ISO 28002:2011

INTERNATIONAL ISO
STANDARD 28002
First edition
2011-08-01

Security management systems for the
supply chain — Development of
resilience in the supply chain —
Requirements with guidance for use
Systèmes de management de la sécurité pour la chaîne
d'approvisionnement — Développement de la résilience dans la chaîne
d'approvisionnement — Exigences avec mode d'emploi




Reference number
ISO 28002:2011(E)
©
ISO 2011

---------------------- Page: 1 ----------------------
ISO 28002:2011(E)

COPYRIGHT PROTECTED DOCUMENT


©  ISO 2011
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means,
electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or
ISO's member body in the country of the requester.
ISO copyright office
Case postale 56 • CH-1211 Geneva 20
Tel. + 41 22 749 01 11
Fax + 41 22 749 09 47
E-mail copyright@iso.org
Web www.iso.org
Published in Switzerland

ii © ISO 2011 – All rights reserved

---------------------- Page: 2 ----------------------
ISO 28002:2011(E)
Contents Page
Foreword .iv
Introduction.v
0.1 General .v
0.2 Supply Chain Environment.v
0.3 Process Approach.vi
0.4 “Plan-Do-Check-Act” (PDCA) model .viii
1 Scope.1
2 Normative references.2
3 Terms and definitions .2
4 Requirements of Management System containing Resilience Policy .12
4.1 General .12
4.2 Understanding the Organization and its Context .13
4.3 Scope of Resilience Management Policy.14
4.4 Provision of Resources for the Resilience Management Policy .14
4.5 Resilience Management Policy .14
4.6 Resilience Policy Statement.14
Annex A (informative) Informative guidance on the incorporation of this International Standard
into a management standard .16
Annex B (informative) Informative Guidance on the Use of this International Standard .30
Annex C (informative) Terminology Conventions .53
Annex D (informative) Qualifiers to Application .54
Bibliography.55

© ISO 2011 – All rights reserved iii

---------------------- Page: 3 ----------------------
ISO 28002:2011(E)
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies
(ISO member bodies). The work of preparing International Standards is normally carried out through ISO
technical committees. Each member body interested in a subject for which a technical committee has been
established has the right to be represented on that committee. International organizations, governmental and
non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the
Inte
...