Supply Chain
ISO 28000:2022 Supply Chain Security Management System
Manage security risks across operations and increasingly complex supply chains.
About the standard
Specifies requirements for a general-purpose security management system that organizations of any type or size can apply across their operations, including supply-chain-related activities. It follows the Plan-Do-Check-Act structure shared with other ISO management-system standards, covering planning, implementation, monitoring, and continual improvement of security controls. Unlike its 2007 predecessor, the current edition is written as a sector-neutral standard rather than one focused specifically on logistics and seaports.
Objectives of the standard
- Establish a generic, sector-neutral security management system
- Cover security risks relevant to supply-chain activities
- Apply Plan-Do-Check-Act discipline to security planning and controls
- Support continual monitoring and improvement of security performance
- Enable certification usable across commercial, government and non-profit bodies
Who benefits: Organizations across manufacturing, logistics, and distribution supply chains.
Learn more about ISO 28000:2022 on the ISO website ↗Source: iso.org
Standard overview
A short overview of ISO 28000:2022 is available on the ISO website, where you can also read the full standard.
Watch overview & read the standard on iso.org ↗Learning paths
Available learning paths
Select the path that matches your role to see the full outline and continue to registration.
Foundation
2 days · 16 hours
Introductory, awareness-level training that explains the purpose, structure, key clauses, terminology, principles and business value of the standard. Suitable for beginners, employees, managers, process owners and anyone who needs a general understanding.
View details →Internal Auditor
3 days · 24 hours
For participants who conduct internal audits within their own organisation or as part of an internal audit team. Covers audit principles, planning, evidence collection, findings, nonconformities, corrective action and reporting, referencing ISO 19011.
View details →Lead Implementer
5 days · 40 hours
For participants who plan, establish, implement, maintain and improve a management system based on the standard. Covers gap analysis, scope, governance, risk-based planning, documentation, controls, performance evaluation, internal audit, management review and continual improvement.
View details →Lead Auditor
5 days · 40 hours
For participants who plan, lead, conduct, report and follow up audits against the standard. Covers audit programme management, planning, team leadership, interview techniques, evidence evaluation, nonconformity grading, reporting and follow-up.
View details →Delivery tracks
Choose how you learn
The delivery track is selected during registration, after you pick a learning path.
Online
Remote live or self-paced learning, depending on the course setup. Flexible access for professionals who prefer to learn from anywhere.
Offline
Classroom, onsite or in-house delivery. Ideal for groups and organisations that need face-to-face interaction and hands-on workshops.
Fast Track
Receive the course materials, study independently and complete the assessment within 14 days. Recommended for experienced professionals.
Certificate & assessment
What you receive
Certificate issued
AXIOS Academy Certificate of Completion
Assessment
Course assessment / exam as defined for the selected level
Verification
Every certificate has a permanent public record on the Academy register
Contribution to the SDGs
Per ISO, ISO 28000 contributes to the following UN Sustainable Development Goals:
AXIOS Academy provides training and issues its own Certificate of Completion. It operates separately from AXIOS certification: attending a course has no bearing on any certification decision, and ISO itself does not certify organisations or individuals.
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.