iTeh StandardsiTeh Standards
EURUSD
Your shopping cart is empty.
ISO

ISO 28002:2011

(Main)

Security management systems for the supply chain — Development of resilience in the supply chain — Requirements with guidance for use

Security management systems for the supply chain — Development of resilience in the supply chain — Requirements with guidance for use

ISO 28002:2011 specifies requirements for a resilience management system in the supply chain to enable an organization to develop and implement policies, objectives, and programs, taking into account legal, regulatory and other requirements to which the organization subscribes; information about significant risks, hazards and threats that may have consequences to the organization, its stakeholders, and on its supply chain; protection of its assets and processes; and management of disruptive incidents.

Systèmes de management de la sécurité pour la chaîne d'approvisionnement — Développement de la résilience dans la chaîne d'approvisionnement — Exigences avec mode d'emploi

General Information

Status
Published
Publication Date
20-Jul-2011
ICS
03.100.01 - Company organization and management in general
03.100.70 - Management systems
47.020.99 - Other standards related to shipbuilding and marine structures
Technical Committee
ISO/TC 292 - Security and resilience
Drafting Committee
ISO/TC 292 - Security and resilience
Current Stage
9099 - Withdrawal of International Standard proposed by TC or SC
Completion Date
04-Dec-2023
Ref Project

Relations

Revises
ISO/PAS 28002:2010 - Security management systems for the supply chain - Development of resilience in the supply chain - Requirements with guidance for use
Effective Date
05-Jun-2010

Buy Standard

ISO 28002:2011 - Security management systems for the supply chain -- Development of resilience in the supply chain -- Requirements with guidance for useISO 28002:2011 - Security management systems for the supply chain -- Development of resilience in the supply chain -- Requirements with guidance for use
PreviousNext
Standard
ISO 28002:2011 - Security management systems for the supply chain -- Development of resilience in the supply chain -- Requirements with guidance for use
English language
55 pages
sale 15% off
Preview
sale 15% off
Preview

Related Packages

ISO 28000 - Supply Chain Security Management Systems Package
ISO 28000 - Supply Chain Security Management Systems Package
6 documents

Standards Content (Sample)

INTERNATIONAL ISO
STANDARD 28002
First edition
2011-08-01

Security management systems for the
supply chain — Development of
resilience in the supply chain —
Requirements with guidance for use
Systèmes de management de la sécurité pour la chaîne
d'approvisionnement — Développement de la résilience dans la chaîne
d'approvisionnement — Exigences avec mode d'emploi




Reference number
ISO 28002:2011(E)
©
ISO 2011

---------------------- Page: 1 ----------------------
ISO 28002:2011(E)

COPYRIGHT PROTECTED DOCUMENT


©  ISO 2011
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means,
electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or
ISO's member body in the country of the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Published in Switzerland

ii © ISO 2011 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 28002:2011(E)
Contents Page
Foreword .iv
Introduction.v
0.1 General .v
0.2 Supply Chain Environment.v
0.3 Process Approach.vi
0.4 “Plan-Do-Check-Act” (PDCA) model .viii
1 Scope.1
2 Normative references.2
3 Terms and definitions .2
4 Requirements of Management System containing Resilience Policy .12
4.1 General .12
4.2 Understanding the Organization and its Context .13
4.3 Scope of Resilience Management Policy.14
4.4 Provision of Resources for the Resilience Management Policy .14
4.5 Resilience Management Policy .14
4.6 Resilience Policy Statement.14
Annex A (informative) Informative guidance on the incorporation of this International Standard
into a management standard .16
Annex B (informative) Informative Guidance on the Use of this International Standard .30
Annex C (informative) Terminology Conventions .53
Annex D (informative) Qualifiers to Application .54
Bibliography.55

© ISO 2011 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO 28002:2011(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies
(ISO member bodies). The work of preparing International Standards is normally carried out through ISO
technical committees. Each member body interested in a subject for which a technical committee has been
established has the right to be represented on that committee. International organizations, governmental and
non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the
Inte
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

This May Also Interest You

ISO
ISO 28004-3:2014(Main)
Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 3: Additional specific guidance for adopting ISO 28000 for use by medium and small businesses (other than marine ports)

ISO 28004-3:2014 has been developed to supplement ISO 28004-1 by providing additional guidance to medium and small businesses (other than marine ports) that wish to adopt ISO 28000. The additional guidance in ISO 28004-3:2014, while amplifying the general guidance provided in the main body of ISO 28004-1, does not conflict with the general guidance, nor does it amend ISO 28000.

  • Standard
    15 pages
    English language
    sale 15% off
  • Standard
    18 pages
    Russian language
    sale 15% off
ISO
ISO 28004-4:2014(Main)
Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 4: Additional specific guidance on implementing ISO 28000 if compliance with ISO 28001 is a management objective

ISO 28004-4:2014 provides additional guidance for organizations adopting ISO 28000 that also wish to incorporate the Best Practices identified in ISO 28001 as a management objective on their international supply chains. The Best Practices in ISO 28001 both help organizations establish and document levels of security within an international supply chain and facilitate validation in national Authorized Economic Operator (AEO) programmes that are designed in accordance with the World Customs Organization (WCO) Framework of Standards. ISO 28004-4:2014 is not designed as a standalone document. The main body of ISO 28004-1 provides significant guidance pertaining to required inputs, processes, outputs and other elements required by ISO 28000. ISO 28004-4:2014 provides additional specific guidance on implementing ISO 28000 if compliance with ISO 28001 is a management objective.

  • Standard
    6 pages
    English language
    sale 15% off
  • Standard
    6 pages
    Russian language
    sale 15% off
ISO
ISO 28001:2007(Main)
Security management systems for the supply chain — Best practices for implementing supply chain security, assessments and plans — Requirements and guidance

ISO 28001:2007 provides requirements and guidance for organizations in international supply chains to develop and implement supply chain security processes; establish and document a minimum level of security within a supply chain(s) or segment of a supply chain; assist in meeting the applicable authorized economic operator (AEO) criteria set forth in the World Customs Organization Framework of Standards and conforming national supply chain security programmes. In addition, ISO 28001:2007 establishes certain documentation requirements that would permit verification. Users of ISO 28001:2007 will define the portion of an international supply chain within which they have established security; conduct security assessments on that portion of the supply chain and develop adequate countermeasures; develop and implement a supply chain security plan; train security personnel in their security related duties.

  • Standard
    27 pages
    English language
    sale 15% off
  • Standard
    35 pages
    Russian language
    sale 15% off
ISO
ISO 28004-1:2007(Main)
Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 1: General principles

ISO 28004:2007 provides generic advice on the application of ISO 28000:2007, Specification for security management systems for the supply chain. It explains the underlying principles of ISO 28000 and describes the intent, typical inputs, processes and typical outputs for each requirement of ISO 28000. This is to aid the understanding and implementation of ISO 28000. ISO 28004:2007 does not create additional requirements to those specified in ISO 28000, nor does it prescribe mandatory approaches to the implementation of ISO 28000.

  • Standard
    56 pages
    English language
    sale 15% off
  • Standard
    61 pages
    French language
    sale 15% off
  • Standard
    80 pages
    Russian language
    sale 15% off
ISO
ISO 28003:2007(Main)
Security management systems for the supply chain — Requirements for bodies providing audit and certification of supply chain security management systems

ISO 28003:2007 contains principles and requirements for bodies providing the audit and certification of supply chain security management systems according to management system specifications and standards such as ISO 28000. It defines the minimum requirements of a certification body and its associated auditors, recognizing the unique need for confidentiality when auditing and certifying/registering a client organization. Requirements for supply chain security management systems can originate from a number of sources, and ISO 28003:2007 has been developed to assist in the certification of supply chain security management systems that fulfil the requirements of ISO 28000, Specification for security management systems for the supply chain, and other supply chain security management system International Standards. The contents of ISO 28003:2007 may also be used to support certification of supply chain security management systems that are based on other specified supply chain security management system requirements. ISO 28003:2007 provides harmonized guidance for the accreditation of certification bodies applying for ISO 28000 (or other specified supply chain security management system requirements) certification/registration; defines the rules applicable for the audit and certification of a supply chain security management system complying with the supply chain security management system standard's requirements (or other sets of specified supply chain security management system requirements); provides the customers with the necessary information and confidence about the way certification of their suppliers has been granted.

  • Standard
    43 pages
    English language
    sale 15% off
  • Standard
    47 pages
    French language
    sale 15% off
  • Standard
    50 pages
    Russian language
    sale 15% off
ISO
ISO 28004-3:2014(Main)
Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 3: Additional specific guidance for adopting ISO 28000 for use by medium and small businesses (other than marine ports)

ISO 28004-3:2014 has been developed to supplement ISO 28004-1 by providing additional guidance to medium and small businesses (other than marine ports) that wish to adopt ISO 28000. The additional guidance in ISO 28004-3:2014, while amplifying the general guidance provided in the main body of ISO 28004-1, does not conflict with the general guidance, nor does it amend ISO 28000.

  • Standard
    15 pages
    English language
    sale 15% off
  • Standard
    18 pages
    Russian language
    sale 15% off
ISO
ISO 28004-2:2014(Main)
Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 2: Guidelines for adopting ISO 28000 for use in medium and small seaport operations

ISO 28004-2:2014 identifies supply chain risk and threat scenarios, procedures for conducting risks/threat assessments, and evaluation criteria for measuring conformance and effectiveness of the documented security plans in accordance with ISO 28000 and the ISO 28004 series implementation guidelines. An output of this effort will be a level of confidence rating system based on the quality of the security management plans and procedures implemented by the seaport to safeguard the security and ensure continuity of operations of the supply chain cargo being processed by the seaport. The rating system will be used as a means of identifying a measurable level of confidence (on a scale of 1 to 5) that the seaport security operations are in conformance with ISO 28000 for protecting the integrity of the supply chain.

  • Standard
    22 pages
    English language
    sale 15% off
  • Standard
    26 pages
    Russian language
    sale 15% off
ISO
ISO 28004-4:2014(Main)
Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 4: Additional specific guidance on implementing ISO 28000 if compliance with ISO 28001 is a management objective

ISO 28004-4:2014 provides additional guidance for organizations adopting ISO 28000 that also wish to incorporate the Best Practices identified in ISO 28001 as a management objective on their international supply chains. The Best Practices in ISO 28001 both help organizations establish and document levels of security within an international supply chain and facilitate validation in national Authorized Economic Operator (AEO) programmes that are designed in accordance with the World Customs Organization (WCO) Framework of Standards. ISO 28004-4:2014 is not designed as a standalone document. The main body of ISO 28004-1 provides significant guidance pertaining to required inputs, processes, outputs and other elements required by ISO 28000. ISO 28004-4:2014 provides additional specific guidance on implementing ISO 28000 if compliance with ISO 28001 is a management objective.

  • Standard
    6 pages
    English language
    sale 15% off
  • Standard
    6 pages
    Russian language
    sale 15% off
ISO
ISO 28001:2007(Main)
Security management systems for the supply chain — Best practices for implementing supply chain security, assessments and plans — Requirements and guidance

ISO 28001:2007 provides requirements and guidance for organizations in international supply chains to develop and implement supply chain security processes; establish and document a minimum level of security within a supply chain(s) or segment of a supply chain; assist in meeting the applicable authorized economic operator (AEO) criteria set forth in the World Customs Organization Framework of Standards and conforming national supply chain security programmes. In addition, ISO 28001:2007 establishes certain documentation requirements that would permit verification. Users of ISO 28001:2007 will define the portion of an international supply chain within which they have established security; conduct security assessments on that portion of the supply chain and develop adequate countermeasures; develop and implement a supply chain security plan; train security personnel in their security related duties.

  • Standard
    27 pages
    English language
    sale 15% off
  • Standard
    35 pages
    Russian language
    sale 15% off
ISO
ISO 28004-1:2007(Main)
Security management systems for the supply chain — Guidelines for the implementation of ISO 28000 — Part 1: General principles

ISO 28004:2007 provides generic advice on the application of ISO 28000:2007, Specification for security management systems for the supply chain. It explains the underlying principles of ISO 28000 and describes the intent, typical inputs, processes and typical outputs for each requirement of ISO 28000. This is to aid the understanding and implementation of ISO 28000. ISO 28004:2007 does not create additional requirements to those specified in ISO 28000, nor does it prescribe mandatory approaches to the implementation of ISO 28000.

  • Standard
    56 pages
    English language
    sale 15% off
  • Standard
    61 pages
    French language
    sale 15% off
  • Standard
    80 pages
    Russian language
    sale 15% off