ISO 28001:2007 PDF

Security management systems for the supply chain — Best practices for implementing supply chain security, assessments and plans — Requirements and guidance

Open preview (PDF)

Title (English):

ISO 28001:2007

Security management systems for the supply chain — Best practices for implementing supply chain security, assessments and plans — Requirements and guidance

Document status:: Active
Format:: Electronic (PDF)
Number of pages:: 27
Publication date:: October 23, 2007
Edition:: ISO IS 28001 edition 1 version 1
ICS:: 03.100.01

Delivery type:

Full version25 €Read online 24h10 €Read online 72h15 €

Document language:

enru

Delivery time:Immediate download

Price:25 €

Description (English):

ISO 28001:2007 provides requirements and guidance for organizations in international supply chains to develop and implement supply chain security processes; establish and document a minimum level of security within a supply chain(s) or segment of a supply chain; assist in meeting the applicable authorized economic operator (AEO) criteria set forth in the World Customs Organization Framework of Standards and conforming national supply chain security programmes. In addition, ISO 28001:2007 establishes certain documentation requirements that would permit verification. Users of ISO 28001:2007 will define the portion of an international supply chain within which they have established security; conduct security assessments on that portion of the supply chain and develop adequate countermeasures; develop and implement a supply chain security plan; train security personnel in their security related duties.

Technical details

Technical committee: ISO/TC 292 - Security and resilience
SKU: ISO 28001:2007

Abstract

Overview

ISO 28001:2007 - Security management systems for the supply chain - provides requirements and guidance for organizations in international supply chains to develop, implement and document supply chain security processes. It helps organizations establish a minimum, verifiable level of security for part(s) of a supply chain, produce security assessments and security plans, and train personnel. ISO 28001 supports compliance with World Customs Organization (WCO) SAFE Framework objectives and can assist organizations pursuing Authorized Economic Operator (AEO) recognition.

Key topics and requirements

Scope definition: Define and document the portion of the international supply chain covered (Statement of Coverage).
Security assessment: Conduct formal assessments to identify threat scenarios, vulnerabilities and the potential consequences for people, assets and operations.
Countermeasures: Prioritize and develop countermeasures where vulnerabilities are unacceptable; plan mitigation to reduce likelihood and/or consequences.
Security plan: Produce and implement a documented Security Plan describing measures and responsibilities for the defined scope.
Execution and monitoring: Put the plan into operation, monitor effectiveness and update based on incidents or changes.
Incident response and documentation: Specify actions after security incidents and retain records that permit verification and audits.
Training: Establish a training programme to ensure security personnel can perform assigned duties.
Protection of security information: Manage confidentiality and controlled sharing of sensitive security data.
Annex guidance: Informative annexes illustrate security process models, a risk-assessment methodology and guidance on obtaining advice or certification.

Practical applications

ISO 28001 is practical for organizations that operate across borders and want to manage supply chain security systematically:

Manufacturers, importers, exporters, freight forwarders, carriers, port/terminal operators, warehouses and distributors.
Companies seeking AEO status or to align with national supply chain security programmes.
Internal audit, compliance and security teams establishing documented security processes and verifiable controls.
Third-party certification bodies and government agencies assessing an organization’s security baseline.

Benefits include improved risk-based decision making, clearer documentation for audits and validations, better coordination with business partners, and strengthened resilience of trade operations.

Related standards

World Customs Organization (WCO) SAFE Framework of Standards - alignment with AEO concepts.
ISO 20858 (maritime port facility security assessments and plans) - normative reference.
SOLAS (International Convention for the Safety of Life at Sea) - referenced in context of maritime security.

Keywords: ISO 28001, supply chain security, security assessment, security plan, AEO, WCO Framework, countermeasures, supply chain risk management, documentation requirements.

Related standards

Mentioned in the description and other ISO standards

Abstract

Overview

Key topics and requirements

Scope definition: Define and document the portion of the international supply chain covered (Statement of Coverage).
Security assessment: Conduct formal assessments to identify threat scenarios, vulnerabilities and the potential consequences for people, assets and operations.
Countermeasures: Prioritize and develop countermeasures where vulnerabilities are unacceptable; plan mitigation to reduce likelihood and/or consequences.
Security plan: Produce and implement a documented Security Plan describing measures and responsibilities for the defined scope.
Execution and monitoring: Put the plan into operation, monitor effectiveness and update based on incidents or changes.
Incident response and documentation: Specify actions after security incidents and retain records that permit verification and audits.
Training: Establish a training programme to ensure security personnel can perform assigned duties.
Protection of security information: Manage confidentiality and controlled sharing of sensitive security data.
Annex guidance: Informative annexes illustrate security process models, a risk-assessment methodology and guidance on obtaining advice or certification.

Practical applications

ISO 28001 is practical for organizations that operate across borders and want to manage supply chain security systematically:

Manufacturers, importers, exporters, freight forwarders, carriers, port/terminal operators, warehouses and distributors.
Companies seeking AEO status or to align with national supply chain security programmes.
Internal audit, compliance and security teams establishing documented security processes and verifiable controls.
Third-party certification bodies and government agencies assessing an organization’s security baseline.

Benefits include improved risk-based decision making, clearer documentation for audits and validations, better coordination with business partners, and strengthened resilience of trade operations.

Related standards

World Customs Organization (WCO) SAFE Framework of Standards - alignment with AEO concepts.
ISO 20858 (maritime port facility security assessments and plans) - normative reference.
SOLAS (International Convention for the Safety of Life at Sea) - referenced in context of maritime security.

Keywords: ISO 28001, supply chain security, security assessment, security plan, AEO, WCO Framework, countermeasures, supply chain risk management, documentation requirements.

ISO 28001:2007 PDF

Technical details

Abstract

Overview

Key topics and requirements

Practical applications

Related standards

Related standards

Abstract

Overview

Key topics and requirements

Practical applications

Related standards

Related standards

Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 4: A…

Ships and marine technology — Maritime port facility security assessments and security plan development

Systems and software engineering — Software life cycle processes

Asset management — Vocabulary, overview and principles

Asset management — Asset management system — Requirements

Information technology — Radio frequency identification device conformance test methods — Part 2: Test method…

Information technology — Multimedia framework (MPEG-21) — Part 22: User Description

Milk — Determination of the lactoperoxidase activity — Photometric method (Reference method)