• ISO/PAS 28004-3:2012 – “Security management systems for the supply chain – Guidelines for the implementation of ISO
28000 – Part 3: Additional specific guidance for adopting ISO 28000 for use by medium and small businesses (other
than marine ports).” This has been developed to supplement ISO 28004-1 by providing additional guidance to medium
and small businesses (other than marine ports) that wish to adopt ISO 28000. The additional guidance in ISO/PAS
28004-3:2012, while amplifying the general guidance provided in the main body of ISO 28004-1, does not conflict with
the general guidance, nor does it amend ISO 28000.