ISO 28000 consultants for ISO 28000 Certification, ISO 28000 implementation and ISO 28000 training. ISO 28000 consultants in Mumbai India for ISO 28000 Certificate.

ISO 28000 certification consultants in India UAE Dubai Abu Dhabi Saudi Arabia Qatar Oman Kuwait USA Canada Africa Europe Middle East.

Email : info@lakshy.com

Integrated ISO System

Online ISO Training

ISO Jobs

Company profile

ISO Certificate Form

ISO Standard White Paper

ISO Certification Steps

EN 16001 / ISO 50001 « Home

SO 28000:2007 - Security Management System

Downloads

Lakshy Corporate Profile

ISO Certification application Form

ISO Presentation

Background to ISO 28000:2007

ISO 28000:2007 is a management system standard which has been developed specifically for logistics companies and organisations that manage supply chain operations. Published as a Publicly Available Specification by the International Standards Organisation in 2005, this was replaced in 2007 by the full standard, ISO 28000:2007.

ISO 28000:2007 is suitable for all sizes and types of organisations involved in manufacturing, service, storage or transportation that wish to implement and maintain a security management system.

ISO 28000:2007 certificate.....Fast, Easy & Cost Effective.

Introduction to ISO 28000

ISO 28000:2007 specifies the requirements for a security management system, including those aspects critical to security assurance of the supply chain. Security management is linked to many other aspects of business management. Aspects include all activities controlled or influenced by organizations that impact on supply chain security. These other aspects should be considered directly, where and when they have an impact on security management, including transporting these goods along the supply chain.

What is supply Chain ?

Supply Chain is linked set of resources and processes that begin with the sourcing of raw material and extend through the delivery of products or services to the end user across the modes of transport, including transportation, loading information and relevant activities. The supply chain may include raw material manufacturer, intermediate product manufacturer, product manufacturer, wholesalers, distributors, vendors, logistics providers, trucking industries, train transport, air transport, port terminal operators, shipping transport, forwarders, custom agency, accountant and information agency, importing business.

Scope of ISO 28000

ISO 28000:2007 is applicable to all sizes of organizations, from small to multinational, in manufacturing, service, storage or transportation at any stage of the production or supply chain that wishes to:

Establish, implement, maintain and improve a security management system;

Demonstrate such conformance to others;

Seek certification/registration of its security management system by an Accredited third party Certification Body; or

Make a self-determination and self-declaration of conformance with ISO 28000:2007.

There are legislative and regulatory codes that address some of the requirements in ISO 28000:2007.

It is not the intention of ISO 28000:2007 to require duplicative demonstration of conformance.

Organizations that choose third party certification can further demonstrate that they are contributing significantly to supply chain security.

The standard may be used

by businesses that are going out to tender for their services.

to provide a consistent approach by all service providers in a supply chain.

to benchmark supply chain security management.

as the basis for an independent assessment.

to demonstrate the ability to meet customer requirements.

to improve services.

Benefits of ISO 28000 Standard Implementation

Allows security to be managed as a process so that the effectiveness of security management can be measured and improved;

Allows management to focus resources and efforts on areas with high-risk concerns (through a security risk assessment);

Allows management to benchmark its security management efforts with international standards; and

Demonstrates to stakeholders the commitment to enforce a systematic security management. ISO 28000:2007 uses a more pragmatic approach in which the risk levels of your supply chain operations are identified. It enables your organization to perform a risk assessment with supporting management tools (i.e., document controls, key performance indicators, internal audits and training) and applies the controls in accordance with the risk involved.

The framework of ISO 28000:2007 is structurally very similar to ISO 14001:2004 Environmental Management Systems (EMS) standard. The environmental aspects identification and evaluation process in EMS is analogous to security risk assessment in security management.

Requirements of ISO 28000 standard

Clause	Name	Coverage
4.1	General requirements	Establishment of system structure, continual improvement,
4.2	Security management policy	Developed / acknowledged by top management
4.3	Security Risk Assessment and Planning
4.3.1	Security Risk Assessment	Physical, operational, environmental threats and risks
4.3.2	Legal, statutory and other security regulatory requirements	Identify legal and other requirements related to organization
4.3.3	Security management objectives	Establish and document management objectives
4.3.4	Security management targets	Establish measurable, relevant targets communicated to the organization
4.3.5	Security management programmes	Establishment, documented programs
4.4	Implementation and operation
4.4.1	Structure, authority and responsibilities for security management	Establish / appoint, organization roles, responsibilities authorities
4.4.2	Competence, training and awareness	System to ensure qualified competent personnel
4.4.3	Communication	System to communicate information to the organization
4.4.4	Documentation	Policy objectives, scopes, references, records,
4.4.5	Document and data control	Location and access, review, currency, archival
4.4.6	Operational control	Documented procedures, threat evaluation,
4.4.7	Emergency preparedness, response and security recovery	Id potential threats, develop plans, responses,
4.5	Checking and Corrective action
4.5.1	Security performance measurement and monitoring	Qualitative, quantitative, monitoring objectives & targets, non conformances
4.5.2	System evaluation	Review plans, procedures, incidents reports, performance evaluations
4.5.3	Security related failures, incidents, non-conformances and corrective and preventative action	Evaluating system failures, incidents, near misses, false alarms, near misses
4.5.4	Control of records	Identification, storage, protection, retrieval, retention disposal of records
4.5.5	Audit	Develop an audit program
4.6	Management review and continual improvement	Review of system by top management.

What we offer

With one of the largest pool of security specialists having global experience and expertise in security management, we offer consulting, training and documentation services for security management system for certification of ISO 28000 Security Management System Standard.