ISO 28000:2022 CertificationSupply Chain Security Management
Protect people, goods and infrastructure across your supply chain with ISO 28000 security management certification.
management system
What is ISO 28000:2022?
ISO 28000 specifies requirements for a security management system, including aspects critical to security assurance of the supply chain such as theft, tampering, smuggling and disruption.
Who is it for?
- Ports, terminals and freight forwarders
- Logistics and warehousing companies
- Manufacturers and exporters
- Oil, gas and critical infrastructure
Benefits of ISO 28000:2022
Secure operations
Assess and treat security threats systematically.
Reliable supply
Reduce theft, tampering and disruption.
Trade facilitation
Supports customs and AEO programmes.
Key Requirements (Clauses 4–10)
ISO 28000:2022 follows the common high‑level structure shared by ISO management system standards, making it easy to integrate with other standards.
Context of the organisation
Understand internal and external issues and interested parties.
Leadership
Top management commitment, policy and responsibilities.
Planning
Risks, opportunities and measurable objectives.
Support
Resources, competence, awareness and documented information.
Operation
Planning and control of the processes that deliver results.
Performance evaluation
Monitoring, internal audit and management review.
Improvement
Corrective action and continual improvement.
How to Get ISO 28000:2022 Certified
Application
Submit an application with details of your organisation, sites, scope and standard(s).
Quotation & agreement
We review the application, confirm audit duration and send a quotation and certification agreement.
Stage 1 audit
Review of your documentation and readiness for the Stage 2 audit.
Stage 2 audit
On‑site audit to evaluate the implementation and effectiveness of your management system.
Certification decision
Independent review of audit results and, once any non‑conformities are closed, certificate issue.
Surveillance audits
Periodic audits to confirm your system continues to meet the standard while you are certified.
Recertification
A recertification audit before your certificate expires to renew your certification.
Training for Your Team
Awareness, internal auditor and lead auditor courses for ISO 28000 and other standards.
View ISO coursesFrequently Asked Questions
It depends on your organisation’s size, complexity and readiness. After reviewing your application we will give you a clear timeline.
Certificate validity depends on the type of certification and the scheme requirements. The validity period is confirmed in your certification agreement and shown on your certificate, and certification is maintained through surveillance audits.
Yes. It can be audited together with other ISO management system standards in an integrated audit.