PECB Training & Certification
Home › Courses › Supply Chain Security › ISO 28000 Foundation
Supply Chain Security Foundation EN · ES · FR

ISO 28000 Foundation

Understand the fundamentals of supply chain security management with ISO 28000: the concepts of a security management system (SeMS), the main requirements of the standard and how it helps organisations manage security risks across the supply chain.

2 daysof training
Foundationentry level
EN · ES · FRlanguages
OfficialPECB exam incl.

Who is this course for?

  • Professionals starting out in supply chain security
  • Security, logistics and operations staff
  • Consultants and managers introducing a SeMS
  • Those preparing for the ISO 28000 Lead Implementer or Lead Auditor level

What you'll gain

  • The PECB Certified ISO 28000 Foundation credential
  • An understanding of SeMS concepts and ISO 28000 requirements
  • Knowledge of supply chain security risk management
  • A solid base to progress towards the Lead levels

Course programme

Day 1 · Introduction to ISO 28000 and SeMS concepts
  • Supply chain security concepts and threats
  • The ISO 28000 framework and benefits
  • Roles and responsibilities in a SeMS
Day 2 · ISO 28000 requirements and exam
  • Key requirements of ISO 28000
  • Security risk management in the supply chain
  • Review and official Foundation exam

Exam, credits & certification

1 h
Duration of the official PECB exam
14 CPD
Continuing Professional Development credits awarded by the course
Included
Exam, marking and first issue of the certification, included in the price

After passing the exam, you can apply for the "PECB Certified ISO 28000 Foundation" credential. The exam includes 2 attempts: the first plus a free retake, usable within the following 12 months. Passing first time is no longer a source of pressure. CPD credits correspond to the level of the course according to PECB. Exam duration is indicative; ask me for the exact details when you enrol.

Your trainer

Ricardo Coronel Lemus, PECB trainer

Ricardo Coronel Lemus

Practising GRC / vCISO consultant · PECB Certified Trainer (CT6496)

Over 20 years in cybersecurity and compliance, today a vCISO and GRC consultant with real clients in France, Spain and Mexico. I don't approach standards theoretically: I apply them day to day with real clients: that's what I bring to my coaching and exam preparation.

ISO 27001 Lead Auditor / Lead Implementer CISSPCISMCRISCCCISODORA Lead ManagerPCI DSS - PCIP

Frequently asked questions

Do I need any prerequisites?
No formal prerequisites are required to take the course. Prior background in the field helps, but is not mandatory.
What language is the exam in?
The official PECB material and exam for this course are available in the languages shown on this page. Coaching is delivered in English to prepare you thoroughly. If you need a specific language, contact us and we will confirm it.
What is the difference between Self-Study and Self-Study + Coaching?
Self-Study gives you the official material, the exam and the certification so you can progress at your own pace. The coaching option adds one-to-one sessions with me, real-world case studies and guided exam preparation: I support you until you feel ready to certify.
What if I don't pass the exam?
The PECB exam includes 2 attempts: the first plus a free retake usable within the following 12 months. So a failure doesn't leave you stranded. What's more, with the coaching option we prepare for the exam together with mock exams so that you arrive confident.
Is ISO 28000 relevant to supply chain resilience and regulations?
Yes. ISO 28000 provides a recognised framework to manage security risks across the supply chain, increasingly relevant to resilience expectations and to regulations addressing supply chain and third-party security.

Ready to get started with supply chain security?

Choose your option above and enrol online. A question or need some advice? Write to me or book a call.

See options and pay Book 30 minutes with me