ISO 28000
- Home
- ISO 28000
ISO 28000:2007 is a management system standard that focuses on securing people, property, information, and infrastructure in supply chain operations. It is applicable to organizations of all sizes involved in production, manufacturing, transportation, and storage of goods. Certification to this standard helps reduce security risks and ensures the smooth, timely delivery of goods in compliance with international security standards.
ISO 28000
What is ISO 28000 ?
ISO 28000:2007 is a management system standard developed specifically for logistics companies and organizations managing supply chain operations. Initially published in 2005 as a Publicly Available Specification by the International Standards Organisation, it was replaced by the full standard in 2007. This standard provides a specification for the protection of people, property, information, and infrastructure in companies and organizations involved in local, national, and international supply chain operations. ISO 28000:2007 is applicable to organizations of all sizes engaged in the production, manufacturing, services, storage, or transportation of goods at any stage of their development or movement within the supply chain. Supply chain security is crucial for companies in the international supply chain, particularly those needing to meet stringent security requirements from Customs or business partners. For organizations within or relying on the logistics industry, certification to ISO 28000:2007 offers a valuable framework to minimize security risks, supporting the smooth, “just in time” delivery of goods and supplies.
Benefits of iso 28000:2007
Adopting the ISO 28000 has broad strategic, organizational and operational benefits that are realized throughout supply chains and business practices.
Benefits include, but are not limited to:
- Integrated enterprise resilience
- Systematized management practices
- Enhanced credibility and brand recognition
- Aligned terminology and conceptual usage
- Improved supply chain performance
- Benchmarking against internationally recognizable criteria
- Greater compliance processes
How to achieve ISO 28000 certification - ISO 28000 implementation / Compliance / Certification steps
Lakshy Management Consultant Pvt Ltd. offers a well defined and globally proven implementation methodology for ISO 28000 – 2007 certification.
- Gap Analysis
- Awareness Training
- Process Identification and definition
- Documentation Design and finalization
- Implementation
- Internal Auditor Training and conduct of internal audit
- Management Review Meeting
- Review of Implementation
- Pre-assessment
- Stage 1 – certification audit
- Stage 2 – certification audit
- Award of ISO 28000 certification
- Continual improvement of the system through value added consulting and training services
What are the requirements of ISO 28000 standard ?
ISO 28000:2007 is a risk-based standard, similar to ISO 14001, integrating the management system process-based approach of Plan-Do-Check-Act (PDCA) and the requirement for continual improvement.
| Clause | Name | Coverage / Requirements |
|---|---|---|
| 4.1 | General requirements | Establishment of system structure, continual improvement |
| 4.2 | Security management policy | Developed / acknowledged by top management |
| 4.3 | Security Risk Assessment and Planning | |
| 4.3.1 | Security Risk Assessment | Physical, operational, environmental threats and risks |
| 4.3.2 | Legal, statutory and other security regulatory requirements | Identify legal and other requirements related to organization |
| 4.3.3 | Security management objectives | Establish and document management objectives |
| 4.3.4 | Security management targets | Establish measurable, relevant targets communicated to the organization |
| 4.3.5 | Security management programmes | Establishment, documented programs |
| 4.4 | Implementation and operation | |
| 4.4.1 | Structure, authority and responsibilities for security management | Establish / appoint, organization roles, responsibilities authorities |
| 4.4.2 | Competence, training and awareness | System to ensure qualified competent personnel |
| 4.4.3 | Communication | System to communicate information to the organization |
| 4.4.4 | Documentation | Policy objectives, scopes, references, records |
| 4.4.5 | Document and data control | Location and access, review, currency, archival |
| 4.4.6 | Operational control | Documented procedures, threat evaluation |
| 4.4.7 | Emergency preparedness, response and security recovery | Identify potential threats, develop plans, responses |
| 4.5 | Checking and Corrective action | |
| 4.5.1 | Security performance measurement and monitoring | Qualitative, quantitative, monitoring objectives & targets, non-conformances |
| 4.5.2 | System evaluation | Review plans, procedures, incidents reports, performance evaluations |
| 4.5.3 | Security related failures, incidents, non-conformances and corrective and preventative action | Evaluating system failures, incidents, near misses, false alarms, near misses |
| 4.5.4 | Control of records | Identification, storage, protection, retrieval, retention disposal of records |
| 4.5.5 | Audit | Develop an audit program |
| 4.6 | Management review and continual improvement | Review of system by top management |
Integrate ISO 28000 with other management system standards
ISO 28000 is designed to be compatible with other management systems standards and specifications, such as ISO 9001, ISO 45001, ISO 22000, ISO 17025, ISO 27001, ISO 14001 Environment and other ISO standards. They can be integrated seamlessly through Integrated Management system approach. They share many principles so choosing an integrated management system can offer excellent value for money and an easier approach to implement, manage and improve multiple standards simultaneously.
What we offer in the field of ISO 28000 standard and certification ?
Don’t Hesitate To Contact Us For Better ISO Services
Contact us now, to get your organization ISO 28000 certified in the most effective and efficient manner while realizing the true benefits of the certification using our specialized ISO implementation methodology that is less time consuming, fast, easy to understand and implement, result oriented, time bound and cost effective. Get ISO 28000 certified now with us.
Perfect Solutions For Your ISO Needs
We provide one of the most exhaustive suites of ISO consulting services to help the companies plan, design, implement, monitor, control, improve and enhance their ISO management system. Our ISO consultants are known in the field of management system certification for being innovative, simple, practical and effective resulting in a implementation process that is value adding to the business operations of the organization.
- Jl. Raya Kuta No.70, Kuta - Bali 80361
- support@domain.com
- (+62)81 235 26512