DD ISO PAS 28000:2005 pdf download Specification for security management systems for the supply chain
Scope
This Publicly Available Specification specifies the requirements for a security management system, includingthose aspects critical to security assurance of the supply chain. These aspects include, but are not limited tofinancing, manufacturing,information management and the facilities for packing, storing and transferringgoods between modes of transport and locations. Security management is linked to many other aspects ofbusiness management. These other aspects should be considered directly, where and when they have animpact on security management, including transporting these goods along the supply chain.
This Publicly Available Specification is applicable to all sizes of organizations, from small to multinational, inmanufacturing, service, storage or transportation at any stage of the production or supply chain that wishes to:
aestablish, implement, maintain and improve a security management system;
b)assure compliance with stated security management policy;
c)demonstrate such compliance to others;
seek certification/registration of its security management system by an Accredited third party CertificationdBody; or
e) make a self-determination and self-declaration of compliance with this Publicly Available Specification
There are legislative and regulatory codes that address some of the requirements in this Publicly AvailableSpecification. It is not the intention of this Publicly Available Specification to reauire duplicative demonstrationof compliance.
Organizations that choose third party certification can further demonstrate that they are contributingsignificantly to supply chain security.
Normative references
No normative references are cited. This clause is included in order to retain clause numbering similar to othermanagement system standards.
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply3.1
facility
plant, machinery, property, buildings, vehicles, ships, port facilities and other items of infrastructure or plantand related systems that have a distinct and quantifiable business function or service
NOTEThis definition includes any software code that is critical to the delivery of security and the application ofsecurity management.
DD ISO PAS 28000:2005 pdf download
PS:Thank you for your support!