Specification for management systems for supply chain security (ISO 28000)

Introduction of a security management system should be a strategic decision by the organization.

The organization’s needs and objectives, security requirements, processes used for that purpose and the organization’s size and structure influence the design and implementation of a security management system.

We assume that implementation of the security management systems shall be tailored to the needs of the organization, that is, a simple situation requires a simple solution.

This standard can be used in combination with more specific security standards or (legal) security requirements. We can implement the standard separately or in combination with ISO 20858 Maritime Port Facility Security Assessments and Security Plan.

Who for?

Commercial companies, government agencies, non-profit organizations, security companies.

When is it required?

In processes with financial risks and risks with regard to the privacy of data.

Process steps

Initially, a phase 1 study is conducted where system documentation is examined to see whether the system meets all requirements to comply. The 2nd phase investigates implementation of the system.