ISO 28001:2007 Supply Chain Security Management 5.7: 5.7 Actions required after a security incident

After any security incident affecting a part of the international supply chain under its control, the organization shall review its security plan. The review shall establish why the incident happened and what corrective action is needed, and how well the measures and procedures for restoring security worked; in the light of those findings, the organization shall reassess the affected parts of the chain as 5.3.2 requires. If security is breached, the organization shall report to Customs and the relevant law enforcement agencies through the procedures its security plan and contracts set out. It shall keep consignment data and any other supply chain data it is required to hold for the periods that applicable laws and regulations lay down.