TT Talk - Supply Chain Security - new ISO standard


  • Date: 14/10/2007
  • Source: TT Talk 102

Supply Chain Security has been a hot topic for some years now with the vulnerability of international trade to threats such as economic and political terrorism, smuggling and organised crime becoming an increasing focus for companies. The Club is pleased to be working with Hart Security on these issues and welcomes this introductory item from Hart alerting readers to the new ISO security management standard.

Security of any international supply chain involves a number of different entities and generally spans many borders. Each entity will have their own specific objectives and needs driven by different initiatives dependent on the practice of the market in which they operate. The one common factor is that supply chains need to co-operate to ensure integrity throughout the whole chain as the security of any chain is only as good as its weakest link.

Several countries, regions and industries have developed initiatives to address supply chain security, including ISPS (International Ship and Port Facility Security Code), C-TPAT (Customs-Trade Partnership Against Terrorism), TAPA (Transported Asset Protection Association) and EU AEO (Authorised Economic Operator). Although these have undoubtedly collectively improved security there is still disharmony and confusion with companies either unsure what they should choose to do and what benefits it will bring, or frustrated at auditing or checking processes required for a number of different initiatives.

The International Organization for Standardization (ISO) has now developed ISO 28000:2007 Specification for Security Management Systems for the Supply Chain, released as a full standard on 21 September 2007. In the introduction to ISO 28000 it states: ‘This International Standard has been developed in response to demand from industry for a security management standard. Its ultimate objective is to improve the security of supply chains. It is a high level management standard that enables an organisation to establish an overall supply chain security management system.’

ISO 28000 has been developed along the same lines as ISO 9001 and ISO 14001 with the Plan-Do-Check-Act methodology and with the vast array of operators within the supply chain in mind, whether they be small or large. Clearly, the need for assimilation with other regulations and initiatives was desirable. Consequently regulatory compatibility was considered throughout the development process and the Standard has been developed to provide an overall management system that will provide the majority of requirements for any initiative or regulation currently in practice.

ISO 28000 requirements address security from a management perspective. A security management system which supports the operational and functional requirements of the supply chain demonstrates to customers, business partners and employees a company’s commitment to effective security practices and the protection of their personnel, goods and assets. By developing security requirements through a management system approach businesses will see immediate benefits and can feel certain that their security practices will easily be adapted to any future initiatives or regulations.

24 Hour Claims Hotline
+44 7000 882582

Through Transport Mutual Insurance Association Limited and TT Club Mutual Insurance Limited, trading as the TT Club. TT Club Mutual Insurance Limited, registered in the UK (Company number: 02657093) is authorised by the Prudential Regulation Authority and regulated in the UK by the Financial Conduct Authority and Prudential Regulation Authority. In Hong Kong, TT Club Mutual Insurance Limited is authorised and regulated by the Hong Kong Insurance Authority, in Singapore by the Monetary Authority of Singapore and in Australia by the Australian Prudential Regulation Authority. In the United States, TT Club Mutual Insurance Limited is approved as a surplus lines insurer in all states and is accessible through properly licensed surplus lines brokers. The registered offices are: 90 Fenchurch Street, London, EC3M 4ST.

Through Transport Mutual Insurance Association Limited, registered in Bermuda (Company number: 1750) is authorised and regulated in Bermuda by the Bermuda Monetary Authority and is authorised in the UK by the Prudential Regulation Authority and regulated in the UK by the Financial Conduct Authority and Prudential Regulation Authority.

The UK VAT Identification number for Through Transport Mutual Insurance Association Limited is: GB 564 5244 35 and for TT Club Mutual Insurance Limited is: GB 564 3375 30. The Italian VAT Identification number for TT Club Mutual Ltd is: 03627210101.