Skip to content
AcademyYou are in AXIOS AcademyCertification

Asset, Facility & Supply Chain

ISO 28000:2022 Supply Chain Security – Internal Auditor

Internal AuditorSCM-0124 hours

Overview

A practical programme that equips staff to audit their own organisation against ISO 28000:2022. Participants learn to plan an internal audit, gather objective evidence, write clear findings and support corrective action, in line with ISO 19011.

The standard

About the standard

ISO 28000:2022

Supply Chain Security Management System

Specifies requirements for a general-purpose security management system that organizations of any type or size can apply across their operations, including supply-chain-related activities. It follows the Plan-Do-Check-Act structure shared with other ISO management-system standards, covering planning, implementation, monitoring, and continual improvement of security controls. Unlike its 2007 predecessor, the current edition is written as a sector-neutral standard rather than one focused specifically on logistics and seaports.

Key objectives

  • Establish a generic, sector-neutral security management system
  • Cover security risks relevant to supply-chain activities
  • Apply Plan-Do-Check-Act discipline to security planning and controls
  • Support continual monitoring and improvement of security performance
  • Enable certification usable across commercial, government and non-profit bodies

Who uses it

Organizations across manufacturing, logistics, and distribution supply chains.

Learning outcomes

What you will be able to do

  • Explain the intent and key requirements of ISO 28000:2022
  • Prepare an internal audit plan and checklist
  • Gather objective evidence and record findings
  • Write nonconformity statements and support root-cause analysis
  • Report audit results to management

Who should attend

Staff joining an internal audit team, process owners and quality, safety or compliance coordinators.

AXIOS · Certification body

Looking for management-system certification?

AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.