GB/T 38701-2020Security management systems for the supply chain - Requirements for bodies providing audit and certification of supply chain security management systems (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

This standard uses the translation method equivalent to ISO 28003..2007 "Supply Chain Safety Management System Audit of Supply Chain Safety Management System

Requirements for certification bodies.

The documents in China that have a consistent correspondence with the normatively cited international documents in this standard are as follows.

--- GB/T 27000-2006 Conformity assessment vocabulary and general principles (ISO /IEC 17000..2004, IDT)

--- GB/T 19011-2003 Management System Audit Guidelines (ISO 19011..2002, IDT)

This standard is proposed and managed by the National Public Safety Fundamental Standardization Technical Committee (SAC/TC351).

This standard was drafted by. China National Institute of Standardization, China National Accreditation Service for Conformity Assessment, China Cybersecurity Review Technology and Certification

Center, China Quality Certification Center, Jiangsu Huiyuan Supply Chain Management Co., Ltd., State Grid Shandong Electric Power Company, Fangyuan Logo Certification Group Co., Ltd.

Company, Fujian Youta Co-Creation Network Technology Co., Ltd., China Certification and Accreditation Association, Jiangsu Institute of Quality and Standardization, Beijing Urban System

Engineering Research Center.

Main drafters of this standard. Qin Tingxin, Yan Jingqing, Wei Jun, Pan Ying, Bai Yuanlong, Sun Shijun, Song Yuewei, Ye Yaohua, Wang Jingjing, Zhai Jiqing,

Wang Yanwei, Cui Wei, Wang Wan, Wei Xiaoqing, Wu Kangning, Ren Qingyue, Zhang Jian, Sun Bing, Li Zhengxiang, Zeng Fanyang, Chen Wei, Wang Yong.

Introduction

This standard is intended for use by agencies implementing supply chain safety management system audits and certifications. Supply chain safety management system certification is a third-party cooperation

Assessment activities (see 5.5 in ISO /IEC 17000..2004), the organization implementing this activity is a third-party conformity assessment structure

This type of organization is referred to as a "certification body", and this term does not prevent the use of other names but engaged in activities within the scope of this standard

This standard. In fact, this standard applies to any organization involved in the assessment of the supply chain safety management system.

Supply chain safety management system certification is a guarantee that the organization has implemented a supply chain safety management system consistent with its policies

method.

The certification of the supply chain safety management system will be carried out by a certification body recognized by a recognized body [such as a member of the International Accreditation Forum (IAF)]

Implementation.

This standard specifies the requirements for certification bodies. Compliance with these requirements is to ensure that the certification body is capable, consistent and trustworthy

Implementation of supply chain safety management system certification to promote international and domestic recognition of these institutions and accept their certification. This standard serves as a

The basis of recognition of the certification of the supply chain safety management system is conducive to international trade.

Supply chain safety management system certification independently verifies the organization's supply chain safety management system.

a) meet the requirements;

b) be able to achieve its stated policies and goals from beginning to end; and

c) is effectively implemented.

Therefore, the supply chain safety management system certification provides value for the organization, the organization's customers and stakeholders.

This standard is intended to serve as a basis for recognizing the ability of a certification body to provide certification of a supply chain safety management system. This standard can be used as a recognition

The basis of the certification organization 's ability to provide supply chain safety management system certification (the form of recognition may include notification, peer review, regulatory authority

Direct recognition of the industry alliance).

Certification activities include auditing the organization's supply chain safety management system. When an organization's supply chain safety management system meets a certain

When certain standards (such as ISO 28000) or other regulations require, this conformity is usually verified in the form of certification documents or certification certificates

Ming.

Establish your own supply chain security management system (including ISO 28000 supply chain security management system, other specific supply chain security management

Management system requirements, quality system, environmental management system or the integration of occupational health and safety management system and supply chain safety management system)

The certified organization is completed. In addition to the contrary requirements of the relevant laws, the organization decides how to arrange the composition of these systems. Department of Management System

The degree of integration between divisions varies from organization to organization. Therefore, when integrating the supply chain security management system in a wider organization, the

It is appropriate for the certification body to consider the culture and habits of its customers.

Supply chain safety management system

Requirements for safety management system audit certification bodies

1 Scope

For organizations that provide supply chain safety management system audits and certifications based on management system specifications and standards (e.g. ISO 28000), this

The standard gives principles and requirements. This standard specifies the minimum requirements for certification bodies and their related auditors, and identifies audit and certification clients

The unique requirements for confidentiality in the organization of households.

The requirements for the supply chain safety management system may come from many aspects. The development of this standard aims to help meet the requirements of ISO 28000

Supply Chain Safety Management System Specification and other supply chain safety management system international standards require certification of the supply chain safety management system. this

The content of the standard can also be used to support supply chain safety management system certification based on other specific supply chain safety management system requirements.

This standard.

--- Provide consistent application of ISO 28000 (or other specific supply chain safety management system requirements) certification body accreditation

guide;

--- It is clear that it is applicable to the requirements in accordance with the standard requirements of the supply chain safety management system (or other specific supply chain safety management system requirements).

Implement rules for auditing and certification of supply chain safety management systems;

--- Provide customers with the necessary information and confidence about the way their suppliers are certified.

Note 1. The certification of the supply chain security management system is sometimes called "registration", and the certification body is sometimes called "registration body".

Note 2. The certification body can be non-governmental or government (with or without legal authority).

Note 3. This standard can be used as a criterion document for accreditation, peer review or other audit processes.

2 Normative references

The following documents are essential for the application of this document. For dated references, only the dated version applies to this article

Pieces. For the cited documents without date, the latest version (including all revised versions) applies to this document.

ISO /IEC 17000..2004 Conformity assessment vocabulary and general principles (Conformityassessment-Vocabularyand

generalprinciples)

ISO 19011..2002 Management System Audit Guidelines (Guidelinesforqualityand/orenvironmentalmanagement

systemsauditing)

ISO 28000 Supply Chain Security Management System Specification (Specification for security management systems for the

supplychain)

3 Terms and definitions

The terms and definitions defined by ISO /IEC 17000 and the following apply to this document.

3.1

Certified client

An organization that has obtained a qualified third-party certification for the supply chain security management system.

3.2

Impartiality

The objectivity that actually exists and is recognized.