GB/T 38702-2020Security management systems for the supply chain - Best practices for implementing supply chain security, assessments and plans - Requirements and guidance (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

This standard uses the translation method equivalent to adopting ISO 28001..2007 "Supply Chain Security Management System to Implement Supply Chain Security, Evaluation and Planning

Planning best practice requirements and guidelines.

This standard is proposed and managed by the National Public Safety Fundamental Standardization Technical Committee (SAC/TC351).

This standard was drafted by. China National Institute of Standardization, Beijing Urban System Engineering Research Center, Yaotai Logistics Co., Ltd., Fujian You

He jointly created Network Technology Co., Ltd., China Quality Certification Center, Jiangsu Huiyuan Supply Chain Management Co., Ltd., State Grid Shandong Electric Power Company, Fang

Round Mark Certification Group Co., Ltd., China Cybersecurity Review Technology and Certification Center.

Introduction

Security incidents in the international supply chain have threatened the international trade and economic development of various trading countries, as well as personnel, goods, infrastructure and design

Be prepared-including transportation vehicles-to prevent security incidents and their potential damaging effects. Overall, this protection

And all aspects of society are beneficial.

The international supply chain is highly dynamic and consists of many entities and business partners. This standard recognizes this complexity, and organizations can

The requirements of this standard apply to specific business models and their role and role in the international supply chain.

This standard provides the organization with options to determine and document a reasonable level of security in the international supply chain and its components, so that the organization can

Enough to make better decisions based on security risks in the international supply chain.

This standard is diversified and intended to coordinate and supplement the "World Customs Organization (WCO) Global Trade Security and Facilitation Standards Framework." this

The standard is not intended to cover, replace or replace the supply chain security schemes, certification and verification requirements of various customs agencies.

The purpose of this standard is to help organizations determine the appropriate level of safety for their control in the international supply chain. At the same time, it is also internal or external

Department auditors or government agencies that use international standards as supply chain security program acceptance criteria provided confirmation or verification of the organization 's current supply chain

Basis of safety level. Customers, business partners, government departments, and others may require organizations that claim to comply with this standard to pass an audit or confirm

Recognize to prove this conformity. Government departments may mutually recognize confirmations implemented by other government departments. To be organized by a third party

To implement the audit, the organization should consider hiring a third-party certification body recognized by the competent authority [member of the International Accreditation Forum (IAF)] (see attached

Record C).

This standard is not intended to repeat government requirements and follow the relevant supply of the World Customs Organization (WCO) Global Trade Security and Facilitation Standards Framework

Should chain safety standards. Organizations that have been certified or confirmed by mutually recognized governments are in compliance with this standard.

This standard can output the following results.

--- Statement of coverage. define the boundaries of the supply chain included in the security plan;

--- Security assessment. record the vulnerability of the supply chain to define security threat scenarios and describe the cooperation from each potential security threat scenario

Reasonable expected impact;

--- Security plan. Describe security measures, the purpose of which is to manage the security threat scenarios identified by the security assessment;

--- Training program. State how to train safety personnel to meet the safety requirements related to their tasks.

In order to implement the safety assessment required to develop a safety plan, organizations using this standard will.

--- Identify the resulting threat (security threat scenario);

--- Identify personnel to promote security threat scenarios identified through security assessment as a method of security incidents.

Make decisions by reviewing the current security status of the supply chain. Based on the findings of the review, use professional judgment to identify the supply chain suffering

The degree of each security threat scenario.

If the supply chain is deemed to be unacceptable to the extent of each security threat scenario encountered, the organization will develop additional procedures or take action

Make adjustments to reduce the probability of occurrence or impact, or both. These are called countermeasures. Based on the principle of priority, should

The measures need to be included in the security plan to reduce the threat to an acceptable level.

Based on the safety process of protecting people, property and international supply chain tasks, Appendix A and Appendix B give illustrative examples of risk management,

It helps organizations adopt a macro approach to complex supply chains and/or a more discrete approach to local supply chains.

These appendices also aim to.

--- Promote the understanding, adoption and implementation of such methods, and can be adjusted by the organization as needed;

--- Provide guidance for continuous improvement of basic safety management;

--- Help organizations manage resources to solve existing and emerging security risks;

--- Statement of risk assessment and mitigation of security threats in the supply chain (from raw material distribution to finished product storage, manufacturing and transportation to the market)

Possible methods.

If the organization adopts and implements this standard, Appendix C provides guidance for obtaining consulting advice and certification.

Supply chain security management system implements supply chain security,

Evaluation and planning of best practice requirements and guidelines

1 Scope

This standard provides requirements and guidelines for organizations in the international supply chain to.

--- Develop and implement the supply chain security process;

--- Establish and record the minimum security level of the whole or part of the supply chain;

--- Assist organizations to meet the Authorized Operator (AEO) guidelines applicable in the "World Customs Organization Standards Framework" and comply with national supply chains

Security program.

Note. Only the customs agencies of the countries participating in the framework can designate organizations as authorized

Campers (AEOs).

In addition, this standard determines some document requirements that can be used for verification.

Users of this standard will.

--- Identify links that have established a secure international supply chain (see 4.1);

--- Implement a safety assessment of the link in the supply chain and develop appropriate response measures;

--- Develop and implement a supply chain security plan;

--- Train safety personnel in safety duties.

2 Normative references

The following documents are essential for the application of this document. For dated references, only the dated version applies to this article

Pieces. For the cited documents without date, the latest version (including all amendments) applies to this document.

ISO /PAS20858 Ship and Navigation Technology Safety Assessment and Safety Plan Preparation of Shipping Port Facilities (Shipandmarine

technology-Maritimeportfacilitysecurityassessmentsandsecurityplandevelopment)

International Maritime Organization (SOLAS), 1974, amendment [InternationalConventionfor

theSafetyofLifeatSea (SOLAS), 1974, asamended]

3 Terms and definitions

The following terms and definitions apply to this document.

3.1

Appropriate law enforcement and other government officials of law enforcement agencies and other government officials

Personnel of government and law enforcement agencies that have specific legal jurisdiction over the international supply chain or its links.

3.2

Asset (s)

Factories, machines, property, buildings, vehicles, ships, airplanes, transportation vehicles, and other infrastructure, or factories

Systems related to commercialized functions or services.

Note. This definition includes all information systems and security management applications necessary for secure delivery.