Skip to content

Become an ISO 28000 Lead Auditor

Build the expertise to audit and strengthen supply chain security management systems with QMII’s Exemplar Global-recognized training: Virtual & Instructor-Led

Receive post-course support and join a thriving alumni network of systems thinkers and lead auditors with QMII’s industry leading “Alumni for Life” program.

Lead Effective Supply Chain Security Audits

QMII’s ISO 28000 Lead Auditor Training prepares professionals to implement, evaluate, and audit Supply Chain Security Management Systems (SCSMS). Participants gain the skills required to manage and control supply chain threats and risks through process-based, objective auditing.

ISO 28000:2022 enhances enterprise risk management by integrating concepts from ISO 31000 (Risk Management), CTPAT and the ISPS Code, delivering a comprehensive framework for supply chain security.

Program Overview

This ISO 28000 course includes;

  • 4-day instructor-led training
  • Delivered by industry-experienced instructors
  • Available onsite or virtually
  • Course materials and examinations included (ISO standards not included)

The training is designed to provide a deep understanding of ISO 28000 requirements, their interpretation, and application across multiple industries, including maritime, pharmaceutical and logistics environments.

Course Highlights

QMII’s ISO 22301 training focuses on:

Modern supply chains face complex risks, including security threats, disruptions, and regulatory pressures. ISO 28000 provides a structured, risk-based approach to:

  • Identifying and assessing security threats
  • Managing operational and security risks
  • Aligning supply chain security with business objectives
  • Supporting integration with other management system standards

QMII’s approach ensures auditors evaluate how well security processes work in practice, not just whether controls exist.

Learning Objectives

Participants in QMII’s ISO 28000 Lead Auditor Training will learn how to:

  • Understand processes for assessing security threats and perceptions
  • Prepare security plans based on risk assessment
  • Analyze operational and supply chain security risks
  • Evaluate a Business System Manual
  • Prepare audit schedules and audit plans
  • Develop audit checklists through process analysis
  • Gather and verify factual audit evidence
  • Conduct lead audit investigations
  • Report audit findings effectively
  • Manage preventive and corrective actions

How QMII Helps You Learn

  • Role-playing and scenario-based workshops
  • Active listening and facilitated discussion
  • Peer-to-peer and peer-to-instructor interaction
  • Practical exercises reflecting real supply chain security challenges

Class Agenda

1
Day 1
  • Introduction to Management Systems
  • ISO 28000 Overview
  • ISO 28000 Self-Study Test
  • Risk Management Concepts (ISO 31000)
  • ISO 28000 Clauses (Workshop)
  • CTPAT and ISO 28000
  • Maritime Security – Historical Perspective
2
Day 2
  • Security Policy for Supply Chain Security
  • Analyzing Processes (Workshop)
  • ISO 28000 SCS Exam
  • Auditing Management Systems
  • ISO 19011 Terms & Definitions (Workshop)
  • Audit Planning & Preparation
  • Reviewing System Documentation & Preparing Audit Schedules
3
Day 3
  • Reviewing Processes & Preparing Audit Checklists
  • Lead Audit Investigation
  • Verifying Facts
  • Writing Nonconformity Statements
  • Determining Nonconformities to ISO 28000
4
Day 4
  • Concluding the Audit
  • Closing Meeting Preparation
  • Closing Meeting & Audit Report
  • Corrective Action
  • Certification, Registration & Accreditation

Who Should Attend This Course

  • CEOs, VPs, and Top Management
  • Directors of Quality
  • Quality and security professionals
  • Maritime security professionals and CSOs
  • Personnel involved in supply chain security
  • ISO Managers and Management Representatives
  • Individuals seeking Exemplar Global-certified Lead Auditor credentials
  • Process owners and system professionals
  • Improvement specialists

Certification & Recognition

Participants who successfully complete the training and examinations receive a Certificate of Attainment for the following QMII training units:

  • 28000 – Supply Chain Security
  • AUDITOR – Auditing Management Systems
  • TEAMLEAD – Leading Management Systems Audit Teams

This course is recognized by Exemplar Global as meeting the training requirements for ISO 28000 Supply Chain Security Lead Auditor certification.

Successful candidates may use these certifications as earned credit toward other QMII auditor programs, including ISO 9001 Lead Auditor and similar standards.

Frequently Asked Questions

Supply chain security managers, logistics professionals, and auditors responsible for supply chain security management systems.

The course is a 4-day instructor-led program, delivered onsite or virtually.

Yes. The Certificate of Attainment is recognized by Exemplar Global.

ISO 28000 is particularly relevant for logistics, freight, port operations, air cargo, and organizations managing complex supply chains.

Yes. ISO 28000 aligns with ISO 31000 risk management principles and complements programs like C-TPAT and AEO.