ISO 28001:2007 Supply Chain Security Management

Annex A Supply chain security process (informative guidance) – ISO 28001:2007 Supply Chain Security Management

ISO 28001:2007 Supply Chain Security Management A.7: Continual improvement

What does A.7 require?

The managers who have operational control over the organization's section of the chain should examine the security management system to find where it could be improved and whether it needs to change.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Annex A Supply chain security process (informative guidance) – ISO 28001:2007 Supply Chain Security Management

A.2 A.2 Identification of the scope of the security assessment
A.3.1 A.3.1 General: locations to assess
A.3.2 A.3.2 Performance review list
A.3.3 A.3.3 Performance review (Table A.1)
A.3.4 A.3.4 Security threat scenarios (Table A.2)
A.4.1 A.4.1 General: security plan contents
A.4.2 A.4.2 Documentation
A.4.3 A.4.3 Communication

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ISO 28001:2007 Supply Chain Security Management controls