ISO 55000

What is ISO 55000?

ISO 55000 is the international series of standards for asset management, which defines asset management as the coordinated activity of an organisation to realise value from its assets. The series consists of ISO 55000 (overview, principles and terminology), ISO 55001 (the certifiable requirements for an asset management system) and ISO 55002 (guidelines), supplemented by more specific guidance documents. It is used above all by organisations that run capital-intensive plant and infrastructure: grid operators, railways, roads, water utilities and the process industry.

🧠 What does asset management mean in ISO 55000?

In IT, asset management often means a list of laptops, licences and servers. ISO 55000 means something much broader. The standard defines an asset as an item, thing or entity that has potential or actual value to an organisation: a transformer, a pumping station, a bridge, a production line, but also software or data. Asset management is about balancing performance, cost and risk across the whole life cycle, from design and acquisition through operation and maintenance to disposal.

The 2014 edition and the guidance in ISO 55002 set out four fundamentals that run through the series:

• Value — assets exist to deliver value to the organisation and its stakeholders, not for their own sake
• Alignment — organisational objectives are translated into technical and financial decisions, plans and activities
• Leadership — leadership and culture determine whether value is actually realised
• Assurance — the organisation demonstrates that assets fulfil their required purpose, through measured performance, reviews and audits

The difference from an asset inventory is therefore fundamental: an inventory records what you have, whereas ISO 55000 is about which decisions you take to get the most value out of it.

🕰️ How did ISO 55000 come about?

Dutch electricity and gas grid operators were already working with PAS 55 before 2014. The Dutch technical agreement NTA 8120 was derived from it and still forms the basis of their certification.

📚 How is the ISO 55000 series structured?

ISO 55001:2024 follows ISO’s Harmonized Structure, the same clause layout as ISO 9001, ISO 14001 and ISO 27001. That makes it straightforward to integrate into an existing management system. New compared with 2014 are, among other things, a requirement for a decision-making framework (4.5), a dedicated clause for the strategic asset management plan (6.2.1), requirements on knowledge (7.7) and predictive action replacing preventive action (10.3).

🎯 What are the key concepts of ISO 55001?

• Asset management policy — top management’s principles and intentions, consistent with the organisational strategy
• SAMP (Strategic Asset Management Plan) — translates organisational objectives into asset management objectives and sets out how decisions are made; it may be spread across several documents
• Asset management plans — concrete plans per asset group covering maintenance, renewal and investment
• Decision-making framework — what does value mean to the organisation, and which criteria are used to trade off performance, cost and risk?
• Life cycle — from need and design through operation and maintenance to disposal
• Data and knowledge — reliable asset data and retaining the knowledge of experienced engineers

In practice, risks are often assessed using the ISO 31000 approach, which connects the asset management system to the organisation’s wider risk management.

🏭 How does ISO 55000 relate to maintenance?

Maintenance is the largest operational part of asset management, but the two are not the same. ISO 55001 does not prescribe a maintenance method; it requires you to justify why you choose a particular strategy. Techniques such as reliability-centred maintenance, FMEA, condition monitoring and predictive maintenance are used to do so. A CMMS or the maintenance module of an ERP system records work orders, failures and costs, providing the data used to adjust asset management plans.

🔐 How does it differ from asset management in OT security?

In OT security, asset management means visibility of every device on the network: which PLCs, firmware versions and connections are present. That is a security control, familiar from IEC 62443-2-1 and from Annex A 5.9 of ISO 27001, and is often implemented with asset discovery tools.

The two worlds need each other. A cyber risk on an ageing controller is also an asset risk, and the decision to replace a legacy system belongs in the asset management plan.

🧱 Who uses ISO 55000 in the Netherlands?

• Grid operators — Dutch electricity and gas network operators are legally required to run a quality management system; they certify against NTA 8120, based on PAS 55, through Netbeheer Nederland’s NN-CAM certification scheme
• Rijkswaterstaat — the national roads and waterways authority is aligning the management of motorways, waterways and the main water system with ISO 55001, seeking an optimal balance between performance, cost and risk
• ProRail — the rail infrastructure manager has been rebuilding its asset management system since 2009, including risk-based maintenance, and operates in line with ISO 55000
• Water boards and drinking water companies — use the series as a reference framework for pumping stations, treatment plants and pipe networks
• Industry and service providers — maintenance contractors that manage assets on behalf of clients obtain ISO 55001 certification

Many of these organisations operate critical infrastructure. NEN coordinates the Dutch contribution to ISO/TC 251.

🔧 How do you implement ISO 55001 step by step?

1. Determine the context — which assets, stakeholders, legal requirements and risks are relevant?
2. Set the policy and decision-making framework — define what value means and which criteria apply
3. Write the SAMP — translate organisational objectives into measurable asset management objectives
4. Get assets and data in order — register, condition, criticality and history; link this to the OT asset inventory
5. Draw up asset management plans — maintenance, renewal and investment per asset group, based on risk
6. Arrange competence and knowledge — roles, training and retention of specialist know-how
7. Measure, audit and improve — performance indicators, internal audits and management review following PDCA

Certificates issued against ISO 55001:2014 become invalid on 31 July 2027, so certified organisations must complete the transition to the 2024 edition before then.

❓ Frequently asked questions

What is the difference between ISO 55000 and ISO 55001?

ISO 55000 provides the overview, principles and terminology of asset management. ISO 55001 contains the requirements for an asset management system and is the standard against which an organisation is certified. ISO 55002 then explains how to meet those requirements.

Can an organisation be certified to ISO 55000?

No, certification is against ISO 55001, not ISO 55000. An accredited certification body assesses whether the asset management system meets the requirements of ISO 55001. Organisations still holding a certificate to the 2014 edition must move to ISO 55001:2024 by 31 July 2027.

Is ISO 55000 the same as IT asset management?

No, ISO 55000 is about realising value from all kinds of assets across their whole life cycle, with the emphasis on physical plant and infrastructure. IT asset management focuses on hardware, software and licences. A separate series of standards, ISO/IEC 19770, covers IT assets.

What is a SAMP in ISO 55001?

A SAMP (Strategic Asset Management Plan) describes how organisational objectives are translated into asset management objectives and how decisions about assets are made. In ISO 55001:2024 the SAMP has its own clause, 6.2.1. The plan may be spread across several documents.

What is the relationship between ISO 55000 and PAS 55?

ISO 55000 is the international successor to PAS 55, a British specification published by BSI and the Institute of Asset Management in 2004 and revised in 2008. The ISO 55000 series was built on it and published in 2014. The Dutch NTA 8120 for grid operators is also based on PAS 55.

How does ISO 55000 fit with IEC 62443?

ISO 55000 governs how you manage assets across their life cycle, while IEC 62443 governs how you protect industrial control systems against cyberattacks. Both require an up-to-date overview of assets and risk assessments. By weighing cyber risks in the asset management plan, replacements of vulnerable controllers can be scheduled in good time.

📌 In summary

ISO 55000 defines asset management as the coordinated activity to realise value from assets; ISO 55001 is the certifiable standard that builds a management system around it. The series links strategy, maintenance and risk across the whole life cycle, and complements the asset inventory of OT security with the question of which decisions deliver the most value.