DRAFT IN WIDE CIRCULATION

Transcription

1 DRAFT IN WIDE CIRCULATION Management and Productivity Sectional Committee, MSD 4 All members of Management and Productivity Sectional Committee, MSD 4 Management and Systems Division Council, MSDC Quality Management Sectional Committee, MSD 2 Resource Management Sectional Committee, MSD 12 Others interested Dear Sir(s)/Madam(s) Reference Date MSD 4/T Please find enclosed the following document prepared by the Management and Productivity Sectional Committee, MSD 04 Doc No. MSD 4 ( 13341) ISO : 2014 Title Security management systems for the supply chain Guidelines for the implementation of ISO Part 3: Additional specific guidance for adopting ISO for use by medium and small businesses (other than marine ports) Kindly examine this draft Indian standard and forward your views stating any difficulties which you are likely to experience in your business or profession, if this is finally adopted as National Standard. Last date for comments: 15 February 2019 Comments, if any, may please be made in the format as enclosed and mailed (msd@bis.org.in) to the undersigned at Bureau of Indian Standard, Manak Bhawan, 9, Bahadur Shah Zafar Marg, New Delhi. This draft has also been uploaded on BIS website In case no comments are received, we would presume your approval of the documents. However, in case we receive any comments on the document, the same shall be put up to the Sectional Committee for necessary action. Thanking you, Encl: As above. Yours faithfully, (Sneh Lata) Scientist F & Head Management and Systems Tele/Fax : msd@bis.org.in

2 FORMAT FOR SENDING COMMENTS ON BIS DOCUMENTS [Please use A4 sheet of paper only and type within fields indicated. Comments on each clause/subclause be started on a fresh paper. Information in column 3 should include reasons for the comments and suggestions for modified wording of the clause when the existing text is found not acceptable. Adherence to this format facilities Secretariat s work] NAME OF THE COMMENTATOR/ ORGANIZATION : DOC. NUMBER AND TITLE : DOC. No. TITLE MSD 4 ( 13341) ISO : 2014 Security management systems for the supply chain Guidelines for the implementation of ISO Part 3: Additional specific guidance for adopting ISO for use by medium and small businesses (other than marine ports) SL. NO. (1) CLAUSE SUB-CLAUSE PARA NO. COMMENTED (2) COMMENTS (3)

3 व य पक पररच लन म मस द हम र स दर भ एमएसड 4/ट व षय व य पक पररच लन म मस द सर सदस य: प रब ध ए उत प दकत व षय सवमवत, एमएसड 4, प रब धन और प रण ल पररषद, एसएसड स, ग णत प रब ध व षय सवमवत, एमएसड 2 स स धन प रब ध व षय सवमवत एमएसड 12 अन य इच छ क वप रय मह दय/मह दय, क पय वनम नवलव त दस त ज क प र प त कर वजस प रब ध ए उत प दकत व षय सवमवत, एमएसड 4, न त य र ककय ह प रल स ख य एमएसड 4 ( 13341)/ आई एस ओ : 2014 श षभक आप र तभ श ल क वलए स रक ष प रब धन प रण ल - आईएसओ क क य भन यन क वलए कदश वनद श - र ग 3: मध यम और छ ट व य स य (सम द र ब दरग ह क अल ) द व र उपय ग क वलए आईएसओ क अपन न क वलए अवतररक त व वशष ट म गभदशभन क पय इस दस त ज क अ ल कन कर और अपन सम मवतय यह बत त ह ए र ज कक अ तत: यकद य म नक र ष ट र य म नक क र प म प रक वशत ह ज ऍ त इन पर अमल करन म आपक व य स य अथ क र ब र म क य कर न इय आ सकत ह आपस अन र ध ह कक आप अपन सम मवतय स लग न प र र प म अध हस त क षर क प स उपररवलव त पत पर य ईम ल द व र (msd@bis.org.in) र ज सम मवतय र जन क अ वतम वतवथ : 15 फर र 2019 यह प रल ब आई एस क बस इट ( पर र उपलब ध ह यकद क ई सम मवतय प र प त नह ह त ह त उपर क त प रल क यथ त अ वतम र प कदय ज एग यकद क ई सम मवतय प र प त ह त ह त व षय सवमवत क र ज ज न क ब द प रल क अ वतम र प कदय ज एग धन य द, स लग न: उपररवलव त र द य, (स न ह लत ) ज ञ. एफ ए प रम (प रब ध ए पद धवत) ट वल/फ क स: म ब इल: ई-म ल: msd@bis.org.in

4 BUREAU OF INDIAN STANDARDS DRAFT FOR COMMENTS ONLY Draft Indian Standard Doc No : MSD 04 (13341)C/ IS/ISO :2014 Security management systems for the supply chain- Guidelines for the implementation of ISO Part 3: Additional specific guidance for adopting ISO for use by medium and small businesses (other than marine ports) (ICS ) Not to be reproduced without the permission of BIS or used as Standard Last Date for receipt of Comments 15 January 2019 NATIONAL FOREWORD (Formal Clause will be added later). The text of ISO Standard has been approved as suitable for publication as an Indian Standard without deviations. Certain conventions are, however, not identical to those used in Indian Standards. Attention is particularly drawn to the following: Wherever the words International Standard appear referring to this standard, they should be read as Indian Standard. In this adopted standard, references appear to certain International Standards for which Indian Standards also exist. The corresponding Indian Standards, which are to be substituted in their places, are listed below along with their degree of equivalence for the editions indicated. International Standard ISO 28000:2007, Specification for security management systems for the supply chain ISO :2007, Security management systems for the supply chain- Guidelines for the implementation of ISO Part 1: General principles Corresponding Indian Standard Doc. No. MSD 04 (13336)/ISO 28000:2007, Specification for security management systems for the supply chain Doc. No. MSD 04 (13342)/ISO :2007, Security management systems for the supply chain- Guidelines for the implementation of ISO Part 1: General principles Degree of Equivalence Identical with ISO 28000:2007 Identical with ISO :2007

5 NOTE: FOR COMPLETE TEXT OF THE DOCUMENT, KINDLY REFER TO ISO :2014 OR CONTACT: Head Management and Systems Department Bureau of Indian Standards Manak Bhawan, 9, B.S. Zafar Marg New Delhi Telephone/Fax: Introduction ISO 28000:2007 and the guidance contained in ISO 28004, have been developed in response to the need for a recognizable supply chain management system evaluation criteria (validation process) against which their security management systems can be assessed and certified for determining conformance with ISO and ISO The guidance currently contained in ISO is designed to assist organizations adopting ISO Because the types of organizations that can use ISO are vast, the guidance provided in ISO is general in nature. As a result, some smaller organizations have had difficulty in defining the scope of measures needed to address each of the requirements established in ISO Therefore, the purpose of this part of ISO is to provide guidance and amplifying information that can be used by medium and small businesses (other than marine ports) to assist them in defining the scope of validation and verification measures needed to comply with the security provisions specified in ISO and ISO ISO requires that stakeholder organizations evaluate the capabilities of their security protection management plans and procedures through periodic reviews, testing, post-incident reports, and training exercises to measure the effectiveness of their installed security protection systems and methods. It is critical to the overall continued end-to-end safety of the supply chain that stakeholder organizations ensure the transportation industry that they have sufficient safeguards in place to protect the integrity of the supply chain while those goods are under their direct control. The failure by one of the stakeholder organizations to protect the supply chain from any one of the global threats and operational risks can severely impact the integrity of the system and erode the confidence of those who depend on the secure transportation of their valuable goods. Medium and small businesses stakeholder organizations are an integral part of the supply transportation system and will be required to conduct these performance capabilities reviews and verify to the transportation industry that they are in conformance with relevant legislation and regulations, industry best practices and conformance with its own security policy and objectives based on the identified threats and risks to their operations. The information contained in this part of ISO provides guidance and criteria for evaluating the quality of medium and small businesses (other than marine ports) security management plans developed in accordance with ISO to protect the integrity of the supply chain. The amplifying information is designed to enhance, but not alter, the general guidance currently specified in ISO No alterations to ISO 28004, other than the addition of supplements, are made.

6 Scope This part of ISO has been developed to supplement ISO by providing additional guidance to medium and small businesses (other than marine ports) that wish to adopt ISO The additional guidance in this part of ISO 28004, while amplifying the general guidance provided in the main body of ISO , does not conflict with the general guidance, nor does it amend ISO