ISO 28000 Security and resilience management system
ISO 28000 is the international standard for security and resilience management systems, with a strong supply chain focus. It helps organisations identify security threats and protect people, goods and operations. ICFC supports implementation, audits and training.
ISO Management Systems
- Standard or scheme
- ISO 28000
- International Organization for Standardization (ISO)
- Type
- Certifiable
- Certificate issued by an accredited certification body
- Funding
- Not on the EDGE Standards list
- Non-grant engagement
What is ISO 28000?
ISO 28000 sets requirements for a security management system covering risks to the organisation and its supply chain.
Who is ISO 28000 for?
Logistics, ports, freight forwarders, warehousing and manufacturers with high-value supply chains.
No grant found when checked - Non-grant engagement
We did not find this standard on the EDGE Standards list when we checked. Ask us about non-grant options or other schemes that may apply.
Impartiality
Impartiality comes first. Every engagement begins with a conflict-of-interest check. We keep consulting and auditing roles separate, and our auditors never audit, on behalf of a certification body, an organisation that ICFC has consulted on the same scope within the period set by that body.
Our certification role
We do not certify organisations ourselves; certificates are issued by accredited certification bodies or scheme owners.
How we help
Third-party audits
Third-party certification audits for ISO 28000 are delivered by our auditors on behalf of accredited certification bodies. The certificate is issued by the certification body, not by ICFC.
Second-party audits
Supplier and partner audits against ISO 28000 on behalf of your organisation, with clear findings you can act on.
Internal audits
First-party internal audits of your security and resilience management by experienced auditors, combinable with other standards in one integrated audit.
Funding
We explain which scheme, if any, applies and what it requires before you commit.
Non-grant
A fixed-scope engagement: gap assessment, documentation, implementation coaching, internal audit and management review, and support through the formal audit or assessment.
How we work
Practical, proportionate systems that your staff can run after we leave.
Classroom
Public and in-house classroom courses on ISO 28000: awareness, implementation and internal auditor levels.
Online LMS
Self-paced and live-online courses on the ICFC Digital LMS, with progress tracking and certificates of completion.
Funding
Funding depends on each course's approval status, shown on the course page in the LMS.