ISO 22300-2025 PDF

Full title and description

ISO 22300:2025 — Security and resilience — Vocabulary. This International Standard defines the core terms and definitions used across ISO/TC 292 security and resilience standards to provide a consistent, common language for security, resilience, business continuity, emergency management and related domains.

Abstract

This edition (4th) of ISO 22300 provides a concise vocabulary of generic terms related to security and resilience, reorganized into three main categories (terms related to security and resilience; terms related to risk; and terms related to management systems). The 2025 edition focuses on commonly used, generic definitions and reduces highly specific entries so the document is shorter and easier to use.

General information

• Status: Published.
• Publication date: 6 November 2025.
• Publisher: International Organization for Standardization (ISO).
• ICS / categories: 01.040.03 (Services — Safety / rescue / protection); 03.100.01 (General standards).
• Edition / version: Edition 4 (2025).
• Number of pages: 16 pages.

Key bibliographic details and lifecycle (replacement of the 2021 edition) are recorded on the ISO record for the standard.

Scope

ISO 22300:2025 defines terms related to security and resilience topics so that ISO/TC 292 standards (and other stakeholders) share a common vocabulary. It is intended to cover generic terms used across the ISO 223xx family while leaving highly specific, single-standard terminology to those individual standards. The document is structured to make common terms easy to find and apply consistently.

Key topics and requirements

• Standardised definitions for core security and resilience concepts (e.g., resilience, crisis, incident, emergency, alert, recovery).
• Definitions for risk-related concepts (risk, likelihood, consequence, risk treatment, residual risk).
• Management-system terminology aligned with ISO management‑system vocabulary (documented information, nonconformity, competent, top management, audit).
• Organisation into three subclauses: 3.1 terms related to security and resilience, 3.2 terms related to risk, 3.3 terms related to management systems.
• Editorial requirement: focus on generic, widely applicable definitions and removal of highly specific entries to improve clarity and usability.

The 2025 edition reduced the number of entries and reworked definitions to be more generic and portable across the committee's portfolio.

Typical use and users

This vocabulary is used by standards developers, national standards bodies, consultants, auditors, emergency managers, business continuity and resilience practitioners, public authorities, and organisations implementing or assessing security/resilience and BCMS frameworks. It is a normative reference for many ISO/TC 292 documents and is used to ensure consistent interpretation across standards and implementations.

Related standards

Commonly used alongside other ISO 223xx series standards such as ISO 22301 (Business continuity management systems — Requirements), ISO 22313 (guidance on BCMS), ISO 22316 (Organizational resilience), ISO 22320 (Incident management), and other sector or subject-specific standards in the security and resilience portfolio.

Keywords

Security, resilience, vocabulary, terminology, business continuity, risk, incident, emergency, recovery, management system.

FAQ

Q: What is this standard?

A: ISO 22300:2025 is the 4th edition of the international vocabulary (terms and definitions) for security and resilience maintained by ISO/TC 292. It provides a common language for the ISO 223xx family and related work.

Q: What does it cover?

A: It covers generic terms used across security, resilience, risk and management‑system topics—grouped into terms related to security and resilience, risk, and management systems—intended for broad, cross‑standard usage. The 2025 edition focuses on commonly used, generic definitions and omits highly specific single‑standard terms.

Q: Who typically uses it?

A: Standards bodies, organisations developing or implementing resilience and business continuity arrangements, emergency management professionals, auditors and trainers reference ISO 22300 to ensure consistent terminology across policies, procedures and standards.

Q: Is it current or superseded?

A: Current. ISO 22300:2025 (4th edition) was published in November 2025 and replaces the previous (2021) edition.

Q: Is it part of a series?

A: Yes. ISO 22300 is the vocabulary document that supports the ISO 223xx family (security, resilience and business continuity standards) and is commonly referenced by other standards in that series.

Q: What are the key keywords?

A: Security; resilience; vocabulary; terminology; business continuity; risk; incident; emergency; recovery; management system.