ISO 28000

Supply Chain Security Management Systems

The ISO 28000 standard is an international standard developed by the International Organization for Standardization (ISO) in response to the need of the global business community to strengthen the security of cargo, vehicles and transport infrastructure facilities against threats of terrorism, smuggling and theft.

The main objective of the ISO 28000 standard is to strengthen transport security and unify the requirements for security management systems (SMS). International standards ISO 28000 series: ISO 28000 «Technical specifications for Supply Chain Security Management Systems»; ISO 28001 «Supply chain Security Management Systems – best practices for implementing supply chain security, assessments and safety plans – requirements and guidelines»; ISO 28003 «Supply chain security management systems».

Who might be interested in the ISO 28000 standard?

The international standard ISO 28000 applies to any organizations, regardless of their size and type of activity, that are somehow involved in the supply chain and wish to implement a security management system (SMS), in order to ensure an adequate level of security of the supply chain (or part of it).

These organizations may include:

• manufacturers of goods that independently carry out full or partial delivery of goods;
• importers;
• exporters;
• customs brokers;
• freight brokers;
• carriers (auto, rail, air, sea, river);
• container terminal operators;
• airports, sea and river ports, railway stations;
• warehouse complexes;
• freight forwarders;
• distributors.

Benefits of implementation and certification:

Implementing and certifying a supply chain security management system allows an organization to gain confidence that its supply chain (or the part of the supply chain that the organization controls) is functioning in a safe environment, as well as demonstrate evidence of the achieved level of security to all interested parties, including potential customers of the organization.

Benefits that organizations whose management systems meet the requirements of the international standard ISO 28000 receive:

• reducing the number of security violations, the amount of damage caused by security violations, theft and smuggling on transport;
• implementation of effective risk control and management for security threats applicable to the type of activity of the organization;
• strengthening the image of a reliable partner and the organization’s reputation in the market of goods/services provided;
• optimization of costs for maintaining an adequate level of security of the supply chain (or part of it) through the systematic use of internal resources of the organization allocated for security;
• making it easier for an organization to obtain compliance status with the requirements of national customs organizations ‘ security programs (for example, the status of a European Authorized Economic Operator (AEO) or a partnership in the C-TPAT program);
• the possibility of creating an integrated management system due to the exceptionally high degree of harmonization of the ISO 28000 standard with the ISO 9001 and ISO 14001 standards;
• more effective interaction of the organization with interested parties on security issues and their awareness, including activities when choosing a contractor/supplier by the organization.