ISO/PAS 28004-4:2014 – “Security management systems for the supply chain – Guidelines for the implementation
of ISO 28000 – Part 4: Additional specific guidance on implementing ISO 28000 if compliance with ISO 28001 is
a management objective.” This provides additional guidance for organizations adopting ISO 28000 that also wish
to incorporate the best practices identified in ISO 28001 as a management objective on their international supply
chains.