ISO 28000 Safety and Durability
Secure your supply chain with the ISO 28000 standard. Reduce risks, improve business continuity and strengthen your reputation. Contact our experts now!

What are ISO 28000 Safety Management Systems?
In today’s global economic system, security management is of great importance in all sectors and especially in supply chains. The ISO 28000 Security Management Systems Standard was published by the International Standard Organization (ISO) and made available to organizations. This standard enables to determine the level of risk in supply chain activities, plan for security, assess risks, define requirements and set goals and objectives. ISO 28000 directly addresses all factors that affect security management in the supply chain, including the transportation of goods.
The most current version of the standard published by ISO was published in 2022 as ISO 28000:2022.
The ISO 28000 standard aims for organizations to develop a comprehensive security management system, including supply chain processes. The main purpose of the standard is to reveal the risks and opportunities of companies regarding security issues; to ensure that risks are controlled and opportunities are evaluated. It also aims to comply with legal regulations and international norms regarding the safety of operations. ISO 28000 also supports the creation of a security system in line with other management systems (quality, environment, occupational health and safety, energy, etc.). This standard applies to organizations of all sizes and sectors.
Benefits of the ISO 28000 Standard
Implementation of the ISO 28000 standard brings many benefits to organizations
Mitigating Risks
It helps reduce human, product and other risks in the supply chain.
Trade Facilitation
It speeds up the transportation of goods across borders and facilitates trade.
Improving Customer Satisfaction
Increases customer satisfaction by providing safe and reliable services.
Ensuring Safety
It addresses potential security challenges by targeting threats such as terrorism, counterfeiting and piracy.
Reducing Costs
Cost savings by reducing the impact of security incidents.
Legal Compliance
Complies with legal regulations and international norms regarding the safety of operations.
Enhancing Reputation and Growth
It boosts your business’ trust, reputation and future growth.
Competitive Advantage
Gain a competitive advantage in the sector and increase your chances of entering new markets.
Business Continuity
It ensures that work is not interrupted even in the event of security breaches.
Secure Your Supply Chain
Contact us for ISO 28000 certification process and expert support.

ISO 28000 Certification Process
ISO 28000 Security and Resilience – After the organizations wishing to obtain the Security Management System Certificate have established the security management system, certification is carried out as follows.
Certification Audit:
Completion of the certification audit in two phases;
Stage 1 Audit: General examination of the documentation prepared by the company within the scope of ISO 28000 Safety and Resilience – Safety Management.
Stage 2 Audit: On-site control of the documentation applications prepared by the company within the scope of ISO 28000 Safety and Durability – Safety Management System and identification of appropriate and possible non-conforming issues.
Corrective Actions, Follow-up Audit and Certification:
If nonconformity is detected in the Stage 2 Audit, ISO 28000 Safety and Durability – Safety Management System Certificate of Conformity is issued after the nonconformity is closed by the organization applying for certification or by the certification body with a follow-up audit according to the type and size of the nonconformity.
Surveillance Audits:
Surveillance audits are audits conducted in the second and third years after the certification audit. In surveillance audits, it is determined that the organization’s processes continue correctly after certification.
If nonconformity is detected in the surveillance audit, it is decided to continue the ISO 28000 Safety and Durability – Safety Management System Certificate of Conformity after the nonconformity is closed by the organization audited or by the certification body with a follow-up audit according to the type and size of the nonconformity.
Periodic surveillance audits are mandatory in order to maintain the validity of the ISO 28000 Safety and Durability – Safety Management System Standard Certificate and to determine that the organization’s management system continues to comply with the standard. These periodic surveillance audits are 1st Surveillance and 2nd Surveillance audits. The first of these surveillance audits must be completed within 12 months after the Stage 2 audit and the second within 24 months after the Stage 2 audit.
Recertification Audit:
It is a type of audit conducted in the fourth year after the Stage 2 audit and conducted to organizations that implement the ISO 28000 Safety and Resilience – Safety Management System Standard and have undergone the first certification audit. As in Stage 2, 1st Surveillance and 2nd Surveillance audits, documentation and application control of the organization is carried out by on-site audit.
Key Elements of the ISO 28000 Standard
The ISO 28000 standard includes specific elements for establishing and maintaining a safety management system
- Safety management system framework
- Defining security policy and objectives
- Safety risk assessment and planning
- Implementation and operational control
- Monitoring, measurement and corrective actions
- Management review and continuous improvement

