ISO 28000 - supply chain security management systems

What is ISO 28000?

The ISO 28000 standard is an international standard developed by the International Organization for Standardization (ISO) in response to the need of the global business community to strengthen the security of cargo, vehicles and objects of the transport infrastructure against threats of terrorism, smuggling and protection. The main objective of the ISO 28000 standard is to strengthen transport safety and unify requirements for safety management systems (SMB).

In accordance with the requirements of the standard, the organization must assess its work environment from the point of view of security, as well as determine whether the security measures taken on site are adequate and whether there are already mandatory security requirements that the organization fulfills.

Why are we implementing the ISO 28000 standard?

• decrease in the number of safety violations, the amount of damage caused by safety violations, and smuggling in transport
• implementation of effective control and risk management in relation to security threats applicable to the type of activity of the Organization
• strengthening the image of a reliable partner and the reputation of the Organization in the market of provided goods / services
• optimization of costs for maintaining an adequate level of security of the supply chain (or its part) due to the systematic use of internal resources of the Organization allocated for security
• facilitating the Organization's obtaining the status of compliance with the requirements of national customs organizations' safety programs
• the possibility of creating an integrated management system thanks to the exceptionally high degree of harmonization of the ISO 28000 standard with the ISO 9001 and ISO 14001 standards
• more effective interaction of the Organization with interested parties on security issues and their awareness, including activities when the Organization chooses a contractor / supplier.

Stages of ISO 28000 certification and obtaining an ISO 28000 certificate

1) The stage of preliminary inspection and evaluation of the system includes:

• preparation of the system and its documentation for certification
• drawing up an application for system certification
• preliminary check and evaluation of the system
• conclusion of an agreement on system certification

2) The stage of final inspection and evaluation of the system includes:

• preparation of the system for final inspection
• development of a program for conducting a final system check performed by a certification body
• conducting a preliminary meeting regarding the organization of the system certification check at the enterprise
• conducting a system check by a certification body
• preparation of preliminary conclusions based on the results of the inspection for the final meeting
• conducting the final meeting
• drawing up a report on conducting a system check at the enterprise
• design, registration and issuance of the ISO 28000 certificate by the certification body (with a positive decision).