TS ISO 28004-4
Security management systems for the supply chain - Guidelines for the implementation of ISO 28000 - Part 4: Additional specific guidance on implementing ISO 28000 if compliance with ISO 28001 is a management objective
This part of ISO 28004 provides additional guidance for organizations adopting ISO 28000 that also
wish to incorporate the Best Practices identified in ISO 28001 as a management objective on their
international supply chains. The Best Practices in ISO 28001 both help organizations establish and
document levels of security within an international supply chain and facilitate validation in national
Authorized Economic Operator (AEO) programmes that are designed in accordance with the World
Customs Organization (WCO) Framework of Standards.
This part of ISO 28004 is not designed as a standalone document. The main body of ISO 28004-1 provides
significant guidance pertaining to required inputs, processes, outputs and other elements required by
ISO 28000. This part of ISO 28004 provides additional specific guidance on implementing ISO 28000 if
compliance with ISO 28001 is a management objective.
Some requirements specified in the WCO AEO programme are government functions and are not
addressed in the ISO international standards. These include:
— Demonstrated Compliance with Customs Requirements. Customs are to take into account the
demonstrated compliance history of a prospective AEO when considering the request for AEO
status.
— Satisfactory System for Management of Commercial Records. The AEO is to maintain timely,
accurate, complete and verifiable records relating to import and export. Maintenance of verifiable
commercial records is an essential element in the security of the international trade supply chain.
— Financial Viability. Financial viability of the AEO is an important indicator of an ability to maintain
and improve upon measures to secure the supply chain.
— Consultation, Co-operation and Communication. Customs, other competent authorities and the AEO
at all levels ― international, national and local ― should consult regularly on matters of mutual
interest, including supply chain security and facilitation measures, in a manner which will not
jeopardize enforcement activities. The results of this consultation should contribute to Customs
development and maintenance of its risk management strategy.
Available Formats:
- Availability: Immediate Download
- Language: English
- License Type: Single User
- Updates: Not Included
- Availability: Request Quote
- Language: English
- License Type: Enterprise / Multi User
- Updates: Included
About This Item
TS ISO 28004-4 addresses additional guidance for organizations implementing ISO 28000 when aligning their security management approach with the Best Practices described in ISO 28001 as a management objective. In practical terms, it sits within the supply chain security management family and focuses on how organizations can structure and evidence security levels in international supply chains, while also supporting validation in national Authorized Economic Operator (AEO) programmes aligned with the World Customs Organization (WCO) Framework of Standards.
How ISO 28000 and ISO 28001 relate
This document is not intended to stand alone; it complements the core guidance in ISO 28004-1. As general technical context, ISO 28000 is about establishing and operating a supply chain security management system, while ISO 28001 provides best practices for defining, documenting and validating security levels in use. This part adds specific implementation guidance for organizations that make compliance with ISO 28001 a management objective.
Customs, records and supply chain assurance
The AEO context highlighted in the scope reflects a risk-based partnership model between customs administrations and businesses. From a general supply chain security perspective, effective assurance is not limited to physical safeguards; it also depends on reliable commercial records, traceability, financial viability and regular consultation with competent authorities. The standard also makes an important boundary clear: some AEO requirements are government functions and are not addressed by ISO international standards.
- Provides additional guidance alongside the main ISO 28004-1 framework.
- Applies where ISO 28001 best practices are treated as a management objective.
- Focuses on documenting and maintaining security levels in international supply chains.
- Supports validation in AEO programmes designed in line with the WCO Framework of Standards.
- Separates government functions from matters covered by ISO international standards.
- Publication Date: 4.03.2024
- Standard Status: U (Yürürlükteki Standard/Standard)
- Publisher: TSE
- Document Language: en
- ICS Classification: 03.100.01 Şirket Organizasyonu ve Yönetimi (Genel); 03.100.70 Yönetim Sistemleri; 47.020.99 Gemi İnşaa ve Denizcilik ile İlgili Diğer Standardlar
- Pages: 17
- Source Standard: ISO 28004-4:2014
- International Equivalents: ISO 28004-4-EQV
Need This Standard?
Request a personalized quote today to receive the latest edition in PDF or other available formats.
Need This Standard?
Request a personalized quote today to receive the latest edition in PDF or other available formats.
Summarize with AI
Get quick summaries using your favorite AI engine.
Online Standart Disclaimer
OnlineStandart.com is an authorized reseller of international standards, operating through partnerships with authorized distributors. We do not own the copyrights or trademarks of the standards we sell, including but not limited to those of API, ASHRAE, BSI, SAE, ASTM, IEEE, IEC, ASME, ISO, and others.
All product names, logos, and brands are the property of their respective owners and are used for identification purposes only; their use does not imply endorsement. OnlineStandart.com is not affiliated with or endorsed by any standards development organization unless explicitly stated. The content of this document is for informational purposes only and is intended to promote our licensed reselling services.
Online Standart does not host, distribute, or link to free, unlicensed, or uncertified copies of copyrighted standards. Every document we deliver is a licensed copy obtained through authorized channels and supplied with full licensing documentation. The “Free PDF Download” option on our product pages refers to this free informational document — never to a free copy of any standard.