Supply Chain Security Threat Assessment Procedure

This procedure sets out how your organisation identifies and assesses the security threats to its supply chains: who or what could cause harm, what they want, what they are capable of, where they could act, and how likely they are to do so. The output, a set of rated threat scenarios for each service flow, node, link and custody transfer point, is the threat input to the security risk assessment.

What's Inside

• Threat Assessment Model
• Threat Catalogue and Actor Profiles
• Step 1 – Plan the Assessment
• Step 2 – Gather Threat Information
• Step 3 – Identify Threat Actors
• Step 4 – Assess Target Attractiveness
• Step 5 – Develop Threat Scenarios

ISO 28000 Alignment

Supports ISO 28000:2022 requirements, including Clauses 4.1, 4.2, 6.1, 8.2, 9.1 and 10.2. It fits with the rest of the QEHS Vault ISO 28000 document set.

Format

Supplied as a fully editable Microsoft Word (.docx) file. Add your organisation’s name, logo and details, then use it straight away. Instant download after purchase.