ISO 28000

ISO 28000:2022 (BDS ISO 28000:2022) Security and resilience. Security management systems. Requirements

ISO 28000

Many organizations are experiencing increasing uncertainty and instability in the security of business processes, including procurement. As a result, they face problems affecting the achievement of their business objectives. Management systems can offer a systematic approach to resolving them. Security management contributes directly to business development and to increasing the credibility of the organisation.

ISO 28000:2022 specifies the requirements for a security management system, including aspects that are critical to supply chain security. It requires the organization to:

Assess the security environment in which it operates, including the supply chain with its dependencies and interdependencies;

determine appropriate security measures to effectively manage security risks;

manage compliance with the legal, regulatory and voluntary obligations to which the organisation has agreed;

align security processes and controls, including associated supply chains, to achieve the organisation's objectives.

Security management is related to many aspects of business management. These include all activities controlled or influenced by organizations, including but not limited to those that impact the supply chain. In terms of supply chain, their dynamic nature must be considered. Therefore, some organisations managing multiple supply chains may require their suppliers to meet relevant security standards as a condition for inclusion in that supply chain.

The standard enhances the level of security of the entire supply chain of goods, vehicles and transport infrastructure from potential threats of theft, smuggling, terrorism. ISO 28000:2022 is applicable to all organisations, from small to multinational, such as product manufacturers, distributors, freight forwarders, customs brokers, trade intermediaries, carriers (rail, auto, air, sea, river), container terminal operators, logistics depots, etc. who want to create, implement, maintain and improve a security management system. The standard provides a holistic approach and is not industry or sector specific.

ISO 28000 implementation and certification provides assurance that an organisation's supply chain operates in a safe environment, and demonstrates evidence of the level of security to all stakeholders, including potential customers.

Benefits of implementing ISO 28000:

The most important benefit of ISO 28000 is controlling and reducing supply chain risks and threats;

minimising security incidents and therefore reducing the amount of damage;

reducing errors made by the organisation's personnel by increasing the level of security awareness and training;

using new approaches to supply chain security management;

optimising the cost of maintaining the required level of supply chain security (or part of it);

improving the organisation's reputation as a trusted partner in the market for the goods and services offered;

working closely with security stakeholders, including security awareness of contractors and suppliers.

With the latest revision of ISO 28000, it becomes even easier to establish an Integrated Management System incorporating standards such as ISO 9001, ISO 14001, ISO 22301, ISO/IEC 27001, ISO 45001, ISO 22000, etc.

By implementing ISO 28000 standard, an organization creates a reliable supply chain security management system.