and describes the intent, typical inputs, processes and typical outputs for each requirement of ISO 28000. The objective is to aid the understanding and
implementation of ISO 28000. ISO 28004-1:2007 does not create additional requirements to those specified in
ISO 28000, nor does it prescribe mandatory approaches to the implementation of ISO 28000