Asset, Facility & Supply Chain
ISO 28000:2022 Supply Chain Security – Lead Auditor
Overview
A professional programme for those who plan, lead and report management-system audits against ISO 28000:2022. It follows the audit principles of ISO 19011 and covers the full audit cycle — from planning and opening meeting to findings, nonconformity grading, reporting and follow-up — through realistic case work and role play.
The standard
About the standard
ISO 28000:2022
Supply Chain Security Management System
Specifies requirements for a general-purpose security management system that organizations of any type or size can apply across their operations, including supply-chain-related activities. It follows the Plan-Do-Check-Act structure shared with other ISO management-system standards, covering planning, implementation, monitoring, and continual improvement of security controls. Unlike its 2007 predecessor, the current edition is written as a sector-neutral standard rather than one focused specifically on logistics and seaports.
Key objectives
- Establish a generic, sector-neutral security management system
- Cover security risks relevant to supply-chain activities
- Apply Plan-Do-Check-Act discipline to security planning and controls
- Support continual monitoring and improvement of security performance
- Enable certification usable across commercial, government and non-profit bodies
Who uses it
Organizations across manufacturing, logistics, and distribution supply chains.
Contribution to the SDGs
Per ISO, ISO 28000 contributes to the following UN Sustainable Development Goals:
Learning outcomes
What you will be able to do
- Interpret the requirements of ISO 28000:2022 in an audit context
- Plan an audit programme and an individual audit, including scope, criteria and sampling
- Lead an audit team and conduct opening and closing meetings
- Collect and evaluate objective evidence through interview, observation and document review
- Grade nonconformities and write clear, defensible audit findings
- Prepare the audit report and follow up corrective actions
Who should attend
Auditors, consultants, management representatives and professionals who want to lead first-, second- or third-party audits.
More in Asset, Facility & Supply Chain
All Asset, Facility & Supply ChainInternal AuditorASM-01Asset, Facility & Supply Chain
ISO 55001:2024 Asset Management – Internal Auditor
Lead AuditorASM-02Asset, Facility & Supply Chain
ISO 55001:2024 Asset Management – Lead Auditor
Lead ImplementerASM-03Asset, Facility & Supply Chain
ISO 55001:2024 Asset Management – Lead Implementer
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.