ISO 28000 ISO 28000 ISO 28000:2007 (Specification for security management systems for the supply chain) is an International Organization for Standardization standard specifying requirements of a security management system particularly dealing with security assurance in the supply chain. Parts of the standard are considered "publicly available", while the entire specification can be purchased from the International Standards Organization. ISO 28000:2007 was developed to codify operations of security within the broader supply chain management system. The PDCA management systems structure was adopted in developing ISO 28000:2007 to bring the elements of this standard in congruence with related standards such as ISO 9001:2000 and
ISO/IEC 27000 address this. The target audience is users of the remaining ISO/IEC 27000-series information security management standards. ISO/IEC 27000 ISO/IEC 27000 is part of a growing family of ISO/IEC Information Security Management Systems (ISMS) standards, the 'ISO/IEC 27000 series'. ISO/IEC 27000 is an international standard entitled: "Information technology — Security techniques — Information security management systems — Overview and vocabulary". The standard was developed by subcommittee 27 (SC27) of the first Joint Technical Committee (JTC1) of the International Organization for Standardization and the International Electrotechnical Commission. ISO/IEC 27000 provides: ISO/IEC 27000 is available via the ITTF website. (free download) The standard