ISO 28001:2007 · Supply Chain Security · Evidence & Implementation Kit
Secure your international supply chain to ISO 28001, without building the threat assessment and plan yourself.
Every ISO 28001 element handed to you as an adopt-ready control, from the threat-scenario security assessment and the supply chain security plan through cargo and documentation integrity, with the evidence an assessor examines.
Assessment-ready in a weekend, not a quarter.
Here is the honest situation. Customs programs like AEO and C-TPAT, and the buyers behind them, expect a real supply chain security program, and ISO 28001 is the international best-practice standard for one: define your role in the international supply chain, run a threat-scenario security assessment, and build a supply chain security plan with countermeasures, a security officer, personnel and physical security, and cargo and documentation integrity. Building that assessment and plan, and evidencing it, is weeks of work, and a plan with no threat assessment behind it is exactly what an assessor challenges.
This Kit removes that build. It is every ISO 28001 element written as an adopt-ready control you personalize in a weekend, with the evidence an assessor examines.
What you get, the moment you buy
32
Elements as adopt-ready controls. Every ISO 28001 element, from scope and the threat-scenario security assessment through the security plan, personnel and physical security, and cargo and documentation integrity, written so you personalize and apply it.
32
Evidence-they-examine checklists. For each element, exactly what an assessor examines, plus where supply chain security gaps appear, so you close them before the assessment.
1
Supply Chain Security Control Matrix, pre-built. Every element in a working spreadsheet, ready to record status and evidence location across the supply chain.
1
Gap & Readiness Assessment. Score each element and the workbook returns your readiness as a single percentage, and exactly what to fix next.
Grounded in ISO 28001:2007, with the threat-scenario security assessment, the supply chain security plan, the security officer and cargo and documentation integrity called out, aligned to AEO and customs programs. Editable Word and Excel files.
The plan is only as good as the threat assessment
ISO 28001 builds the security plan from a threat-scenario assessment: you identify the scenarios, rate consequence and likelihood, and put countermeasures against each. This Kit builds that assessment first, so your plan defends against real threats rather than a generic checklist.
What one control looks like
This is the threat-scenario security assessment, the foundation the plan is built on. All 32 are built to this depth.
SCS-5 Establish a documented security risk assessment methodology SECURITY ASSESSMENT
Implement this
[Organization] shall establish and document a security risk assessment methodology that defines how security threat scenarios are identified, how consequences and likelihood are classified and scored, how existing countermeasures are evaluated, and how residual risk is prioritized, and shall apply the methodology consistently across all in scope supply chain segments.
Practitioner note.
A structured method underpins the threat scenario based assessment that ISO 28001:2007 requires.
Evidence an assessor examines
- Documented security risk assessment methodology or procedure
- Defined consequence and likelihood classification scales
- Risk scoring or prioritization scheme
- Records showing consistent application across sites or segments
Common finding they raise: Each assessment uses an ad hoc approach, so scores are not comparable and prioritization cannot be defended to auditors or customs authorities.
Why this is not another template pack
- The evidence is the point. A security plan you cannot evidence is paper. This tells you exactly what an assessor examines and where gaps appear, for every element.
- Threat-based, not generic. The plan is built from a threat-scenario assessment with consequence and likelihood, so your countermeasures target real risks, the way ISO 28001 intends.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. ISO 28001 supports AEO and customs security programs, so this work feeds your trade-facilitation and supply-chain resilience effort.
Who buys this
Manufacturers, freight forwarders, carriers and others in the international supply chain, often pursuing AEO or C-TPAT, plus the security and logistics leads who own it. Whether it is a first program or a renewal, you save weeks and walk in with the assessment, plan and evidence ready.
By the end of the weekend you will have
✓ An adopt-ready control for all 32 elements
✓ A completed supply chain security control matrix
✓ The evidence an assessor examines
✓ Your threat-scenario assessment and security plan
✓ A readiness percentage and a fix list
✓ The common gaps designed out
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Does it support AEO or C-TPAT? Yes. ISO 28001 aligns with the customs supply-chain security programs, and the assessment and plan this Kit builds support those applications.
Does it cover cargo integrity? Yes. Cargo, conveyance and documentation integrity, including seals, is a core control group.
Is this the 2007 edition? Yes, the ISO 28001:2007 threat-scenario assessment and plan model. Note a later edition aligned to ISO 28000:2022 exists.
What if it is not for me? A 30-day money-back guarantee.
Do not build a security plan with no threat assessment behind it.
Every ISO 28001 element is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and secure your supply chain this weekend.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com
