What It Is

ISO/IEC 27032:2023, titled Cybersecurity – Guidelines for Internet Security, is an international guidance standard providing non-certifiable recommendations for managing Internet security risks. It focuses on cyberspace as a multi-layered ecosystem, emphasizing collaborative, risk-based approaches to connect information security, network security, Internet security, and critical infrastructure protection.

Key Components

• Core pillars: stakeholder roles, risk assessment, incident management, technical/organizational controls.
• Thematic domains like awareness, vulnerability management, and supply-chain resilience.
• Built on PDCA cycle and aligned with ISO 27001/27002.
• Annex A maps threats to ISO 27002 controls; no fixed control count.

Why Organizations Use It

Adoption reduces breach impacts, enhances resilience, and builds stakeholder trust. It supports regulatory alignment (e.g., NIS2), cuts costs via efficient risk prioritization, and provides competitive edges in digital markets through demonstrated ecosystem collaboration.

Implementation Overview

Phased approach: gap analysis, risk modeling, control deployment, continuous monitoring. Suited for all sizes with online presence; integrates into existing ISMS. No certification, but audits via aligned standards like ISO 27001.

What It Is

BREEAM (Building Research Establishment Environmental Assessment Method) is a science-led sustainability certification framework for the built environment. It assesses environmental, social, and resilience performance across buildings, infrastructure, and communities throughout their lifecycle. The credit-based methodology weighs performance in key categories to produce ratings from Pass to Outstanding.

Key Components

• **10 core categoriesManagement, Health & Wellbeing, Energy, Transport, Water, Materials, Waste, Land Use & Ecology, Pollution, Innovation.
• Hundreds of credits with prerequisites, weighted scoring, and evidence requirements.
• Built on third-party assurance via licensed assessors and BRE audits.
• Certification model includes design-stage and post-construction verification, with In-Use for operations.

Why Organizations Use It

• Drives operational savings (e.g., 22-33% energy reduction), asset value uplift (up to 30%), and ESG alignment.
• Meets planning incentives, investor demands, and EU Taxonomy.
• Mitigates risks in regulation, climate resilience, and greenwashing.
• Builds tenant satisfaction and market differentiation.

Implementation Overview

• **Phased approachPre-assessment, design integration, construction evidence, certification, In-Use monitoring.
• Involves appointing assessors/APs early, evidence management, training.
• Applies to all sizes, built environment sectors, globally with local adaptations.
• Requires BRE-audited certification. (178 words)