ISO 28000:2007-9
Specification for security management systems for the supply chain
Foreword ……………………………………………………………………………………iv
Introduction …………………………………………………………………………………v
1 Scope ……………………………………………………………………………………..1
2 Normative references ………………………………………………………………………..1
3 Terms and definitions ……………………………………………………………………….1
4 Security management system elements …………………………………………………………..3
4.1 General requirements ………………………………………………………………………3
4.2 Security management policy …………………………………………………………………4
4.3 Security risk assessment and planning ……………………………………………………….4
4.4 Implementation and operation ……………………………………………………………….7
4.5 Checking and corrective action …………………………………………………………….10
4.6 Management review and continual improvement …………………………………………………12
ISO 9001:2000 ……………………………………………………………………………….13
Bibliography ………………………………………………………………………………..16