ISO 28000:2022 Security Management Awareness

About Course

Build practical ISO 28000 awareness through 12 modules and 36 complete text lessons, including Amendment 1:2024 on climate considerations. Explore security management across organizational activities and supply-chain interfaces. Learn about context, leadership, planning, support, process mapping, assets, threats, vulnerabilities, risk assessment, treatment, controls, security strategies, plans, response, recovery, evaluation and improvement. Every lesson includes an activity and feedback. A fictional distribution case develops evidence-based judgments about dispatch records, contractor access, alarm response and suspicious release instructions. Includes a 40-question quiz, a required practical assignment with a marking rubric, a separate learner assignment document and 12 optional reference links. Estimated workload: 6.5 hours. Successful completion earns a W3 course-completion certificate.

LO01: Explain the purpose, scope and management cycle of ISO 28000:2022 and distinguish related security disciplines.
LO02: Identify context, interested parties, obligations, scope and climate relevance under Amendment 1:2024.
LO03: Explain leadership, security policy, responsibilities, objectives, planning and management of change.
LO04: Recognize security resources, competence, awareness, communication and controlled documented information.
LO05: Map security-relevant processes, assets, dependencies and upstream and downstream interfaces.
LO06: Distinguish threats, vulnerabilities, consequences and risk, and explain assessment, treatment and remaining risk.
LO07: Apply appropriate physical, personnel, information and transaction controls in everyday situations.
LO08: Explain how strategies, resources, procedures and supplier arrangements support effective security controls.
LO09: Recognize response authority, escalation, secure communication, evidence preservation and controlled recovery.
LO10: Calculate meaningful security indicators and distinguish control installation, operation and effectiveness.
LO11: Explain internal audit, management review, corrective action and continual improvement using objective evidence.
LO12: Evaluate the fictional case, calculate control gaps and propose prioritized actions with verification criteria.

Course Content

Security management foundations
Understand ISO 28000, the security management system and its application beyond transport and logistics.

01 | Why security management matters
02 | Edition and the management cycle
03 | Security and related disciplines

Context scope and climate considerations
Identify security context, interested parties, obligations, boundaries and the 2024 climate amendment.

Leadership and security planning
Connect leadership, policy, responsibilities, objectives, risk planning and controlled changes.

People communication and information
Recognize the resources, competence, awareness, communication and records that support security.

Processes assets and dependencies
Map activities, protect assets and manage security at supplier and customer interfaces.

Security risk assessment and treatment
Describe security scenarios, assess risk consistently and evaluate treatment and remaining risk.

Security controls in daily work
Apply proportionate physical, personnel, information and transaction controls.

Strategies and operational arrangements
Select security strategies, provide resources and turn approved controls into workable procedures.

Security plans response and recovery
Understand response authority, warning, communication, safe incident handling and controlled recovery.

Monitoring and practical verification
Interpret security indicators and use authorized tests and exercises to assess performance.

Audit management review and improvement
Recognize objective evidence, management decisions, corrective action and continual improvement.

Integrated security management case
Evaluate a fictional distribution operation and propose practical actions using evidence and calculations.

Assessment

Student Ratings & Reviews

No Review Yet

Share this course

About Course

What Will You Learn?

Course Content

Security management foundations Understand ISO 28000, the security management system and its application beyond transport and logistics.

01 | Why security management matters

02 | Edition and the management cycle

03 | Security and related disciplines

Context scope and climate considerations Identify security context, interested parties, obligations, boundaries and the 2024 climate amendment.

04 | Context interested parties and obligations

05 | Scope and security management principles

06 | Climate considerations in security

Leadership and security planning Connect leadership, policy, responsibilities, objectives, risk planning and controlled changes.

07 | Leadership and security policy

08 | Roles authority and escalation

09 | Objectives risks and planned changes

People communication and information Recognize the resources, competence, awareness, communication and records that support security.

10 | Resources and competence

11 | Awareness communication and reporting

12 | Controlled documents and security records

Processes assets and dependencies Map activities, protect assets and manage security at supplier and customer interfaces.

13 | Map processes and handoffs

14 | Assets threats and vulnerabilities

15 | Supplier and customer interfaces

Security risk assessment and treatment Describe security scenarios, assess risk consistently and evaluate treatment and remaining risk.

16 | Identify security risk scenarios

17 | Analyze evaluate and prioritize risk

18 | Treat risk and review what remains

Security controls in daily work Apply proportionate physical, personnel, information and transaction controls.

19 | Physical access and protective measures

20 | Personnel visitors and contractor access

21 | Information and transaction security

Strategies and operational arrangements Select security strategies, provide resources and turn approved controls into workable procedures.

22 | Select security strategies and treatments

23 | Resources implementation and supplier arrangements

24 | Procedures exceptions and controlled work

Security plans response and recovery Understand response authority, warning, communication, safe incident handling and controlled recovery.

25 | Response structures and security plans

26 | Warning communication and safe initial action

27 | Evidence and controlled recovery

Monitoring and practical verification Interpret security indicators and use authorized tests and exercises to assess performance.

28 | Measure security performance

29 | Authorized tests and exercises

30 | Evaluate control effectiveness

Audit management review and improvement Recognize objective evidence, management decisions, corrective action and continual improvement.

31 | Internal audit and objective evidence

32 | Management review and decisions

33 | Corrective action and continual improvement

Integrated security management case Evaluate a fictional distribution operation and propose practical actions using evidence and calculations.

34 | Read the Falcon distribution case

35 | Calculate and evaluate the case gaps

36 | Apply the learning at work