ISO/PAS 28000 Certification Industry Security Management System for the Supply Chain BUSINESS CHALLENGE In today's global economic landscape, security management has become a complex challenge in all areas of industry and, in particular, supply chains. Logistics operations and supply chain partners are often scattered worldwide with varying national regulations and business processes. Companies would like to assure security while identifying potential threats, assessing risks and implementing measures to prevent any risks and threats from adversely affecting the success of their business. SOLUTION What is ISO/PAS 28000? ISO/PAS 28000 was developed in response to the transportation and logistics industries' need for a commonly applicable security management system specific to supply chain security. However, companies in many other industries are finding it useful to assess security risks, implement controls, and mitigate arrangements to manage potential security threats and impacts from the supply chain. Quality, safety and customer satisfaction also benefit from this management system. The requirements for ISO/PAS 28000 include all critical aspects for supply chain security assurance. Some examples include: financing, manufacturing, information management, and the facilities for packing, storing and transferring goods between vehicles and locations. Security management is linked to many other aspects of business management. These should be considered directly, when and where they impact security management, including transporting goods through the supply chain. WHY CHOOSE BUREAU VERITAS CERTIFICATION? Expertise■With 80,000 clients in more than 140 countries, delivering over 100,000 certificates, Bureau Veritas Certification is the world's leading certification body. Recognition■Bureau Veritas Certification is recognized by more than 36 national and international accreditation bodies across the world. Network■5,700 highly qualified auditors worldwide operating in more than 140 countries. This global presence means that our clients can receive the double advantage of international expertise combined with a genuine depth of local knowledge. Mark of global recognition■The Bureau Veritas Certification label is a globally recognized symbol of your organization ’ s ongoing commitment to excellence, sustainability and reliability. Combined services■We offer the possibility of combined certifications to the largest range of recognized standards, bringing consistency, optimization and efficiency.

RELATED SERVICES Clients may combine ISO/PAS 28000 certification with other related management system certifications, such as quality, health & safety, environment and social responsibility. Integrated certification services result in optimized, efficient and consistent audits. In addition to ISO/PAS 28000, Bureau Veritas Certification is also qualified to conduct certifications for:

ISO 9001, ISO 14001, SA 8000, ISO/TS 16949, QS-9000, AS/EN 9100, TL 9000, SQAS, TDGA HACCP & GMP, ISO 20000

OUR CERTIFICATION PROCESS The following are key steps in our certification process:

Pre-audit (optional): gap analysis, current situation diagnostic, standard requirements comparison Initial audit: certification requirements global assessment Certification audit (certificate issued) Surveillance audits for continual improvement Re-certification after three years (full audit or continual assessment)

Following each audit, a comprehensive report is quickly delivered allowing your company to continually improve its management system. FAQ Who is concerned by ISO/PAS 28000? Companies that wish to implement and maintain a proven security management system; any type and size of organization involved in manufacturing, service, storage and transportation related to production or supply chains. How are ISO/PAS 28000, ISO 9001 and ISO 14001 linked? ISO/PAS 28000 was designed to help integrate quality environmental and supply chain security management systems within an organization. It is compatible with ISO 9001:2000 (quality management) and ISO 14001:2004 (environmental management). ISO/PAS 28000 is based on a plan-do-check-act management system modelled after the proven ISO 14001 framework. The risk-based approach outlined in ISO 14001 is similar to the one used in ISO/PAS 28000. Will the adoption and integration of ISO/PAS 28000 requirements entail a big investment? For industry logistics and supply chain partners, most of the requirements are also the requirements of your clients. Adopting this standard represents a limited effort in organization and documentation.

With 80,000 clients in more than 140 countries, delivering over 140,000 certificates, Bureau Veritas Certification is the world's leading certification body. Relying on a global network of 5,700 highly qualified auditors and a vast expertise that is recognized by more than 36 national and international Accreditation Bodies, Bureau Veritas Certification provides you with a comprehensive range of certification and auditing services from public standards to more customized schemes, in the fields of Quality, Health, Safety, Environment, and Social Responsibility (QHSE-SR). Bureau Veritas Certification (formerly BVQI) is the independant certification body of Bureau Veritas, which is an international group with a core business of conformity assessment, applied in the areas of QHSE-SR. Bureau Veritas serves more than 300,000 customers in 140 countries.