ISO 28000 – Specification for security
management systems for supply chain

ISO 28000, Specification for security management systems for the supply chain

ISO/PAS 28000 (Specification for security management systems for the supply chain) is an International Organization for Standardization publicly available specification, on requirements of a security management system particularly dealing with security assurance in the supply chain.

ISO 28000:2007 was developed to codify security operations, within the broader supply chain management system.

The development of an international standard addressing security risk management, improves the broader interface with existing enterprise risk management in a common integrated platform.

ISO 28000:2007 was developed in such a way, that organizations could apply the standard for supply chains, in a context of various degrees of complexity.

The general needs for organizations to adopt ISO 28000 are mainly:

  • developing a security management system,
  • internal compliance with objectives of a security management policy,
  • external compliance with best practice benchmarks,
  • Notifying the Organization as ISO certified.

ISO 28000:2007 benefits include, but are not limited to:

  • Integrated enterprise resilience
  • Systematised management practices
  • Enhanced credibility and brand recognition
  • Aligned terminology and conceptual usage
  • Improved supply chain performance
  • Benchmarking against internationally recognisable criteria
  • Greater compliance processes

Con Cert Quality Management guarantees an accredited certification, giving to Organizations the suitable passport for International market, ensuring with accuracy and independency the principles and rules established by the standard ISO 28000:2007.

ISO 28000 – Introduction Course

ISO 28000 Introduction training course enables you to comprehend the basic concepts of a Supply Chain Security Management System. By attending the ISO 28000 Introduction course, you will understand the importance of a Supply Chain Security Management System and the benefits that businesses, society and governments can obtain.

ISO 28000 – Foundation Course

ISO 28000 Foundation training enables you to learn the basic elements to implement and manage a Supply Chain Security Management System (SCSMS) as specified in ISO 28000. During this training course, you will be able to understand the different modules of a SCSMS, including SCSMS policy, procedures, performance measurements, management commitment, internal audit, management review and continual improvement.

ISO 28000 – Lead Implementer Course

ISO 28000 Lead Implementer training enables you to develop the necessary expertise to support an organization in establishing, implementing, managing and maintaining a Supply Chain Security Management System (SCSMS) based on ISO 28000. During this training course, you will also gain a thorough understanding of the best practices of Supply Chain Security Management Systems and be able to improve efficiency in managing potential security risks and their impacts in an organization`s supply chain.

ISO 28000 – Lead Auditor Course

ISO 28000 Lead Auditor training enables you to develop the necessary expertise to perform a Supply Chain Security Management System (SCSMS) audit by applying widely recognized audit principles, procedures and techniques. During this training course, you will acquire the necessary knowledge and skills to plan and carry out internal and external audits in compliance with ISO 19011 and ISO/IEC 17021-1 certification process.