GB/T 40753.4-2024Security management systems for the supply chain - Guidelines for the implementation of ISO 28000 - Part 4: Additional specific guidance on implementing ISO 28000 if compliance with GB/T 38702 is a management objective (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for standardization work Part 1: Structure and drafting rules for standardization documents" Drafting.

This document is Part 4 of GB/T 40753 "Guidelines for the Implementation of ISO 28000 Supply Chain Security Management System".

The following parts have been published.

--- Guidelines for the implementation of ISO 28000 for supply chain security management systems (GB/T 40753-2021);

--- Part 3: Additional specific guidance for the adoption of ISO 28000 by small and medium-sized enterprises (excluding seaports) (GB/T 40753.3-2024);

--- Part 4: Additional specific guidance for implementing ISO 28000 with compliance to GB/T 38702 as the management objective (GB/T 40753.4-

2024).

This document is equivalent to ISO 28004-4:2014 "Supply Chain Security Management System ISO 28000 Implementation Guide Part 4.

Compliance with ISO 28001 - Additional specific guidance for implementing ISO 28000 for management objectives.

A new chapter "Terms and Definitions" has been added to this document.

The following minimal editorial changes were made to this document.

--- To coordinate with the existing standards, the name of the standard is changed to "Guidelines for the Implementation of ISO 28000 Supply Chain Security Management System Part 4" "Additional specific guidance for implementing ISO 28000 with compliance to GB/T 38702 as the management objective";

---Since 4.3.1 Safety Risk Planning does not exist in ISO 28000, based on the original meaning of the context, 4.3.1 in Table 10 is Safety risk planning is changed to 4.3.2~4.3.5 Safety risk planning.

Introduction

GB/T 40753 is formulated based on the need to establish a recognized supply chain management system standard and can be used for safety management system evaluation and the certification basis can also guide the implementation of such standards. It is planned to consist of four parts.

--- Part 1: General. The purpose is to be used as a basis for safety management system evaluation and certification, and to guide the implementation of such standards.

--- Part 2: Guidelines for the use of ISO 28000 in small and medium-sized port operations. The purpose is to identify supply chain risks and threat scenarios, conduct risk assessments, and procedures for risk/threat assessment and for measuring the effectiveness of written security plans against ISO 28000 and GB/T 40753 series of implementation guidelines Consistency and effectiveness.

--- Part 3: Additional specific guidance for the adoption of ISO 28000 by small and medium-sized enterprises (excluding seaports).

Provide guidance and basis for quality assessment of security management plans of small and medium-sized enterprises (excluding seaports) in order to protect the supply chain.

Integrity.

--- Part 4: Additional specific guidance for implementing ISO 28000 with compliance to GB/T 38702 as a management objective.

GB/T 38702 defines best practices for organizations that are targeting international supply chain management and provides additional support for adopting ISO 28000.

guide.

This document is used to supplement GB/T 40753 and further explains the main part of GB/T 40753 as an additional guide, but does not conflict with it.

In some technical safety requirements, GB/T 38702 is more detailed than ISO 28000, but the two do not conflict.

Complies with Authorized Economic Operator (AEO) safety guidelines.

Supply Chain Security Management System ISO 28000 Implementation Guide Part 4: Management objectives based on compliance with GB/T 38702 Additional specific guidance for implementing ISO 28000

1 Scope

This document provides guidance for organizations that use ISO 28000 to implement the best practices specified in GB/T 38702 as their international supply chain management goals.

The best practices in GB/T 38702 not only help organizations establish and record the security level of international supply chains, but also promote the implementation of the best practices in accordance with the World Bank's Validation of national Authorized Economic Operator (AEO) schemes designed in accordance with the World Customs Organization framework standards.

This document is not a stand-alone document. The main body of GB/T 40753 provides the required inputs, processes, outputs and ISO 28000 requirements.

This document provides additional guidance for the implementation of ISO 28000 when compliance with GB/T 38702 is a management objective.

Add specific guidance.

Some requirements set out in the World Customs Organization's Authorized Economic Operator (AEO) Scheme are government responsibilities and are not addressed in this document.

include.

---Confirm compliance with customs regulations. When considering a request for Authorized Economic Operator (AEO) status, Customs considers potential AEOs the compliance history demonstrated by the Authorized Economic Operator (AEO)

---A business record management system that complies with the requirements. Authorized Economic Operators (AEO) shall keep timely, accurate, complete and Verified Records. Maintaining verified business records is an essential element of international trade supply chain security.

---Financial viability. The financial viability of an Authorized Economic Operator (AEO) is an important factor in maintaining and improving measures to ensure supply chain security.

Capability indicators.

--- Consultation, cooperation and information exchange. Customs, other competent authorities and authorized economic operators (AEOs) at all levels (international, national and local) should Regular consultation on issues of common interest, including supply chain security and facilitation measures, should not hinder law enforcement activities.

The results of the consultation should assist their customs authorities in developing and maintaining their risk management strategy.

2 Normative references

The contents of the following documents constitute the essential clauses of this document through normative references in this document.

For referenced documents without a date, only the version corresponding to that date applies to this document; for referenced documents without a date, the latest version (including all amendments) applies to this document.

GB/T 38702 Supply Chain Security Management System Best Practice Requirements and Guidelines for Implementing Supply Chain Security, Assessment and Planning (GB/T 38702-2020, ISO 28001:2007, IDT) GB/T 40753-2021 Supply Chain Security Management System ISO 28000 Implementation Guide (ISO 28004-1:2007, IDT) supply chain ISO/PAS20858 Ship and marine technology Shipping port facility safety assessment and safety plan preparation

3 Terms and definitions

There are no terms or definitions that require definition in this document.