Company type | Non-profit distributing incorporated body operating under Royal Charter |
---|---|
Founded | 1901 |
Headquarters | London , United Kingdom |
Number of locations | 90 offices in 31 countries [1] [2] |
Area served | Worldwide |
Products | standards and standards related services |
Revenue | £539.3m (2020) [3] |
Number of employees | 5,237 (2020) [4] |
Website | bsigroup |
The British Standards Institution (BSI) is the national standards body of the United Kingdom. BSI produces technical standards on a wide range of products and services and also supplies certification and standards-related services to businesses.
BSI was founded as the Engineering Standards Committee in London in 1901. [5] [2] It subsequently extended its standardization work and became the British Engineering Standards Association in 1918, adopting the name British Standards Institution in 1931 after receiving a Royal Charter in 1929. [2] In 1998 a revision of the Charter enabled the organization to diversify and acquire other businesses, and the trading name was changed to BSI Group.
The Group now operates in 195 countries. [6] The core business remains standards and standards related services, although the majority of the Group's revenue comes from management systems assessment and certification work. [7]
In 2021, BSI appointed its first female chief executive officer, Susan Taylor Martin. [8]
BSI produces British Standards, and, as the UK's National Standards Body, is also responsible for the UK publication, in English, of international and European standards. BSI is obliged to adopt and publish all European Standards as identical British Standards (prefixed BS EN) and to withdraw pre-existing British Standards that are in conflict. [9] However, it has the option to adopt and publish international standards (prefixed BS ISO or BS IEC).
In response to commercial demands, BSI also produces commissioned standards products such as Publicly Available Specifications, (PASs), Private Standards and Business Information Publications. These products are commissioned by individual organizations and trade associations to meet their needs for standardized specifications, guidelines, codes of practice etc. Because they are not subject to the same consultation and consensus requirements as formal standards, the lead time is shorter.
BSI also publishes standards-related books, CD-ROMs, subscription and web-based products as well as providing training on standards-related issues.
With 80,000 clients, BSI is one of the world's largest certification bodies. It audits and provides certification to companies worldwide who implement management systems standards. BSI also runs training courses that cover the implementation and auditing requirements of national and international management systems standards.
It is independently accredited [10] and assesses a wide range of standards and other specifications including:
Within Testing Services, BSI's best known product in the UK is the Kitemark, a registered certification mark first used in 1903. [2] [5] The Kitemark – which is recognized by 82% of UK adults [11] – signifies products or services which have been assessed and tested as meeting the requirements of the related specification or standard within a Kitemark scheme.
BSI also conducts testing of products for a range of certifications, including for CE marking. CE marking must be applied to a wide range of products intended for sale in the European Economic Area. Frequently manufacturers or importers need a third-party certification of their product from an accredited or 'Notified' body. BSI holds Notified Body status for 15 EU Directives, [12] including construction products, marine equipment, pressurised equipment and personal protective equipment.
BSI also conducts testing for manufacturers developing new products and has facilities to test across a wide range of sectors, including construction, fire safety, electrical and electronic and engineering products.
Within Healthcare, BSI provides regulatory and quality management reviews and product certification for medical device manufacturers in Europe, the United States, Australia, Japan, Taiwan, Canada and China. [13] It is the market leader in the US, the world's biggest healthcare market. [14]
Starting in 1998, BSI Group has adopted a policy of international growth through acquisition as follows: [15]
In 2021, BSI Group, supported by the Construction Products Association, [30] led the development of a system known as BSI Identify, which has been established in response to Dame Judith Hackitt's recommendation that
The built environment sector ... needs to accelerate the adoption of readily available means of providing product traceability. ... [T]here is a strong case for materials and products to carry permanent marking to ensure their identification and traceability...and...a consistent labelling and traceability system. [31]
BSI Identify uses new Digital Object Identifier (DOI) technology "to deliver a unique, constant, and interoperable identifier", known as a BSI UPIN, "which can be assigned to products to help UK manufacturers to directly manage information about their products in the supply chain". [32] The aim of the BSI Identify programme is that "wherever you are with [a] product, you can take a snapshot of the QR code with your mobile device and it will immediately take you to the product technical data sheet. You can see exactly what product it is, you can answer any questions about it, you can see installation advice etc." [33]
|
British Standards (BS) are the standards produced by the BSI Group which is incorporated under a royal charter and which is formally designated as the national standards body (NSB) for the UK. The BSI Group produces British Standards under the authority of the charter, which lays down as one of the BSI's objectives to:
Set up standards of quality for goods and services, and prepare and promote the general adoption of British Standards and schedules in connection therewith and from time to time to revise, alter and amend such standards and schedules as experience and circumstances require.
Business continuity may be defined as "the capability of an organization to continue the delivery of products or services at pre-defined acceptable levels following a disruptive incident", and business continuity planning is the process of creating systems of prevention and recovery to deal with potential threats to a company. In addition to prevention, the goal is to enable ongoing operations before and during execution of disaster recovery. Business continuity is the intended outcome of proper execution of both business continuity planning and disaster recovery.
The ISO 9000 family is a set of five quality management systems (QMS) standards by the International Organization for Standardization (ISO) which help organizations ensure that they meet customer and other stakeholder needs within the statutory and regulatory requirements related to a product or service. The ISO refers to the set of standards as a "family", bringing together the standard for quality management systems and a set of "supporting standards", and their presentation as a family facilitates their integrated application within an organisation. ISO 9000 deals with the fundamentals and vocabulary of QMS, including the seven quality management principles that underlie the family of standards. ISO 9001 deals with the requirements that organizations wishing to meet the standard must fulfill. A companion document, ISO/TS 9002, provides guidelines for the application of ISO 9001. ISO 9004 gives guidance on achieving sustained organizational success.
The ISO 14000 family of standards by the International Organization for Standardization (ISO) relate to environmental management that exists to help organizations (a) minimize how their operations negatively affect the environment ; (b) comply with applicable laws, regulations, and other environmentally oriented requirements; and (c) continually improve in the above.
A management system is a set of policies, processes and procedures used by an organization to ensure that it can fulfill the tasks required to achieve its objectives. These objectives cover many aspects of the organization's operations. For instance, an environmental management system enables organizations to improve their environmental performance, and an occupational safety and health management system enables an organization to control its occupational health and safety risks.
BS 7799 was a British standard "Code of Practice for Information Security Management", first published as such by the British Standards Institution (BSI) in February 1995. Read about the origins of BS 7799 here.
ISO/IEC 20000 is the international standard for IT service management. It was developed in 2005 by ISO/IEC JTC1/SC7 and revised in 2011 and 2018. It was originally based on the earlier BS 15000 that was developed by BSI Group.
The Kitemark is a UK product and service quality trade mark which is owned and operated by the British Standards Institution.
Information security standards are techniques generally outlined in published materials that attempt to protect a user's or organization's cyber environment. This environment includes users themselves, networks, devices, all software, processes, information in storage or transit, applications, services, and systems that can be connected directly or indirectly to networks.
ISO/IEC 27002 is an information security standard published by the International Organization for Standardization (ISO) and by the International Electrotechnical Commission (IEC), titled Information security, cybersecurity and privacy protection — Information security controls.
The ISO/IEC 27000 family comprises information security standards published jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC).
A Publicly Available Specification or PAS is a standardization document that closely resembles a formal standard in structure and format but which has a different development model. The objective of a Publicly Available Specification is to speed up standardization. PASs are often produced in response to an urgent market need.
A technical standard is an established norm or requirement for a repeatable technical task which is applied to a common and repeated use of rules, conditions, guidelines or characteristics for products or related processes and production methods, and related management systems practices. A technical standard includes definition of terms; classification of components; delineation of procedures; specification of dimensions, materials, performance, designs, or operations; measurement of quality and quantity in describing materials, processes, products, systems, services, or practices; test methods and sampling procedures; or descriptions of fit and measurements of size or strength.
British Approvals Service for Cables is an independent accredited certification body headquartered in Milton Keynes, United Kingdom. Here, the organization's dedicated testing laboratory also operates which is believed to be the largest of its type in Europe. BASEC was established in 1971 and principally provides product certification services for all types of cable and wire, ancillary products and management systems within the cable industry. The organization maintains operations throughout the world including Africa, Middle East, America, Asia and Europe.
OHSAS 18001, Occupational Health and Safety Assessment Series, was an international standard for occupational health and safety management systems that was subsequently adopted as a British Standard. Compliance with it enabled organizations to demonstrate that they had a system in place for occupational health and safety. BSI cancelled OHSAS 18001 to adopt ISO 45001. ISO 45001 was published in March 2018 by the International Organization for Standardization. Organizations that are certified to OHSAS 18001 were able to migrate to ISO 45001 by March 2021 to retain a recognized certification.
ISO 50001Energy management systems - Requirements with guidance for use, is an international standard created by the International Organization for Standardization (ISO). It supports organizations in all sectors to use energy more efficiently through the development of an energy Management System. The standard specifies the requirements for establishing, implementing, maintaining, and improving an energy management system, whose purpose is to enable an organization to follow a systematic approach in achieving continual improvement of energy performance, including energy efficiency, energy security, energy use, and consumption.
ISO 20121 is a voluntary international standard for sustainable event management, created by the International Organization for Standardization. The standard aims to help organizations improve sustainability throughout the entire event management cycle.
ISO/IEC 27001 is an international standard to manage information security. The standard was originally published jointly by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) in 2005, revised in 2013, and again most recently in 2022. There are also numerous recognized national variants of the standard. It details requirements for establishing, implementing, maintaining and continually improving an information security management system (ISMS) – the aim of which is to help organizations make the information assets they hold more secure. Organizations that meet the standard's requirements can choose to be certified by an accredited certification body following successful completion of an audit. A SWOT analysis of the ISO/IEC 27001 certification process was conducted in 2020.
ISO/IEC 27017 is a security standard developed for cloud service providers and users to make a safer cloud-based environment and reduce the risk of security problems. It was published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC) under the joint ISO and IEC subcommittee, ISO/IEC JTC 1/SC 27. It is part of the ISO/IEC 27000 family of standards, standards which provides best practice recommendations on information security management. This standard was built from ISO/IEC 27002, suggesting additional security controls for the cloud which were not completely defined in ISO/IEC 27002.