Supply Chain Security Assessment Checklist (ISO 28000)

A working checklist for assessing security in a supply chain operation — a warehouse, a freight forwarder, a transport fleet, a manufacturer that ships its own goods. It looks at security twice: first as a management system, following the clauses of ISO 28000:2022, and then as it exists on the ground, topic by topic, where an assessor can walk, look and test.

What is inside

ISO 28000 Supply Chain Security Checklist — 109 checks in 12 sections. Part A has 35 checks on the management system across clauses 4 to 10. Part B has 74 operational checks covering premises and perimeter, access control, personnel security and training, cargo and conveyance integrity, seals, information and IT security, business partners, and incident response and recovery.

Every check is written as a statement you can find evidence for, with Yes / No / N/A boxes, space for the evidence you saw and a score summary by section.

A designed, print-ready PDF and an editable Word file.

Who it is for

Security managers, logistics and warehouse managers, internal auditors, compliance teams and consultants; organisations preparing for ISO 28000 certification or for a customer's supply chain security audit; and buyers who want a structured way to assess a carrier or warehouse.

How to use it

Use Part A in the office with management and the documented system, and Part B on site. Walk the perimeter, stand at the gate, watch a vehicle being loaded and sealed, and ask people what they would do if something looked wrong. Record what you saw, not what you were told. For every No, raise a finding with an owner and a date, and feed it back into the security risk assessment.

Clause references are to the main clauses of ISO 28000:2022 only. Part B is good practice arranged by topic, not a list of requirements from the standard: which measures you need depends on your own security risk assessment, your customers and the legal requirements that apply to you.