ISO 28000 ISO 28000 ISO 28000:2007 (Specification for security management systems for the supply chain) is an International Organization for Standardization standard specifying requirements of a security management system particularly dealing with security assurance in the supply chain. Parts of the standard are considered "publicly available", while the entire specification can be purchased from the International Standards Organization. ISO 28000:2007 was developed to codify operations of security within the broader supply chain management system. The PDCA management systems structure was adopted in developing ISO 28000:2007 to bring the elements of this standard in congruence with related standards such as ISO 9001:2000 and
ISO/IEC 27006 ISO/IEC 27006 ISO/IEC 27006, part of a growing family of ISO/IEC Information Security Management System (ISMS) standards, the 'ISO/IEC 27000 series', is an information security standard published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). It is titled "Information technology - Security techniques - Requirements for bodies providing audit and certification of information security management systems". ISO/IEC 27006 lays out formal requirements for accredited organizations which certify other organizations compliant with ISO/IEC 27001. It effectively replaces EA 7/03 (Guidelines for the Accreditation of bodies operating certification/ registration of. Information Security Management Systems). The standard helps