TS ISO 28004-2

TS ISO 28004-2 is the second part of the guidance standard that supports the adoption of ISO 28000 for medium and small seaport operations. In the context of supply chain security management systems, it helps users understand supply chain risk and threat scenarios and how documented security plans in port operations can be assessed.

How seaport security relates to supply chain continuity

The standard is concerned with protecting the integrity of cargo handled in ports and supporting continuity of operations. In general technical terms, a supply chain security management system brings together physical security, access control, personnel practices, information flow, and incident response under one management framework. Seaports are especially relevant because cargo movement, transshipment activities, and multiple stakeholders create concentrated security exposure.

The evaluation approach provided by this part

The document identifies procedures for conducting risk and threat assessments and evaluation criteria for measuring conformance with ISO 28000 and the ISO 28004 series implementation guidance. It also describes the creation of a measurable confidence rating system, on a scale from 1 to 5, based on the quality of the seaport security management plans and procedures. This gives ports a structured way to compare how consistently their security arrangements are implemented and documented.

From a broader technical perspective, guidance of this kind is not only about establishing a security system, but also about checking whether the plans and procedures are workable in practice. Seaport security is therefore treated as a matter of management consistency, evidence-based evaluation, and operational resilience rather than isolated protective measures.