ISO 28000:2022 — Supply Chain Security
For logistics and export supply chains.
Overview
ISO 28000:2022 specifies requirements for a security management system for the supply chain. It helps you identify and control security risks such as theft, tampering, smuggling and disruption across the movement of goods. It complements customs security programmes such as Authorised Economic Operator (AEO).
Benefits
- Secure supply chainRisks such as theft, tampering, smuggling and cargo loss are controlled.
- Supports customs and AEO programmesComplements Authorised Economic Operator requirements.
- Fewer disruptionsSecurity threats to goods and logistics are planned for in advance.
- Buyer confidenceValued by exporters, ports, freight forwarders and logistics companies.
- Protects your brandReduces the risk of counterfeit or contaminated goods entering your chain.
Who needs it
Exporters and importers, freight forwarders, ports and terminals, warehouses, transport companies and manufacturers of high-value or sensitive goods.
How the process works
- Create your account and submit the online application.
- Upload the required documents.
- Our team reviews your application and schedules the assessment.
- Any findings are recorded and you respond online.
- An authorized person makes the certification decision.
- Your certificate is issued with a unique number and QR code, and appears in your portal for download.
Required documents
You'll upload these in your portal. Accepted formats: pdf, jpg, jpeg, png, doc, docx, xls, xlsx (max 10 MB each).
Frequently asked questions
Who can apply for ISO 28000:2022 — Supply Chain Security?
Exporters and importers, freight forwarders, ports and terminals, warehouses, transport companies and manufacturers of high-value or sensitive goods.
How long does ISO 28000:2022 — Supply Chain Security take?
Typically 2–6 weeks once a complete application and all required documents are received. The actual time depends on how quickly documents and any corrections are provided and on assessment scheduling. You can follow every step live in your client portal.
Which documents are required?
The main documents are: Company registration certificate (SECP / partnership deed); NTN certificate; Organization chart; List of products / services; Existing management system manual (if any). You upload them securely in your portal, and our team tells you if anything needs to be replaced.
How long is the certificate valid?
The certificate is normally valid for 3 years, subject to satisfactory surveillance where applicable. You receive renewal reminders before it expires.
How can I track my application?
Create a free account, submit the online application and upload your documents. Your portal shows the live status, messages from Pak CA, the expected completion date and any documents that need attention.
How can a customer verify my certificate?
Anyone can enter the certificate number on the Verify page of this website, or scan the QR code on the certificate, to see its current status, first issue date, last renewal and expiry.
Can Pak CA help with renewal?
Yes. Your portal shows how many days are left, you get reminders before expiry, and you can start the renewal application online in a few clicks.