This standard sets out the requirements for a resilience management policy in the supply chain so that an organization can develop and implement policies, objectives and programs taking into account:
——Legal, normative and other requirements to which the organization has signed - Information about the significant risks, hazards and threats that can affect the organization, its stakeholders and its supply chain - Protection of assets and processes - Management of disruption events This standard covers risks that the organization cannot anticipate and that the organization can control. Apply to risks identified that can be influenced or reduced. This standard does not mention specific performance criteria. This standard is also applicable to any organization that wishes to:a) establish, implement, maintain and improve a resilience management policy for the organization and its supply chainb) declared by the organization c) Demonstration of a management system, including a well-developed resilience management policy, by: 1) self-determination and self-declaration; 2) confirmation of conformity by parties with a stake in the organization, such as customers. Seek3) Seek confirmation of self-declaration by a group external to the organization4) Seek certification/registration of the management system by an external organization All requirements of this standard are integrated into any type of organizational management system based on the PCDA model. It was intended to be. This standard specifies the elements required for integration (technology, facilities, processes and
KS V ISO 28002:2013 history
2023KS V ISO 28002-2023 Security management systems for the supply chain－Development of resilience in the supply chain－Requirements with guidance for use
0000 KS V ISO 28002-2013(2018)
2013KS V ISO 28002:2013 Security management systems for the supply chain－Development of resilience in the supply chain－Requirements with guidance for use