS has grown into a global leader in the assessment and certification of management systems, with a team of 3,000 highly qualified auditors delivering over 130,000 audit days per year in more than 60 countries. Through internationally recognized certifications across 200+ standards, DQS helps businesses manage risks, ensure compliance, and unlock new opportunities in an evolving regulatory and business landscape.

 

Thinking beyond compliance, DQS is a trusted partner for digitalization, automation, and sustainability leadership. The company’s expertise covers a wide range of areas, spanning from cybersecurity and AI governance to ESG compliance, supply chain management, medical device safety, and future mobility, delivering real value to industries in their pursuit of resilient, sustainable, and intelligent systems. By leveraging advanced auditing methodologies, predictive analytics, and real-time insights, DQS supports organizations to future-proof their operations while demonstrating their commitment to excellence and responsible business practices.

You Might Also Enjoy These Reads

Discover more articles that dive deep into related themes and ideas.
Blog

Comparative Product Carbon Footprint Project Helps Fedrigoni Meet Client ESG Demands

Read more
Blog

World's Largest Green Methanol Project Achieves ISCC EU Certification

Read more
Blog

SSCI Recognition of Sedex SMETA: Significance and Benefits for Organizations

Read more