ISO 28000 ISO 28000 ISO 28000:2007 (Specification for security management systems for the supply chain) is an International Organization for Standardization standard specifying requirements of a security management system particularly dealing with security assurance in the supply chain. Parts of the standard are considered "publicly available", while the entire specification can be purchased from the International Standards Organization. ISO 28000:2007 was developed to codify operations of security within the broader supply chain management system. The PDCA management systems structure was adopted in developing ISO 28000:2007 to bring the elements of this standard in congruence with related standards such as ISO 9001:2000 and
ISO 9000 modified to allow the standard to integrate more easily with other international management systems standards. The new ISO 9001:2015 management system standard helps ensure that consumers get reliable, desired quality goods and services. This further increases benefits for a business. The 2015 version is also less prescriptive than its predecessors and focuses on performance. This was achieved by combining the process approach with risk-based thinking, and employing the Plan-Do-Check-Act cycle at all levels in the organization. Some of the key changes include: Two types of auditing are required to become registered to the standard: auditing by an external certification body