GB/T 40753.3-2024Security management systems for the supply chain - Guidelines for the implementation of ISO 28000 - Part 3: Additional specific guidance for adopting ISO 28000 for use by medium and small businesses (other than marine ports) (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document is Part 3 of GB/T 40753 "Guidelines for the Implementation of ISO 28000 Supply Chain Security Management System".

The following parts have been published.

--- Guidelines for the implementation of ISO 28000 for supply chain security management systems (GB/T 40753-2021);

--- Part 4: Additional specific guidance for implementing ISO 28000 with compliance to GB/T 38702 as the management objective (GB/T 40753.4-

2024).

This document is equivalent to ISO 28004-3:2014 "Supply Chain Security Management System ISO 28000 Implementation Guide Part 3: Small and Medium-sized Enterprises" Additional specific guidance for the adoption of ISO 28000 by businesses (excluding seaports).

A new chapter "Terms and Definitions" has been added to this document.

Introduction

GB/T 40753 is formulated based on the need to establish a recognized supply chain management system standard and can be used for safety management system evaluation and the certification basis can also guide the implementation of such standards. It is planned to consist of four parts.

--- Part 1: General. The purpose is to be used as a basis for safety management system evaluation and certification, and to guide the implementation of such standards.

--- Part 2: Guidelines for the use of ISO 28000 in small and medium-sized port operations. The purpose is to identify supply chain risks and threat scenarios, conduct risk assessments, and procedures for risk/threat assessment and for measuring the effectiveness of written security plans against ISO 28000 and GB/T 40753 series of implementation guidelines Consistency and effectiveness.

--- Part 3: Additional specific guidance for the adoption of ISO 28000 by small and medium-sized enterprises (excluding seaports).

Provide guidance and basis for the quality assessment of security management plans of small and medium-sized enterprises (excluding seaports) in order to protect the supply chain.

Integrity.

--- Part 4: Additional specific guidance for implementing ISO 28000 with compliance to GB/T 38702 as a management objective.

GB/T 38702 defines best practices for organizations that are targeting international supply chain management and provides additional support for adopting ISO 28000.

guide.

This document contains additional information intended to enhance but not change the general guidelines currently specified in GB/T 40753.

Except for the additional conditions, GB/T 40753 has not been modified.

Supply Chain Security Management System ISO 28000 Implementation Guidelines Part 3: Adoption by SMEs Additional specific guidance to ISO 28000 (except seaports)

1 Scope

This document is a supplement to GB/T 40753-2021 and provides additional information for small and medium-sized enterprises (excluding seaports) that wish to adopt ISO 28000.

guidance.

This document further elaborates on the general guidance provided in the main part of GB/T 40753-2021 and does not conflict with the general guidance.

Corrected ISO 28000.

2 Normative references

The contents of the following documents become essential clauses of this document through normative references in this document.

For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to this document.

GB/T 40753-2021 Supply Chain Security Management System ISO 28000 Implementation Guide (ISO 28004-1:2007, IDT) thesupply chain)

3 Terms and definitions

There are no terms or definitions that require definition in this document.

4 Additional Guidelines

ISO 28000 is designed to be used by organizations of all sizes who want to better protect their supply chains or the services they provide to supply chain operators.

GB/T 40753-2021 is intended to provide guidance for organizations of all sizes that wish to adopt ISO 28000.

It provides guidance for organizations of all sizes and may therefore be more complex than required for smaller organizations.

This document is intended to be simplified for use as a guide for smaller organizations. Entities using this document as a guide are encouraged to obtain the information provided in this document.

For more information on specific issues, please refer to GB/T 40753-2021.The guidance provided in this document does not amend ISO 28000 or GB/T 40753-2021.When specific methods are discussed in this document, other methods may be used instead for illustrative purposes.

Organizations using ISO 28000 should.

---Describe its goals for supply chain security;

---Assess the current security status of the supply chain;

--- Develop a plan that includes existing supply chain processes and procedures, as well as additional processes and procedures that have been identified as necessary to meet specified supply chain security objectives.

Add a process, procedure or system;

--- Train employees according to their responsibilities as defined in the supply chain security plan;

---Install/maintain any systems or equipment specified in the supply chain security plan;