ISO/CD 28018

Security and resilience — Security management systems — Guidelines for the application and implementation of ISO 28000 in the supply chain

Scope

This document gives guidance on methods for understanding and extending the principles of security management embodied in ISO 28000 to the management of supplier and client
relationships. It specifies how to develop and document a strategy to be better prepared to manage security in the supply chain.

This document is generic and applicable to all organizations. It is applicable to suppliers of products, services and resources both upstream and downstream. This document is applicable to all materials and products. It does not apply to services as final outputs.