scope:

This Standard contains principles and requirements for bodies providing the audit and certification of
supply chain security management systems according to management system specifications and
standards such as ISO/PAS 28000.
Certification of supply chain security management systems (named in this ISO/PAS 'certification') is a
third party conformity assessment activity (see clause 5.5. of ISO/IEC 17000). Bodies performing this
activity are therefore third party conformity assessment bodies named in this ISO 'certification
body/bodies'.
NOTE 1 Certification of a supply chain security management system is sometimes also called registration, and
certification bodies are sometimes called registrars.
NOTE 2 A certification body may be nongovernmental or governmental (with or without regulatory authority).
NOTE 3 This ISO may be used as a criteria document for accreditation or peer assessment or other audit
processes.