Overview
ISO 28000 sets out requirements for a security management system covering the entire supply chain, addressing threats such as terrorism, fraud, and piracy. It applies to manufacturers, logistics providers, ports, and any organization involved in moving or storing goods.
Key Requirements
- Supply chain security policy and risk assessment methodology
- Identification of security threats across sourcing, transport, and storage
- Security plans, procedures, and physical/procedural controls
- Incident response, crisis management, and business recovery planning
- Monitoring, measurement, and management review of security performance
Benefits
- Greater resilience against disruption, theft, and smuggling
- Improved trust with trading partners, insurers, and customs authorities
- Streamlined coordination with other security and safety standards
- Enhanced visibility and control over extended supply chains
How IASS Supports You
IASS performs supply chain risk and gap assessments, helps design security plans and controls aligned with ISO 28000, and supports internal audits ahead of external review. IASS training programs build in-house capability for maintaining and improving the security management system over time.