ISO 22372:2025
(Main)Security and resilience — Community resilience — Guidelines for infrastructure resilience
Security and resilience — Community resilience — Guidelines for infrastructure resilience
This document provides guidelines for establishing, maintaining, monitoring and improving infrastructure resilience to help ensure the continuity and robustness of essential services. It supports collaborative decision-making across many stakeholders in diverse organizations. It can be used for engaging stakeholders at all levels responsible for, or having influence on, infrastructure resilience matters. This document is intended to be applicable to all types and sizes of organizations which have a role in infrastructure resilience.
Sécurité et résilience — Résilience collective — Lignes directrices pour la résilience des infrastructures
General Information
Standards Content (Sample)
International
Standard
ISO 22372
First edition
Security and resilience —
2025-11
Community resilience — Guidelines
for infrastructure resilience
Sécurité et résilience — Résilience collective — Lignes directrices
pour la résilience des infrastructures
Reference number
© ISO 2025
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Framework . 3
4.1 General .3
4.2 Objectives and responsibilities .3
4.3 Identifying and assessing capabilities of infrastructure .3
4.4 Setting priorities .5
4.5 Establishing a strategy and plan .6
5 Principles . 7
5.1 General .7
5.2 Principle 1: Clearly defined accountabilities and shared responsibilities .8
5.3 Principle 2: Proactively protected .9
5.4 Principle 3: Environmentally integrated .10
5.5 Principle 4: Socially engaged .11
5.6 Principle 5: Adaptively transforming . 12
5.7 Principle 6: Continually learning and improving . 13
6 Operational processes .13
6.1 General . 13
6.2 Plan: developing and sharing understanding .14
6.2.1 General .14
6.2.2 Collecting evidence .14
6.2.3 Working with and sharing information with others . 15
6.3 Plan: investing in infrastructure resilience .18
6.3.1 General .18
6.3.2 P1A6 Share hazard, risk and return information .18
6.3.3 P1A7 Invest to enhance resilience .18
6.3.4 P2A12 Devise long-term investments .19
6.4 Do: devising and designing ways to improve infrastructure resilience .19
6.4.1 General .19
6.4.2 P2A1 Increase essential safety requirements . 20
6.4.3 P2A2 Exceed basic requirements for critical components . 20
6.4.4 P2A3 Consider interdependencies of systems and systemic risks .21
6.4.5 P2A8 Design infrastructure to fail safely .21
6.4.6 P2A10 Design for multiple scales.21
6.4.7 P3A2 Appropriate use of nature-based solutions .21
6.4.8 P3A5 Use environmentally sustainable resources.21
6.4.9 P3A6 Sustainable use of natural resources . 22
6.5 Do: implementing ways to improve infrastructure resilience . 22
6.5.1 General . 22
6.5.2 P2A4 Secure multiple resilience pathways and controls . 23
6.5.3 P2A5 Take timely action . 23
6.5.4 P2A6 Embed emergency management. 23
6.5.5 P2A7 Consider infrastructure users . 23
6.5.6 P2A9 Implement strategies to overcome systemic weaknesses found by stress
testing .24
6.5.7 P3A1 Minimize environmental exposure and impact .24
6.5.8 P4A4 Focus resources on critical tasks during emergencies .24
6.5.9 P5A2 Create and enhance adaptive capacity . .24
6.5.10 P6A7 Establish redundancy within any monitoring and analysis system .24
6.6 Check: testing ways to improve resilience . 25
iii
6.6.1 General . 25
6.6.2 P6A4 Analyse, learn, and formulate improvements . 25
6.6.3 P6A5 Develop and test strategies to overcome component vulnerabilities . 25
6.7 Check: monitoring infrastructure resilience . 26
6.7.1 General . 26
6.7.2 P1A8 Manage infrastructure resilience performance . 26
6.7.3 P6A3 Monitor and report . 26
6.8 Act: improving practices, norms and management approaches . 26
6.8.1 General . 26
6.8.2 P4A1 Encourage active public participation .27
6.8.3 P4A3 Assess needs and expectations of the public .27
6.8.4 P4A5 Prepare people for disruptive incidents . 28
6.8.5 P5A1 Choose manageable solutions . 28
6.8.6 P5A3 Develop flexible management . 28
6.8.7 P5A4 Enable capacity to extend beyond initial scope . 28
6.8.8 P5A5 Allow for human discretion . 29
6.8.9 P6A6 Maintain and improve competencies . 29
6.9 Act: maintaining operational infrastructure and its natural environment . 29
6.9.1 General . 29
6.9.2 P2A11 Adopt condition-based maintenance . 30
6.9.3 P2A13 Inspect assets after disruptive incidents and near misses . 30
6.9.4 P3A4 Maintain the natural environment . 30
Annex A (informative) Example of a governance framework for infrastructure resilience .31
Bibliography .33
iv
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out through
ISO technical c
...








Questions, Comments and Discussion
Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.