ISO 28000:2007-9
Specification for security management systems for the supply chain
Foreword ................................................................................................iv
Introduction .............................................................................................v
1 Scope ..................................................................................................1
2 Normative references ...................................................................................1
3 Terms and definitions ..................................................................................1
4 Security management system elements ....................................................................3
4.1 General requirements .................................................................................3
4.2 Security management policy ...........................................................................4
4.3 Security risk assessment and planning ................................................................4
4.4 Implementation and operation .........................................................................7
4.5 Checking and corrective action ......................................................................10
4.6 Management review and continual improvement .........................................................12
ISO 9001:2000 ...........................................................................................13
Bibliography ............................................................................................16