What is ISO 19650‑5 about?
ISO 19650 is a series of international standards on information management of buildings and civil engineering works. ISO 19650‑5 is part five of a multi-series of standards on Organization and digitization of information about buildings and civil engineering works.
ISO 19650‑5 specifies the principles and requirements for security-minded information management at a stage of maturity described as building information modelling (BIM) according to the ISO 19650 series and as defined in ISO 19650-1.
ISO 19650‑5 also specifies the security-minded management of sensitive information that is obtained, created, processed and stored as part of, or in relation to, any other initiative, project, asset, product or service.
ISO 19650‑5 addresses the steps required to create and cultivate an appropriate and proportionate security mindset and culture across organizations with access to sensitive information, including the need to monitor and audit compliance.
Who is ISO 19650‑5 for?
ISO 19650‑5 on security-minded management of information is relevant to: 
- Digital engineering and technologies organization
- Information security professionals
Why should you use ISO 19650‑5?
When you share information through the processes specified in ISO 19650-1, it can inadvertently lead to the exposure of sensitive information about a building, facility, or infrastructure asset to people who’ll seek to use it against the public good. Taking a security-minded approach to the organization and digitization of information about buildings and civil engineering works will reduce this risk.
ISO 19650-5 on the security-minded management of information will help reduce the risk of loss, misuse, or modification of sensitive information that could impact the safety, security, and resilience of assets, the built environment, or the services provided by or from them.
ISO 19650-5 on the security-minded management of information will also protect against the loss, theft, or disclosure of commercial information, personal data, and intellectual property and reduce the impacts of security breaches, which include reputational damage, diversion of resources, fines for regulatory breaches, and disruption to day-to-day operational activities.
