TS ISO 28004-2

TS ISO 28004-2 provides guidance for medium and small seaport operations that want to adopt ISO 28000 for supply chain security management. Rather than setting requirements of its own, it helps users understand how an ISO 28000-based security management approach can be structured to support cargo security and continuity of operations at a seaport.

Where risk and threat assessment fit in seaport security

The standard focuses on identifying supply chain risk and threat scenarios, describing procedures for conducting risk/threat assessments, and addressing criteria for evaluating the conformance and effectiveness of documented security plans. In practical terms, this aligns with the general security-management logic used in ports: combining physical protection, access control, operational discipline, and preparedness for incidents into one managed system.

From security plans to a confidence rating

A distinctive feature of this part is its aim to support a level-of-confidence rating system based on the quality of the security management plans and procedures implemented by the seaport. The rating, on a scale of 1 to 5, is intended to express a measurable level of confidence that seaport security operations conform to ISO 28000 in protecting supply chain integrity. This gives the document practical value as a framework for comparing security maturity and identifying priorities for improvement across seaport operations.

Overall, this document serves as implementation guidance for smaller and medium-sized seaport environments where supply chain security must be managed in a structured, auditable way. Its technical focus is on continuity, cargo integrity, and making security plans assessable in relation to ISO 28000.