ISO 28000 SECURITY MANAGEMENT SYSTEMS FOR SUPPLY CHAIN

ISO 28000 was prepared by Technical Committee ISO/TC8, Ship and marine technology, which brings together the opinions of various organizations, such as the International Maritime Organization, International Association of Ports and Harbors, International Chamber of Shipping, World Customs Organization, International Innovative Trade Network, Comité Maritime International and the Strategic Council on Security Technology.. etc. This standard is specifically designed for the needs of various industries for security management system. The proposal of the management system is to improve the security of the supply chain.

Introduction

ISO 28000:2007 is a high-level management standard that allows organizations to establish a complete supply chain security management system; it also requires organizations to evaluate the security environment required for operation and determine the security measurements required, and to comply with the industry’s requirements and applicable legal.

ISO 28000 defines the supply chain as "set of resources and processes that begins with the sourcing of raw material and extends through the

delivery of products or services to the end user across the modes of transport.”

Through the use of process methods and PDCA "Plan-Do-Check-Action" methods to action with potential risks in the supply chain, ISO 28000 is compatible with other management system standards, such as ISO 9001 (Quality Management System) and ISO 14001 (Environmental Management System).

Benefits

For multinational companies, there is no need to establish separate procedures for the requirements of different import and export countries
Structural risk assessment reduces security threats
Reduce security incidents and reduce costs
Continuously improve the security of the company's supply chain
Increase the confidence of customers and related interest party
Enhance company image

Applicable to

Supply chain related industries, including sellers, facility manufacturing, logistics providers, internal distribution centers, distributors, wholesalers, and other entities that contact end users.