Supply chain security audits have become a critical assurance mechanism in a risk environment shaped by geopolitical instability, complex logistics networks, regulatory pressure, and heightened exposure to disruption and malicious acts. In this context, ISO 28000 audits are expected to go beyond formal conformity and provide credible assurance on the effectiveness of security controls across the supply chain.
This four-day ISO 28000 Lead Auditor course is designed for professionals responsible for planning, conducting, and closing audits of Supply Chain Security Management Systems. The training integrates ISO 28000 requirements with the auditing framework defined by ISO/IEC 17021-1 and the audit guidelines of ISO 19011, ensuring alignment with certification body and regulatory expectations.
Participants develop the skills required to apply risk-based and evidence-based auditing approaches. The course covers the full audit lifecycle, including audit planning, stage 1 and stage 2 audits, on-site audit activities, audit team leadership, formulation of findings, reporting, and follow-up of nonconformities. Particular attention is given to evaluating the effectiveness of security controls and the consistency between risk assessments, operational practices, and audit evidence.
Practical exercises reinforce audit techniques, interview skills, sampling strategies, and professional judgement. By the end of the training, participants are prepared to lead ISO 28000 audits with confidence and credibility, whether in internal audit functions or third-party certification contexts.