ISO 28000:2022 is an internationally recognized framework for security & resilience management. It helps organizations translate policy commitments into controlled processes, measurable objectives and evidence of continual improvement.

Who should consider this program?

Organizations managing security risks across logistics, transportation and supply chains.

Business outcomes

Identify supply-chain security threats
Improve partner and route controls
Strengthen incident readiness
Support secure international trade

How the assessment works

Application

We review activities, locations, personnel, requested scope and applicable requirements.

Planning

The responsible body, assessment method, timing and commercial conditions are documented.

Evaluation

Qualified personnel evaluate implementation using interviews, records, observation and sampling.

Independent review

Findings and corrective actions are reviewed before the applicable decision or statement is issued.

Preparing your organization

Define the intended scope, identify applicable legal and customer requirements, assign process ownership, maintain documented information and complete an internal review before the formal assessment. The duration depends on organization size, complexity, locations, shifts, risk and readiness.

Related frameworks

ISO 22301ISO 39001ISO 9001

Frequently asked questions

Contact our team with the country, sites, activities and requested scope. We will confirm availability, the responsible conformity-assessment body and delivery model.

Timing is established after application review and depends on scope, employee count, number of sites, readiness and required assessment days.

Many ISO management-system standards share a common structure. An integrated audit may be possible when scope, competence and program requirements allow it.

Scope review

Discuss ISO 28000:2022 with our team

Receive a proposal based on your organization, locations and intended certification or assessment scope.

Request a proposal →