BS PAS 1192-5:2015

BS PAS 1192-5:2015 specifies requirements for the security-mindedmanagement of projects utilizing digital technologies,associated control systems, for example buildingmanagement systems, digital built environments andsmart asset management. It outlines security threats toinformation during asset:

• conception, strategy and briefing;
• procurement;
• design;
• construction;
• commissioning and handover;
• operation and maintenance;
• performance management;
• change of use/modification; and
• disposal/demolition.

It explains the need for, and application of,trustworthiness and security controls throughout a builtasset's lifecycle (including the full project lifecycle) todeliver a holistic approach encompassing:

• safety;
• authenticity;
• availability (including reliability);
• confidentiality;
• integrity;
• possession;
• resilience; and
• utility.

This PAS addresses the steps required to create andcultivate an appropriate safety and security mindsetand culture across many partners, including the need tomonitor and audit compliance.It provides a foundation to support the evolutionof future digital built environments, for exampleintelligent buildings, infrastructure and smart cities,but does not detail technical architectures for theirimplementation. While the processes contained withinit may be applicable to other data managementsystems, this PAS does not specifically address issuesrelating to these systems.This PAS is intended for use by asset owners or, within aproject utilizing digital technologies, the employer. It willalso be of interest and relevance to those organizationsand individuals employed by an asset owner andinvolved in the design, construction, maintenance andmanagement of built assets, especially those who wish toprotect their commercial or security-related informationand intellectual property.The approach outlined in this PAS is applicable to anybuilt asset or portfolio of assets where asset informationis created, stored, processed and viewed in digital form.It is also applicable to the capture of digital survey dataas part of day-to-day asset management processes or inanticipation of a future project.Cross References:BS ISO 55000PAS 1192-2:2013PAS 1192-3:2014BS 1192-4:2014 BS 1192:2007BS 7858:2012BS ISO 15686-4:2014BS ISO 29481-1:2010BS ISO 29481-2:2012BS ISO 55000:2014BS ISO 55001:2014 BS ISO 55002:2014BS ISO/IEC 27001:2013PD ISO/TS 12911:2012PAS 555:2013PAS 754:2014PAS 1192-2:2013PAS 1192-3:2014Data Protection Act 1998Environmental Information Regulations 2004Freedom of Information Act 2000Serious Organised Crime and Police Act 2005Official Secrets Act 1989Computer Misuse Act 1990Freedom of Information (Scotland) Act 2002anning and Compulsory Purchase Act 2004Privacy and Electronic Communications Regulations 2003Public Records Acts 1958 and 1967Re-use of Public Sector Information Regulations 2005BS 8541-2:2011BS ISO/IEC 29100:2011