How does ISO 28000:2022 differ from ISO 28001:2007?

ISO 28000:2022 (Second edition, March 2022) cancels and replaces ISO 28001:2007. The 2022 edition adopts the PDCA management system model, adds ISO 31000 risk management alignment in Clause 4, and adds ISO 22301 business continuity alignment in Clause 8 with security strategies, procedures, and security plans including response and recovery. Both standards address supply chain security — ISO 28001:2007 remains valid for organisations with existing certificates during any transition period.

How does ISO 28000 relate to C-TPAT?

ISO 28001 is aligned with the principles of C-TPAT (US Customs-Trade Partnership Against Terrorism) and similar trade security programmes. It provides a certifiable standard for supply chain security practices.

By CAS

ISO 28000:2022 — Security Management Systems

Certificazione ISO 28000:2022 per i Sistemi di Gestione della Sicurezza della Catena di Fornitura — standard aggiornato per la sicurezza della supply chain end-to-end.

By CAS — Not Under EGAC Accreditation

This certificate is issued by CAS without third-party accreditation for this scheme. It is not within the scope of EGAC Schedule 012418B and is not recognised under the IAF MLA. Per IAF MD 23:2023, CAS clearly differentiates accredited and non-accredited services on every page.

By CAS ISO 28000:2022 + Amd.1:2024

Apply for Certification Talk to Our Team

ISO 28000:2022 + Amd.1:2024

SeMS

What is Security Management Systems?

ISO 28000:2022 specifica i requisiti per un Sistema di Gestione della Sicurezza della Catena di Fornitura (Supply Chain Security Management System). Aiuta le organizzazioni a stabilire, attuare, mantenere e migliorare un sistema di gestione per garantire la sicurezza nelle attività della catena di fornitura. La versione 2022 sostituisce ISO 28000:2007.

Who Is This For?

Operatori logistici, freight forwarder, trasportatori marittimi, aerei e terrestri, gestori di porti e terminal, esportatori, importatori, e qualsiasi organizzazione coinvolta nella movimentazione di merci a livello internazionale.

Key Benefits

ISO 28000:2022 — versione aggiornata con requisiti rafforzati su rischio e cyber security
Riduzione di furti, manomissioni, contrabbando e contraffazione
Vantaggio competitivo nelle gare di logistica internazionale
Allineata con AEO (Authorised Economic Operator) UE e C-TPAT (USA)
Riduzione di ispezioni doganali e tempi di sdoganamento
Si integra con ISO 9001, ISO 14001 e ISO 45001

Certification Process

Application & Review

Submit your application. CAS reviews your organisation's scope, personnel, sites, and activities to prepare a detailed audit time calculation and formal commercial proposal.

Stage 1 — Document Review

On-site or remote review of your management system documentation, readiness assessment, and confirmation of Stage 2 audit scope and plan.

Stage 2 — On-site Audit

Full on-site audit of the implemented management system against the standard's requirements. Findings are reported; nonconformities must be closed before certification.

Certification Decision

CAS's independent certification committee reviews the audit findings and issues the certificate. The certificate is valid for 3 years.

Surveillance & Recertification

Annual surveillance audits (~1/3 of initial audit time) maintain certification. Recertification audit (~2/3 of initial time) is conducted before certificate expiry to renew for a further 3 years.

Frequently Asked Questions

In cosa differisce ISO 28000:2022 da ISO 28001:2007?

ISO 28000:2022 (Seconda edizione, marzo 2022) annulla e sostituisce ISO 28001:2007. L'edizione 2022 adotta il modello PDCA del sistema di gestione, aggiunge l'allineamento alla gestione del rischio ISO 31000 nella Clausola 4, e aggiunge requisiti rafforzati su minacce, valutazione del rischio e controlli di sicurezza.

Come si relaziona ISO 28000 a C-TPAT?

ISO 28001 è allineata ai principi di C-TPAT (US Customs-Trade Partnership Against Terrorism) e a programmi di sicurezza commerciale simili. Fornisce uno standard certificabile per la sicurezza della catena di fornitura riconosciuto a livello globale, complementando i programmi specifici per paese.

Related Services

Management Systems

Product & Food Safety

Social, Ethics & Governance

ISO 28000:2022 — Security Management Systems