WHAT IS ISO 28000?

This standard identifies the requirements for a supply chain security management system, relating security management to many other aspects of business management. These include all activities controlled or influenced by organizations that impact supply chain security, which includes the transportation of these goods along the supply chain.

ISO 28000 uses an additional pragmatic approach where the risk levels of your supply chain operations are identified. It enables your organization to execute a risk assessment with supporting management tools (I.e., document controls, key performance indicators, internal audits, and training) and implement the controls in accordance with the risk involved.

The framework of ISO 28000 is structurally very similar to the ISO 14001 Environmental Management Systems (EMS) standard. The environmental aspects identification and evaluation process in EMS is similar to security risk assessment in security management.