ISO 28001:2007 Supply Chain Security Management

Annex A Supply chain security process (informative guidance) – ISO 28001:2007 Supply Chain Security Management

ISO 28001:2007 Supply Chain Security Management A.2: A.2 Identification of the scope of the security assessment

A security assessment attempts to identify the security risks present in the part of the supply chain that the organization, per its Statement of Application, wishes to bring into compliance, and the boundaries of its coverage, physical and virtual, need to be established first.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Annex A Supply chain security process (informative guidance) – ISO 28001:2007 Supply Chain Security Management

A.3.1 A.3.1 General: locations to assess
A.3.2 A.3.2 Performance review list
A.3.3 A.3.3 Performance review (Table A.1)
A.3.4 A.3.4 Security threat scenarios (Table A.2)
A.4.1 A.4.1 General: security plan contents
A.4.2 A.4.2 Documentation
A.4.3 A.4.3 Communication
A.5 A.5 Execution of the security plan

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ISO 28001:2007 Supply Chain Security Management controls