Security management systems for the supply chain — Requirements for bodies providing audit and certification of supply chain security management systems
供应链安全管理系统——对提供供应链安全管理系统审计和认证机构的要求
发布日期:
2007-08-02
ISO 28003:2007包含根据管理体系规范和标准(如ISO 28000)提供供应链安全管理体系审核和认证的机构的原则和要求。
它定义了认证机构及其相关审计员的最低要求,认识到在审计和认证/注册客户组织时对保密性的独特需求。
对供应链安全管理系统的要求可以来自许多来源,并且已经开发了ISO 28003:2007来帮助认证满足ISO 28000、供应链安全管理系统规范和其他供应链安全管理系统国际标准的要求的供应链安全管理系统。ISO 28003:2007的内容也可用于支持基于其他指定供应链安全管理体系要求的供应链安全管理体系认证。
ISO 28003:2007
为申请ISO 28000(或其他指定的供应链安全管理体系要求)认证/注册的认证机构的认可提供统一的指导;
定义适用于审核和认证符合供应链安全管理体系标准要求(或其他指定的供应链安全管理体系要求)的供应链安全管理体系的规则;
为客户提供有关其供应商认证方式的必要信息和信心。
ISO 28003:2007 contains principles and requirements for bodies providing the audit and certification of supply chain security management systems according to management system specifications and standards such as ISO 28000.
It defines the minimum requirements of a certification body and its associated auditors, recognizing the unique need for confidentiality when auditing and certifying/registering a client organization.
Requirements for supply chain security management systems can originate from a number of sources, and ISO 28003:2007 has been developed to assist in the certification of supply chain security management systems that fulfil the requirements of ISO 28000, Specification for security management systems for the supply chain, and other supply chain security management system International Standards. The contents of ISO 28003:2007 may also be used to support certification of supply chain security management systems that are based on other specified supply chain security management system requirements.
ISO 28003:2007
provides harmonized guidance for the accreditation of certification bodies applying for ISO 28000 (or other specified supply chain security management system requirements) certification/registration;
defines the rules applicable for the audit and certification of a supply chain security management system complying with the supply chain security management system standard's requirements (or other sets of specified supply chain security management system requirements);
provides the customers with the necessary information and confidence about the way certification of their suppliers has been granted.