Training Hours: 7:30 AM – 3:30 PM
Daily Format: 3–4 Learning Modules | Coffee breaks: 09:30 & 11:15 | Lunch Buffet: 01:00 – 02:00

Day 1: Introduction to ISO 28000 and Supply Chain Security Management
Module 1: Overview of ISO 28000 (07:30 – 09:30)

• The purpose and scope of ISO 28000

• Key principles and components of the standard

• Understanding the relationship between ISO 28000 and supply chain security

Module 2: The Role of Auditing in Supply Chain Security (09:45 – 11:15)

• The importance of security audits in maintaining safe supply chains

• The audit process and its role in compliance and risk management

• Key objectives and scope of SCSMS audits

Module 3: Supply Chain Security Risks and Threats (11:30 – 01:00)

• Identifying and assessing risks in the supply chain: natural disasters, cyber threats, and theft

• Understanding common vulnerabilities in global supply chains

• The impact of security risks on operational performance and business continuity

Day 2: Audit Planning and Preparation
Module 1: Planning for ISO 28000 Audits (07:30 – 09:30)

• Developing an audit plan for supply chain security management systems

• Defining the scope, objectives, and criteria of the audit

• Preparing an audit checklist for ISO 28000 compliance

Module 2: Conducting the Opening Meeting (09:45 – 11:15)

• Objectives and structure of the audit opening meeting

• Engaging stakeholders and ensuring alignment on audit goals

• Reviewing the scope and timeline with the auditee

Module 3: Collecting Audit Evidence (11:30 – 01:00)

• Methods for collecting evidence during the audit

• Interviewing key personnel and reviewing documents and records

• Observing operations and assessing physical security measures

Day 3: Conducting the Audit
Module 1: Risk Assessment and Vulnerability Analysis (07:30 – 09:30)

• Conducting risk assessments to identify key vulnerabilities in the supply chain

• Analyzing the effectiveness of existing security measures

• Using tools and techniques for risk identification and evaluation

Module 2: Audit Techniques for SCSMS (09:45 – 11:15)

• Conducting an audit of anti-theft, cybersecurity, and physical security systems

• Evaluating compliance with ISO 28000 standards for supply chain security

• Assessing security controls for suppliers, logistics providers, and other partners

Module 3: Identifying Non-Conformities and Recommendations (11:30 – 01:00)

• Techniques for identifying non-conformities and areas of improvement

• Documenting audit findings and recommendations for corrective actions

• Evaluating the adequacy of existing security protocols and controls

Day 4: Reporting and Audit Closure
Module 1: Closing the Audit (07:30 – 09:30)

• Conducting the closing meeting with stakeholders

• Presenting audit findings and non-conformities

• Providing actionable recommendations for improving security management

Module 2: Writing the Audit Report (09:45 – 11:15)

• Best practices for writing a clear, concise audit report

• Structuring audit reports to address non-conformities and improvements

• Presenting audit results to management and stakeholders

Module 3: Post-Audit Follow-Up and Corrective Actions (11:30 – 01:00)

• Follow-up procedures to ensure corrective actions are taken

• Verifying the effectiveness of corrective measures and improvements

• Planning for continuous improvement in supply chain security

Day 5: Certification Review and Final Q&A
Module 1: Review of ISO 28000 Lead Auditor Competencies (07:30 – 09:30)

• Summary of key competencies required for ISO 28000 lead auditors

• Recap of audit process, techniques, and best practices

Module 2: Exam Preparation and Final Q&A (09:45 – 11:15)

• Preparing for the certification exam

• Final Q&A session and clarification of any outstanding questions

Module 3: Course Conclusion and Certification Review (11:30 – 01:00)

• Reviewing the course content and final thoughts

• Next steps for certification and applying auditing skills in the workplace