Have you heard of ISO 28002?  No? You should take note of this standard, because the ISO 28000 series specifies the requirements for a security management system for the supply chain. The standards address potential security issues at all stages of the supply process, thus targeting threats such as terrorism, fraud and piracy. The most recent addition to the series is ISO 28002: Security management systems for the supply chain – Development of resilience in the supply chain, published in September 2010. ISO 28002 details how an organization can engage in a comprehensive and systematic process of prevention, protection, preparedness, mitigation, response, continuity and recovery. This post will take an inside look at ISO 28002 and highlight the essential content.

Continue reading →