ISO 28000 2022 Management System

ISO 28000:2022 specifies requirements for a security management system, including aspects relevant to the security of the supply chain, enabling organizations to establish, implement, maintain and improve controls that safeguard people, goods, infrastructure, information and operations against security threats. Its purpose is to help organizations assess security risks across their activities and supply chains and to implement proportionate measures to prevent, detect, respond to and recover from security-related incidents such as theft, smuggling, tampering, terrorism, sabotage and other malicious acts. The standard is applicable to organizations of any size and sector that are involved in or rely upon manufacturing, service, storage, transportation or the movement of goods, and it is relevant to security managers, logistics and operations personnel, risk professionals and senior leadership. The 2022 revision aligns the standard with the ISO harmonized high-level structure, so it follows the familiar sequence of context of the organization, leadership, planning, support, operation, performance evaluation and improvement, applying the Plan-Do-Check-Act cycle and adopting a strong risk-based approach consistent with ISO 31000. Key requirements include understanding internal and external context and interested parties, conducting security risk assessment and treatment, establishing a security policy and objectives, implementing operational planning and control, managing resources and competence, preparing for and responding to disruptive and security events, and evaluating and continually improving performance. It integrates readily with other management system standards such as ISO 9001, ISO 22301 and ISO 27001, and complements supply chain security programs including customs and trade initiatives. The main benefits are enhanced resilience and continuity of supply, reduced losses and liabilities, improved regulatory and customer confidence, and a systematic, auditable approach to security governance. ISO 28000 is certifiable, allowing organizations to pursue accredited third-party certification to demonstrate the effectiveness of their supply chain security management to partners and authorities.

Included: 56 ready-to-use, fully editable documents (manual, procedures, forms, records, checklists, guidance and training material).

License: single-organization license; delivered electronically as a ZIP archive.