This standard defines the security requirements during the supply chain process, relating security management to other aspects of the existing business management system. These include all activities controlled or influenced by organizations that impact supply chain security, which includes transportation of these goods along the supply chain.
ISO 28000 uses an additional pragmatic approach where the risk levels of organisations supply chain operations are identified. It enables your organization to execute a risk assessment with supporting management tools (I.e., document controls, key performance indicators, internal audits and training) and implements the controls in accordance with the risk involved.