• ISO/PAS 28004-2:2012 – “Security management systems for the supply chain – Guidelines for the implementation of ISO
28000 – Part 2: Guidelines for adopting ISO 28000 for use in medium and small seaport operations.” This provides
guidance to medium and small ports that wish to adopt ISO 28000. It identifies supply-chain risk and threat scenarios,
procedures for conducting risks/threat assessments, and evaluation criteria for measuring conformance and effectiveness
of the documented security plans in accordance with ISO 28000 and ISO 28004 implementation guidelines.