Supply chain security management system vs. quality management system

The ISO 28000:2007 standard shares numerous similarities with other management systems, such as the ISO 9001:2009 Quality Management System, and is built on the basis of the ISO 14001:2004 standard (Environmental Management System). Elements of an information security management system based on the requirements of the ISO 27001:2005 standard are also visible within it.

Another standard to which we find similarities, which also influences the improvement of security levels through the implementation of mechanisms related to business continuity management, is the BS 25999-2:2007 (ISO 22301:2012) standard.
The article outlines the common elements of selected management standards: the Quality Management System and the Supply Chain Security Management System.

The purpose of this publication is to encourage domestic enterprises operating in the transport, forwarding, or logistics sectors to expand their existing management systems, as well as to draw attention to the fact that building an integrated enterprise management system based on these two systems can be an effective tool for reducing risks appearing in the supply chain.

System solutions
Currently, the quality management system is the most common standard among management systems used in enterprises. This system has gained popularity due to such features as:

• comprehensiveness – it contains a set of elements allowing for the construction of an effective management system,
• flexibility – it allows for the individual selection of management methods and tools,
• universality – it can be applied in any organization.

Among the industries that use the supply chain security management system, we can distinguish both manufacturing and service enterprises, logistics operators, and freight forwarding companies.
In the supply chain security management system, system solutions used in other management system standards developed by the International Organization for Standardization (ISO) have been applied; these are control of documents and records, corrective and preventive actions, internal audits, and management review. An additional common element of ISO standards is non-conformity management, which in ISO 28000 is included in clause 4.4.7 – Emergency preparedness and response and 4.5.3 – Security failures, incidents, nonconformities and corrective and preventive actions. In both systems, the organization is required to establish, document, implement, and continually improve the effectiveness of management. In the ISO 9001 standard, one must maintain a Quality Management System, and in the ISO 28000 standard, one must implement a Security Management System that defines its threats, assesses risks, and controls and mitigates their consequences. Similarities within system solutions allow for the efficient integration of, among other things, system documentation. (…)

Supply chain security management system vs. quality management system – PDF file for download