Course Introduction
The ability to manage risks, protect assets, and ensure the resilience of supply chains is critical for maintaining operational continuity and safeguarding against disruptions.
The ISO 28000 standard provides a framework for managing supply chain security risks, offering a structured approach to securing the flow of goods and services, protecting stakeholders, and ensuring compliance with international security requirements.
ISO 28000 is an internationally recognized standard for supply chain security management systems, offering a comprehensive approach to the protection of supply chains from security threats and ensuring the continuity of operations.
This training program is designed to provide foundational knowledge and practical skills necessary for implementing and managing an ISO 28000-compliant security management system. The program will cover key concepts, risk management techniques, leadership involvement, and practical strategies for effectively securing supply chains.
Course objective
- Explain the significance of ISO 28000 and its role in supply chain security.
- Define key terms and concepts used in ISO 28000.
- Recognize the benefits of implementing ISO 28000 certification within an organization.
- Gain a comprehensive understanding of the structure of ISO 28000.
- Explore the key clauses of ISO 28000.
- Understand the risk-based approach to supply chain security.
- Learn how to identify, analyze, and evaluate security risks in the supply chain.
- Explore risk treatment options such as mitigation, transfer, and acceptance.
- Set risk criteria and apply practical risk management techniques in supply chain security.
- Understand the role of leadership in fostering a culture of security.
- Learn how to develop a security policy and set clear objectives for supply chain security.
- Learn how to allocate resources effectively to implement security measures.
- Create action plans for managing and responding to security incidents in the supply chain.
- Understand the support and resources needed for successful ISO 28000 implementation, including human resources, training, and stakeholder management.
- Understand the steps necessary for the successful implementation of ISO 28000 within an organization.
- Align organizational processes and structures with ISO 28000 requirements.
- Learn tools and techniques for managing supply chain security and embedding a security culture across all levels of the organization.
- Identify and address challenges during the implementation phase and apply solutions for overcoming these challenges.
- Learn methods for evaluating the performance of security measures within the supply chain.
- Identify and establish key performance indicators (KPIs) for monitoring supply chain security.
- Understand auditing and assessment techniques for performance evaluation.
- Develop strategies for continual improvement based on performance reviews and audit results.
- Gain a thorough understanding of the audit process for ISO 28000, including planning, conducting, and reporting on audits.
- Understand the roles and responsibilities of auditors and how to apply corrective and preventive actions.
- Learn how to conduct a management review to ensure the continuous improvement of the supply chain security management system.
- Understand the process of achieving ISO 28000 certification, including the requirements for external audits.
- Learn how to maintain ISO 28000 certification and ensure ongoing compliance with the standard.
- Identify common challenges during the certification process and how to address them effectively.
Course audience
- Logistics & Supply Chain Managers
- Security Officers & Risk Managers
- Compliance Auditors & Consultants
- Business Owners & Executives
Course Outline | 01 DAY ONE
Introduction to ISO 28000 and Supply Chain Security
- Introduction to ISO standards
- Overview of ISO 28000 and its significance
- Understanding supply chain security and its importance
- Benefits of ISO 28000 certification
- Key terms and definitions in ISO 28000
- ISO 28000 and its relationship with other ISO standards (e.g., ISO 9001, ISO 27001, ISO 45001)
- Case Studies.
Structure of ISO 28000
- Overview of ISO 28000 structure
- Clauses of ISO 28000:
- Clause 4: Context of the organization
- Clause 5: Leadership
- Clause 6: Planning
- Clause 7: Support
- Clause 8: Operation
- Clause 9: Performance evaluation
- Clause 10: Improvement
Course Outline | 02 DAY TWO
Risk Assessment and Management in Supply Chains
- Risk-based approach to supply chain security
- Risk assessment process (identification, analysis, evaluation)
- Risk treatment options (mitigation, transfer, acceptance)
- Setting risk criteria
- Practical Application.
Leadership and Commitment
- Role of leadership in supply chain security
- Developing a security policy
- Establishing clear objectives and performance indicators
- Ensuring continual improvement through leadership
- Practical Application.
Course Outline | 03 DAY THREE
Supply Chain Security Planning
- Security objectives and planning
- Resource allocation for security measures
- Integration of security into supply chain processes
- Action plans for managing security incidents
Support and Resources for Implementation
- Human resources and training
- Organizational structure and roles
- Communication and documentation requirements
- Managing internal and external stakeholders
- Practical Application.
Course Outline | 04 DAY FOUR
Implementing ISO 28000 - Practical Aspects
- Steps for effective implementation
- Aligning organizational processes with ISO 28000 requirements
- Tools and techniques for managing supply chain security
- Engaging employees in the security culture
- Practical application.
Monitoring and Measurement of Security Performance
- Performance evaluation methods
- Key performance indicators (KPIs) for supply chain security
- Auditing and assessment techniques
- Continual improvement processes
- Practical Application.
Course Outline | 05 DAY FIVE
Internal Audits and Review for ISO 28000
- The audit process: planning, conducting, and reporting
- Roles and responsibilities of auditors
- Corrective and preventive actions
- Management review and continual improvement
- Practical application.
Course Certificates

BOOST’s Professional Attendance Certificate “BPAC”
BPAC is always given to the delegates after completing the training course,and depends on their attendance of the program at a rate of no less than 80%,besides their active participation and engagement during the program sessions.
Request a Quote