• ISO/PAS 28004-4:2012 – “Security management systems for the supply chain – Guidelines for the implementation of
ISO 28000 – Part 4: Additional specific guidance on implementing ISO 28000 if compliance with ISO 28001 is a
management objective.” This provides additional guidance for organizations adopting ISO 28000 that also wish to
incorporate the best practices identified in ISO 28001 as a management objective on their international supply chains.