ISO 28000 Supply Chain Security Management Lead Auditor

Module 1: Introduction to Supply Chain Security

• Supply chain security concepts
• Modern supply chain environments
• Security challenges
• Organisational responsibilities
• Security management principles
• Importance of systematic security management

Module 2: Understanding ISO 28000

• Purpose of ISO 28000
• Scope and application
• Management system approach
• Key terminology
• Standard structure
• Organisational application

Module 3: Context of the Organisation

• Internal issues
• External issues
• Interested parties
• Stakeholder requirements
• Management system scope
• Supply chain dependencies

Module 4: Supply Chain Security Environment

• Supply chain networks
• Suppliers and contractors
• Logistics operations
• Transportation activities
• Warehousing
• International supply chains

Module 5: Leadership and Commitment

• Leadership responsibilities
• Security policy
• Management commitment
• Roles and responsibilities
• Organisational accountability
• Security culture

Module 6: Security Risk Management

• Risk management principles
• Security threats
• Vulnerabilities
• Risk identification
• Risk assessment
• Risk treatment

Module 7: Threat and Vulnerability Assessment

• Threat identification
• Vulnerability analysis
• Exposure assessment
• Security scenarios
• Risk prioritisation
• Assessment documentation

Module 8: Security Objectives and Planning

• Security objectives
• Planning requirements
• Performance targets
• Responsibilities
• Resources
• Monitoring objectives

Module 9: Operational Security Controls

• Operational planning
• Process controls
• Physical security
• Access controls
• Personnel considerations
• Security procedures

Module 10: Supplier and Third-Party Security

• Supplier risks
• Contractor security
• Third-party controls
• Supplier evaluation
• Security requirements
• Ongoing monitoring

Module 11: Transportation and Logistics Security

• Transportation risks
• Cargo security
• Vehicle security
• Route considerations
• Handover controls
• Logistics monitoring

Module 12: Warehouse and Facility Security

• Facility protection
• Access management
• Storage security
• Restricted areas
• Visitor management
• Physical safeguards

Module 13: Security Incident Management

• Security incidents
• Incident identification
• Escalation
• Response procedures
• Incident investigation
• Lessons learned

Module 14: Emergency Preparedness and Response

• Emergency scenarios
• Response planning
• Roles and responsibilities
• Communication arrangements
• Response testing
• Recovery considerations

Module 15: Business Continuity and Resilience

• Supply chain disruption
• Continuity planning
• Critical activities
• Alternative arrangements
• Recovery priorities
• Supply chain resilience

Module 16: Monitoring and Measurement

• Security performance
• Monitoring activities
• Security indicators
• Performance data
• Trend analysis
• Evaluation of results

Module 17: Introduction to Management System Auditing

• Audit principles
• Audit objectives
• Audit scope
• Audit criteria
• Audit evidence
• Auditor responsibilities

Module 18: Lead Auditor Roles and Responsibilities

• Audit leadership
• Auditor competence
• Professional behaviour
• Audit team responsibilities
• Communication
• Managing audit activities

Module 19: Establishing the Audit Programme

• Audit programme objectives
• Audit priorities
• Audit frequency
• Resources
• Auditor selection
• Programme monitoring

Module 20: Audit Planning

• Audit objectives
• Audit scope
• Audit criteria
• Audit schedule
• Audit team allocation
• Audit plan development

Module 21: Preparing Audit Documentation

• Audit checklists
• Working documents
• Process questions
• Evidence requirements
• Sampling plans
• Audit records

Module 22: Conducting Opening Meetings

• Meeting objectives
• Introductions
• Confirming audit scope
• Audit methodology
• Communication arrangements
• Clarifying expectations

Module 23: Gathering Audit Evidence

• Interviews
• Observation
• Document review
• Record examination
• Sampling
• Evidence verification

Module 24: Auditing Supply Chain Security Controls

• Control implementation
• Operational effectiveness
• Risk-based evaluation
• Supplier controls
• Physical controls
• Security performance

Module 25: Identifying Audit Findings

• Conformity
• Nonconformity
• Audit observations
• Evidence-based findings
• Finding classification
• Documenting findings

Module 26: Managing Audit Teams

• Assigning responsibilities
• Coordinating auditors
• Managing audit progress
• Resolving audit issues
• Team communication
• Maintaining audit consistency

Module 27: Conducting Closing Meetings

• Presenting findings
• Explaining evidence
• Discussing conclusions
• Managing disagreements
• Confirming next steps
• Closing communication

Module 28: Audit Reporting

• Audit report structure
• Audit findings
• Audit conclusions
• Evidence documentation
• Report accuracy
• Report communication

Module 29: Corrective Actions and Follow-Up

• Root cause considerations
• Corrective action plans
• Reviewing responses
• Verification activities
• Follow-up audits
• Closing findings

Module 30: Continual Improvement of Supply Chain Security

• Performance evaluation
• Audit results
• Management review
• Improvement opportunities
• Strengthening security controls
• Continuous improvement