This standard provides guidance to medium-sized and small ports that wish to adopt ISO 28000. It identifies supply chain risk and threat scenarios, procedures for conducting risk/threat assessments, and evaluation criteria for
measuring conformance and effectiveness of the documented security plans in accordance with ISO 28000 and
ISO 28004 implementation guidelines