Sociologi. Service. Företagsorganisation och företagsledning. Administration. Transport Administration

ISO/TS 17574:2017 provides guidelines for preparation and evaluation of security requirements specifications, referred to as Protection Profiles (PP) in ISO/IEC 15408 (all parts) and in ISO/IEC TR 15446. By Protection Profile (PP), it means a set of security requirements for a category of products or systems that meet specific needs. A typical example would be a PP for On-Board Equipment (OBE) to be used in an EFC system. However, the guidelines in this document are superseded if a Protection Profile already exists for the subsystem in consideration.

ISO/TS 21719-1:2018 describes: - an overall description of the EFC personalization process; - a description of EFC functionality that can be used for personalization. The personalization process takes place within the domain of the entity that is responsible for the application in the OBE.

This document provides guidelines for good practices that can be adopted by any digital platform provider not limited to e-hailing and p-hailing operators for the implementation of work-related road traffic safety management. These practices are intended to reduce death and serious injuries related to road traffic crashes which it can influence.

This document is applicable to any digital platform provider to offer further protection to the platform drivers as well as other road users through the adoption of a proactive approach to manage work-related road risks.

This document is a guidance standard, one of the ISO 39000 series of Road traffic safety management systems standards. ISO 39004 cannot be used for certification purposes but does provide guidance for internal or external audit programmes. Digital platform provider organisations using it can compare their road traffic safety management practices with an internationally recognized benchmark, providing sound principles for effective management and corporate governance.

However, it is recognized that certain markets may require digital platform providers to demonstrate that they have embraced the guidance of ISO 39004. For those organisations, the following approach is recommended.

1. Ensure the business addresses the requirements of ISO 39001, Road traffic safety (RTS) management system — Requirements with guidance for use.

2. Address all recommendations of this document, ISO 39004, Road traffic safety — Good practices for digital platform providers where applicable.

3. Ensure the scope of the ISO 39001 managements system contains reference to ISO 39004

4. Obtain independent certification to ISO 39001.