Who is it for?

The ISO 28000 standard has been developed for organisations involved in the supply chain that wish to implement or improve their security management systems. ISO 28000 is applicable to all types of organisations (regardless of size) and at every stage of the supply chain. Implementation of the ISO 28000 standard is recommended for companies:

• manufacturing,
• service,
• transport,
• freight forwarding,
• logistics,
• warehousing,
• and those operating warehouses and customs agencies.

Information about the standard

ISO 28000 is a supply chain security management system. It serves to protect employees, goods, equipment and the company’s infrastructure in potential risk situations. It is a collection of best practices enabling the assessment of risk levels within the supply chain and the maintenance of its continuity.

The systematic approach to security management, developed in the ISO 28000 standard, has become essential in the face of the growth of global trade. As progress is made in this area, the opportunities for supply chain infiltration, theft and fraud also increase. As it turns out, the weakest link in companies’ operations is not a lack of physical security measures, but a lack of procedures that would help minimise the risk of such incidents occurring. The ISO 28000 standard is a collection of precisely such procedures.

The ISO 28000 standard defines processes that enable effective risk management within the supply chain. These include:

• proper identification of critical points and risk analysis,
• realistic assessment of the likelihood of their occurrence,
• development, implementation and improvement of security programmes,
• application of appropriate control measures (e.g. performance indicators, document verification, audits, training).

Benefits of implementation

Implementing the ISO 28000 standard enables the systematic application of practices that contribute to increasing the level of security in the supply chain, as well as improving its reliability and efficiency. The benefits for the company include:

• increased employee awareness and accountability regarding security issues,
• reduced business risk (e.g. a decline in financial liquidity in the event of losing a dissatisfied customer),
• reduction in logistics, transport and warehousing costs,
• increased effectiveness of emergency response and mitigation of their negative consequences.

ISO 28000 certification brings with it a range of benefits. By having the implementation of this standard confirmed by an accredited certification body, the company gains objective proof that its supply chain is secure and compliant with international standards. This is extremely important for the company’s reputation. By demonstrating its commitment to security and its desire for improvement, the company gains a competitive advantage in its marketing activities, as well as the trust of customers, business partners, employees and shareholders. In many situations, implementing the ISO 28000 system is a prerequisite for establishing cooperation (e.g. with most leading furniture manufacturers). ISO 28000 certification also serves as a gateway to operating in global markets, where this standard is widely recognised.

Implementing ISO 28000 can also be helpful when a company wishes to meet various legal requirements. For example, ISO 28000 certification can facilitate the attainment of Authorised Economic Operator (AEO) status. Simplified customs procedures apply to companies holding this status.