The Core of ISO 28001:2007
ISO 28001 was developed to help organizations in the supply chain establish a minimum level of security. It is compatible with other international security initiatives, such as the WCO Framework of Standards (AEO).
- Security Risk Assessment: Systematically identifying "threat scenarios" and vulnerabilities across the transport, storage, and handling phases.
- Asset Protection: Safeguarding physical assets, information, and personnel involved in the movement of goods.
- Supply Chain Continuity: Ensuring that even in the event of a security breach, the organization has a plan for rapid recovery.
- Partner Evaluation: Establishing security requirements for downstream and upstream partners to ensure an "unbroken chain" of security.
