ISO 28001:2007 — Supply Chain Security
Best practices for implementing supply chain security, assessments, and plans — ISO 28001:2007 provides the foundation framework for supply chain security management. Note: ISO 28001:2007 has been superseded by ISO 28000:2022.
This certificate is issued by CAS without third-party accreditation for this scheme. It is not within the scope of EGAC Schedule 012418B and is not recognised under the IAF MLA. Per IAF MD 23:2023, CAS clearly differentiates accredited and non-accredited services on every page.
ISO 28001:2007 specifies requirements for organisations in the supply chain to establish and implement supply chain security processes and practices — covering the assessment, implementation, and documentation of security practices throughout the international supply chain. It enables organisations to demonstrate that their supply chain security practices meet international requirements. Note: ISO 28000:2022 (Security management systems — Requirements) is the current second edition, published March 2022, which cancels and replaces ISO 28001:2007 with a fully revised management system framework. CAS offers certification against both standards during the transition period.
Logistics companies, freight forwarders, customs brokers, exporters, importers, port operators, and supply chain participants requiring documented supply chain security practices for international trade compliance, AEO applications, or customer requirements.
- Demonstrates supply chain security practices to customs and trade authorities
- Supports AEO (Authorised Economic Operator) status applications
- Reduces risk of cargo theft, tampering, and smuggling
- Required by some shipping lines, logistics clients, and trade facilitation programmes
- Structured approach to supply chain threat and risk assessment
- Improves supply chain transparency and traceability
- Foundation for transition to ISO 28000:2022