Apply for ISO 28000 Certification | Expert SCSMS Certification
Secure your supply chain with ISO 28000 certification. IRQS offers expert SCSMS certification services to enhance security and risk management across your supply chain operations
ISO 28000 certification verifies that an organization has implemented a Supply Chain Security Management System (SCSMS) that complies with ISO 28000:2022. The standard helps organizations identify security risks, protect supply chain operations, improve resilience, prevent disruptions, and strengthen compliance with security requirements. Manufacturers, logistics providers, ports, warehouses, freight forwarders, and transportation companies use ISO 28000 to enhance supply chain security and operational performance.
ISO 28000:2022 requirements establish a Supply Chain Security Management System (SCSMS) that helps organizations identify security risks, protect supply chain operations, and improve resilience. Key requirements include organizational context, leadership, security policy, risk assessment, planning, resource management, operational controls, performance evaluation, internal audits, management reviews, corrective actions, and continual improvement. Organizations must implement these requirements before completing certification audits.
ISO 28000 accreditation is the formal recognition of a certification body's competence to certify organizations against ISO 28000:2022, the international standard for Supply Chain Security Management Systems (SCSMS). National accreditation bodies, such as ANAB, UKAS, IAS, and NABCB, assess certification bodies against ISO/IEC 17021-1 before granting accreditation. Organizations receive ISO 28000 certification, while certification bodies receive accreditation.
ISO 28000:2022 is the international standard for Supply Chain Security Management Systems (SCSMS). The standard specifies requirements for establishing, implementing, maintaining, and continually improving a security management system to protect supply chain operations. ISO 28000:2022 helps organizations identify security threats, assess risks, improve resilience, prevent disruptions, and strengthen supply chain security across manufacturing, logistics, transportation, warehousing, ports, and distribution networks.
What is ISO 28000 certification?
ISO 28000 certification verifies that an organization has implemented a Supply Chain Security Management System (SCSMS) that complies with ISO 28000:2022. The certification helps organizations identify security risks, protect supply chain operations, improve resilience, and strengthen compliance with security requirements. Manufacturers, logistics providers, transportation companies, warehouses, ports, and distributors use ISO 28000 certification to enhance supply chain security and demonstrate effective security management.
What is the difference between ISO 27001 and 28000?
The main difference between ISO 27001 and ISO 28000 is that ISO 27001 specifies requirements for an Information Security Management System (ISMS) to protect information assets, while ISO 28000 specifies requirements for a Supply Chain Security Management System (SCSMS) to secure supply chain operations. ISO 27001 focuses on information confidentiality, integrity, and availability. ISO 28000 focuses on identifying security threats, managing supply chain risks, preventing disruptions, and improving operational resilience. Organizations can implement both standards to strengthen information security and supply chain security.
What is ISO 27000 certification for?
ISO 27000 is not a certification standard. It is a family of information security standards that provides guidance on Information Security Management Systems (ISMS). Organizations are typically certified to ISO/IEC 27001, the certifiable standard within the ISO 27000 family. ISO/IEC 27001 certification demonstrates that an organization has implemented an ISMS to protect information confidentiality, integrity, and availability while managing information security risks.
A Supply Chain Security Management System (SCSMS) is a structured framework that helps organizations identify, assess, and manage security risks throughout the supply chain. ISO 28000:2022 specifies the requirements for implementing an SCSMS to protect people, goods, infrastructure, information, and transportation activities. An SCSMS improves supply chain resilience, reduces security threats, supports regulatory compliance, and promotes continual improvement across manufacturing, logistics, warehousing, ports, and distribution networks.
What is the cost of SCM certification in India?
The cost of Supply Chain Security Management System (SCMS/SCSMS) certification in India, such as ISO 28000 certification, depends on the organization's size, number of sites, employee count, certification scope, and the accredited certification body. Small organizations typically pay ₹75,000–₹2,00,000, medium-sized organizations ₹2,00,000–₹5,00,000, and large or multi-site organizations ₹5,00,000 or more. Additional costs may include gap analysis, consultant fees, employee training, and annual surveillance audits.
IRQS is a leading ISO certification body with 25+ years of experience, offering ISO certification and training services to over 5,000 clients worldwide
An ISO certification body audits organizations and issues ISO certificates based on compliance with specific standards such as ISO 9001 or ISO 27001. Accredited certification bodies follow ISO/IEC 17021 and operate under national accreditation agencies to ensure consistent, impartial, and globally recognized certification decisions.
ISO certification verifies that an organization meets international standards such as ISO 9001 for quality or ISO 27001 for information security. Certification requires passing audits conducted by accredited bodies and typically takes 3–6 months depending on company size, process complexity, and readiness for compliance.
An ISO certification company provides audit and certification services to verify that organizations meet ISO standards such as ISO 9001 or ISO 27001. Accredited companies follow ISO/IEC 17021 and issue certificates after successful audits, typically completing the process within 3–6 months.
ISO certification in India verifies that an organization complies with international standards such as ISO 9001, ISO 14001, or ISO 27001. Accredited certification bodies like IRQS conduct audits and issue certificates. The process typically takes 3–6 months and requires documentation, implementation, and successful audit completion.
ISO audit certification verifies that an organization meets ISO standards through a structured audit process. Auditors review documentation, assess implementation, and evaluate compliance with standards such as ISO 9001 or ISO 27001. Certification requires passing stage 1 and stage 2 audits and typically completes within 3–6 months.
An ISO certified company meets international standards set by the International Organization for Standardization. Certification verifies that a company follows defined processes for quality, safety, or efficiency. Common certifications include ISO 9001 for quality management and ISO 27001 for information security.
ISO certification bodies in India are accredited organizations that audit and certify companies against ISO standards. Major ISO certification bodies in India include IRQS. These bodies operate under accreditation from NABCB to ensure compliance and credibility.
ISO certification agencies in India are accredited bodies that audit and certify organizations against ISO standards. Key agencies include IRQS. These agencies receive accreditation from NABCB to ensure certification validity.
Indian Register Quality Systems (IRQS) is an ISO certification body in India that provides auditing and certification services for standards such as ISO 9001, ISO 14001, and ISO 45001. IRQS operates under the Indian Register of Shipping and holds accreditation from NABCB and international accreditation bodies.
ISO certification experts are professionals who guide organizations through ISO standard implementation, documentation, audits, and certification. These experts specialize in standards such as ISO 9001, ISO 14001, and ISO 27001. They ensure compliance within 3–6 months by conducting gap analysis, training teams, and coordinating with accredited certification bodies.
Apply for an ISO certificate online by selecting an accredited certification body, submitting an application form, and completing a gap analysis. Implement required standards, conduct an internal audit, and pass the certification audit. The full process takes 30–90 days depending on company size and readiness.
Choose the right ISO certification by matching your business goals with specific standards. Use ISO 9001 for quality management, ISO 14001 for environmental management, ISO 27001 for information security, and ISO 45001 for occupational health and safety. Select based on industry, risk level, and regulatory requirements.
Get ISO certification by defining scope, selecting an ISO standard, and performing a gap analysis. Develop documentation, implement processes, and train employees. Conduct an internal audit, fix non-conformities, and complete a certification audit with an accredited body. The process takes 30–90 days.
The ISO certification process requires selecting a standard, conducting a gap analysis, and implementing required policies and procedures. Perform an internal audit, resolve non-conformities, and undergo a certification audit by an accredited body. Certification is issued after successful audit completion and typically takes 30–90 days.
The ISO certification cycle lasts 3 years and includes initial certification, annual surveillance audits, and recertification. The certification body conducts a full audit in year one, surveillance audits in years two and three, and a recertification audit before renewal to maintain compliance.
Let's connect—your journey starts here.
Contact Indian Register Quality Systems (IRQS)
Offices From India to the world we deliver trust globally
Mumbai (Head Office): 52/A, Adi Shankaracharya Marg, Opp. Powai Lake, Powai, Mumbai - 400072 India. Tel: +91 2271199800; Phone: +91 9820466624; Email:Irqs@irclass.org
DELHI: 104, Copia Corporate Suites, District Centre, Jasola, Delhi Pin Code : 110025, India. Phone: +91 9818786777; Phone: +91 9820466624; Email: Irqs@irclass.org
Kolkata: Bldg: Diamond Heritage Units: 710 & 711, 7th Floor 16, Strand Road, KOLKATA, India - 700 001. Phone: +91 9433560313 Phone: +91 9820466624 Email: Irqs@irclass.org
Chennai: KGN Towers, 6th Floor, B Wing, No.62,Ethiraj Salai, Egmore, Chennai Pin Code : 600008, India. Phone: +91 8778755146 Phone: +91 9820466624 Email: Irqs@irclass.org
AHMEDABAD: C-107, Siddhi Vinayak Tower, Behind D C P Office, Off S. G. Highway, Makarba, Ahmedabad-380051. Phone: +91 9898049236 Phone: +91 9820466624 Email: Irqs@irclass.org
Bangalore: 105X, 2nd Floor, 3rd main, 3rd cross, 2nd stage Goraguntepalya Yeshwanthpur Industrial Suburb Bangalore - 560022 Karnataka, India. Phone: +91 8722561359 Phone: +91 9820466624 Email: Irqs@irclass.org
BHAVNAGAR: Plot No. 2139 / E-F-G Office No. 211 Surabhi Mall Commercial Complex BHAVNAGAR – 364 001. Phone: +91 9898049236 Phone: +91 9820466624 Email: Irqs@irclass.org
Bhopal: 2nd Floor, House No.277, Suresh Santosh Bhawan, Bharat Nagar, Narela Sankri BHOPAL-462 022 Madhyapradesh, India. Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
BHUBANESWAR: A-35, Ground Floor,BDA HIG Duplex, Palaspalli , BHUBANESWAR-751 020. Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
COIMBATORE: 16/1, V.J Business Centre, GRG Layout, Trichy Road, Opp. to St. Francis Hr.Sec. School, Adj. road to GIRIYAS Show room/LIC Building, Coimbatore -641018 Tamilnadu. Phone: +91 8778755146 Phone: +91 9820466624 Email: Irqs@irclass.org
Goa: 6th Floor, Prime Complex Near KTC Bus Stand Opp Laxmi Petrol Pump, Mundvel Vasco-da-Gama, GOA – 403 802. Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
Hyderabad: Flat No. 302, 3rd Floor Kishore Plaza, 7-66 HMT Road, Hyderabad Pin Code : 500007, India. Phone: +91 8778755146 Phone: +91 9820466624 Email: Irqs@irclass.org
Jamnagar: 304, Third floor, Platinum Apartment Park colony, Opp. Joggers Park JAMNAGAR - 361 008. Phone: +91 9898049236 Phone: +91 9820466624 Email:Irqs@irclass.org
Kakinada: Sai Kripa, D.No.2-59-9 Bhaskar Nagar KAKINADA – 533 003. Phone: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
Kandla: 324, Second floor, Friends square Plot No 2 & 3, Near Osia Hypermart Rotary Circle, Kutch, Kandla, Gandhidham – 370201. Phone: +91 9898049236 Phone: +91 9820466624 Email: Irqs@irclass.org
Kochi: Puthuran Plaza,6th Floor, Door No.40/483 A, KPCC Junction, Kochi Pin Code : 682011, India. Phone: +91 9946661141 Phone: +91 9820466624 Email: Irqs@irclass.org
MANGALORE: Room No.201, 2nd Floor Rameshwara Arcade, Kulur Ferry Road, Urwa Stores MANGALORE – 575 006. Phone: +91 8722561359 Phone: +91 9820466624 Email: Irqs@irclass.org
Mumbai (Cuffe Parade): 72, Maker Towers "F", 7th Floor, Cuffe Parade, MUMBAI – 400 005. Phone: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
Paradip: Flat No. 8, 2nd Floor Gaurav Vihar, Madhuban Jagatsinghpur, PARADIP - 754 142. Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
Pune: A-503, 5th Floor Mayfair Tower No. 1 Old Mumbai Pune Road, Pune Pin Code : 411005, India. Phone: +91 9096368579 Phone: +91 9820466624 Email: Irqs@irclass.org
Sri Vijaya Puram (Port Blair): Gr. Floor of MMD Building Behind G.B. Pant Hospital Shahid Road, Atlanta Point Aberdeen Village SHRI VIJAYA PURAM - 744101. Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
Surat: B - 411, SNS Atria, Opp. Jolly Party Plot, Next To Happy Excellencia,Vesu SURAT – 395 007. Phone: +91 9898049236 Phone: +91 9820466624 Email: Irqs@irclass.org
TUTICORIN: Door No. 106/24B Palai Road West, Chinnamani Nagar Millerpuram, TUTICORIN - 628 008. Phone: +91 8778755146 Phone: +91 9820466624 Email: Irqs@irclass.org
VADODARA: 1105, " Neptune Edge" , Sarabhai park, Dr. V.S. Road, Vadodara - 390007. Phone: +91 9898049236 Phone: +91 9820466624 Email: Irqs@irclass.org
VISAKHAPATNAM: D.No.7-18-1, Kirlampudi Layout, Waltair Uplands, Visakhapatnam Pin Code : 530017, India. Phone: +91 8778755146 Phone: +91 9820466624 Email:Irqs@irclass.org
ISO Certification Global Offices
ABU DHABI: Office No. 12, Wintech International M40 Plot 128, P.O. Box – 38131 Mussaffah, ABU DHABI. Tel: +971 25504255 Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org.
BANGKOK: 92/52, Sathornthani Tower – II Room No. 1802, 18th Floor North Sathorn Road, Silom, Bangrak BANGKOK – 10500, THAILAND. Tel: +66-2-2333698 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
CHINA: Room No.23E, Hua Ren International No.A2, Shandong Road QINGDAO 266071, P.R. CHINA. Tel: +86-532-85761404 Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
COLOMBO: C/O Maritime Agencies (Pvt) Ltd. Level 7, HNB Towers, 479 T.B. Jaya Mawatha COLOMBO – 10, SRI LANKA. Tel: +94-11-2674885 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
DUBAI: Unit 701, Zone A, Aspect Tower Business Bay, Sheikh Zayed Road DUBAI- 103713, UAE. Tel: +9714 4541538 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
Egypt: 7, Doctor Mohamed Shafek Ghorbal St. Korby Elgama, Camp Shezar Alexandria Egypt - 21525. Tel: +201112600628 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
FUJAIRAH: United Arab Shipping Co. Building Flat B-602, Plot No. 16 Ishwais Area, Opp. Fujairah Port Fujairah, U.A.E. Tel: +9714 4541538 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
GREECE: 14, Skouze Street 185 36, PIRAEUS, GREECE. Tel: +30 210 4535357 Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
ISTANBUL: Milangaz Street Monumento Kartal site, Esentepe neighborhood, A blok No. 75a Door, Number : 107 Kartal, ISTANBUL 34870. Tel: +216 410 30 25 Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
JAKARTA: PT. IRS CLASS SERVICE INDONESIA EightyEight@Kota Kasablanka, Fl.38th, Jl. Casablanca Raya, Kav. 88, Tebet South Jakarta - 12870 INDONESIA. Tel: +62 21 29638051 Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
KUALA LUMPUR: Gardens North, 30th Floor Gardens North Tower Lingkaran Syed Putra KUA LALUMPUR 59200 MALAYSIA. Tel: +603-2359625 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
LONDON: Office No. 412/413, 30 Moorgate London, EC2R 6PJ, LONDON, UK. Tel: +44 (0) 20 39631921 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
NING BO: Room No.502, Unit 2, Bldg. 23, Kai Yuan Community, Jiaojiang Dist. Taizhou City, Zhejiang Province, NING BO. Tel: +86 -532-85761404 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
Qatar: Bldg. No.67, St. 250, Zone 45, Regus Building, Office 112-113 D Ring Road, Al Mataar Al Qadeem District, P.O. Box No.32522 Doha, QATAR. Tel: + 974 4423 1218 Tel: +91 2271199800 Phone: +91 9820466624 Email:Irqs@irclass.org
ROTTERDAM: Indian Register of Shipping Netherlands BV B-20 , Schipholweg 103 2316 XC , Leiden The Netherlands. Tel: +31 71 524 9232 Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
SINGAPORE: 96, Robinson Road #15-04 SIF Building SINGAPORE - 068899. Tel +65 6423 4861 Tel: +91 2271199800 Phone: +91 9820466624 Email: Irqs@irclass.org
SOUTH KOREA: 3rd Floor, Daeju Building, 4539, Geoje Daero, Suwol-dong, Geoje -Si, Gyeonsangnam- do, Republic of Korea 53237. Tel: +82-55-634-2990 Tel: +91 2271199800 Email:Irqs@irclass.org
ISO 28000 Certification in India - ISO 28000 Supply Chain Security Management System in India - Supply Chain Security Management System Certification Scheme & Audit
Q: What is ISO 28000:2022 and why does my organization need it?
A: ISO 28000:2022 is an international standard that specifies requirements for a Security Management System tailored to supply chains. It helps organizations identify, assess and mitigate security risks across the flow of goods, partners and processes (transport, storage, customs, finance, information services, etc.). Certification improves resilience, reduces disruptions, builds trust with partners and customers, and supports compliance with regulatory and contractual requirements.
Q: Which types of organisations can get ISO 28000 certified?
A: Any organisation involved in supply chain activities—manufacturing, storage, freight forwarding, carriers (road, rail, air, ocean), terminal operators, customs agents, logistics service providers, financial and information service providers, and buyers—can implement ISO 28000. The standard is scalable and applicable to organisations of any size.
Q: What are the main benefits of ISO 28000 certification?
A: Key benefits include international recognition and credibility, improved supply‑chain performance and quality, stronger risk mitigation and resilience, enhanced customer confidence, competitive differentiation, and better alignment with statutory and voluntary regulatory requirements.
Q: What is the certification process and how long does it take?
A: Typical steps are: 1) Application and readiness review; 2) Offer submission and acceptance; 3) Two‑stage certification audit (Stage 1: documentation review; Stage 2: on‑site implementation assessment); 4) Certification approval after closing any nonconformities; 5) Annual surveillance audits; and 6) Recertification every three years. Timelines vary by organisation size and maturity but many clients complete initial certification in a few months if documentation and controls are well prepared.
Q: How much does ISO 28000 certification cost?
A: Costs depend on factors such as organisation size, number of sites, complexity of the supply chain, and scope of the audit. IRQS provides a customised offer after reviewing your scope and operations that outlines audit scope, timelines and certification cost. Contact IRQS for a tailored quote.
Q: What are the main requirements to achieve ISO 28000 certification?
A: You must establish, implement, maintain and continually improve a Security Management System that meets ISO 28000:2022 requirements. This typically includes documented policies and procedures, risk assessments, roles and responsibilities, operational controls, monitoring and measurement, internal audits, management review and corrective actions to address nonconformities.
Q: Is ISO 28000 compatible with other management system standards (e.g., ISO 9001, ISO 27001)?
A: Yes. ISO 28000 follows common management system principles and can be integrated with other standards such as ISO 9001 (QMS), ISO 27001 (ISMS) or ISO 22301 (BCMS). Integration reduces duplication, streamlines audits and improves overall governance across quality, security and continuity functions.
