ISO 28000:2007

We can define the supply chain as a series of resources and processes that are interrelated with each other, starting with the supply of raw materials and extending to the delivery of products and services to the end user through different transportation methods.

The Supply Chain Security Management System Standard defines the meaning of the term “Security” as “counteracting intentional and unauthorized actions designed to harm or damage the Supply Chain”. Within this framework, the organization is required to carry out risk assessments in some areas and to control its risks.

It is a voluntary standard developed for the management of security operations within the supply chain management system.

For many organizations, the supply chain is vital to business continuity. In some sectors, interruptions in the supply chain can have a profound effect on the company. For such organizations, the correct identification and effective management of supply chain risks are of primary importance for business continuity.

Being able to predict the consequences of not being able to deliver the supplied product, identifying the relevant risks and taking some precautions are important for the continuity of the companies. In order to manage supply chain security risks and to support supply continuity in the changing environment of our time, ISO published the ISO 28000 Supply Chain Security Standard in 2007.

ISO 28000:2007 is an international standard that defines the requirements for a Supply Chain Security Management System and provides a management model for organizations that want to implement this system. It aims to effectively manage risks by bringing the organization’s activities related to supply chain security under the same umbrella as other management systems.

In this context, we can define the supply chain as a series of resources and processes that are interrelated, starting with the supply of raw materials and extending to the delivery of products and services to the end user through different transportation methods.

When we say supply chain, different products, different locations (production, warehouse, port, container, customs …), different and sometimes complex operations and systems (packaging, loading, transportation, handling, control …), different modes of transportation (air, land, sea, rail …), different cargo types (container, bulk, pallet, tank …), national and international regions with different security levels come to mind for different sectors and organizations.

This new management system standard provides a new framework that draws attention to critical security points in the supply chain for organizations that are in any way connected to the supply chain. This framework includes, but is not limited to, finance, production, information management and manufacturing facilities.

While supporting organizations operating in all industry sectors in assessing and controlling security risks, it also aims to reduce the effects that may arise from security threats, and while doing so, it uses basic management principles such as quality, occupational safety and customer satisfaction management.

Purpose of ISO 28000 Standard

It is a standard that can meet supply chain security requirements of various sizes. It can be applied for the following purposes:

• For the development of a security system 
• For a security system compliance
• For external harmony 

BENEFITS OF ISO 28000 STANDARD FOR COMPANIES

• The ISO 28000:2007 standard will provide significant benefits to organizations of all sizes and in all sectors.
• Minimizing security risks, reducing problems related to working with the “just-in-time production” principle, and meeting the requirements of the new legal regulation requiring “Authorized Economic Operator (AEO)” in organizations trading with European Union countries are just some of these.
• It ensures that security risks are identified in all sectors of the industry and that necessary precautions are taken to minimise possible damage.
• Brings the relevant activities to the agenda of the senior management and ensures that they are managed together with other business decisions.
• It provides convenience to customs authorities by proving your ability to identify and control security risks.
• Since many requirements in AEO applications are in line with the standard, it increases the trust of legal authorities in your organization.
• It ensures the trust of the organizations you provide products/services to.
• It increases the trust of insurance companies and reduces your insurance costs.
• Documenting your system contributes to the holistic image of the organization.
• Examples of these benefits can be increased. In conclusion; regardless of the sector and size, the ISO 28000 standard provides great material and moral benefits to all organizations.