← All courses

Awareness · Supply chain security

ISO 28000 Security and Resilience Awareness

Help every employee recognise security risks and protect the organisation and its supply chain.

A practical introduction to ISO 28000:2022, Security and resilience — Security management systems — Requirements: security risk assessment, security strategies and plans, the supply chain, and each person's part in security.

Secure payment by Stripe · for yourself or for your team

Standard and editionISO 28000:2022

Last updated3 October 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from ISO 28000 Security and Resilience Awareness before you enrol.

ISO 28000 Security and Resilience AwarenessSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Explain what a security management system is and why organisations adopt ISO 28000
  • Describe how ISO 28000:2022 applies to the organisation and its supply chain
  • Understand how security risks are assessed and treated
  • Recognise security incidents and know how to report them
  • Describe your own part in security and resilience

Part of: CTPAT and Supply Chain Security Training

Inside the course

A clear path through the essentials.

13 modules, 13 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 9 min
  1. Why security management matters9 min
  2. Practice: Why security management matters3 questions
Part 2Module 2Approx. 9 min
  1. ISO 28000: what it is and how it is built9 min
  2. Practice: ISO 28000: what it is and how it is built3 questions
Part 3Module 3Approx. 8 min
  1. The principles of security management8 min
  2. Practice: The principles of security management3 questions
Part 4Module 4Approx. 8 min
  1. Context, parties, legal requirements and scope8 min
  2. Practice: Context, parties, legal requirements and scope3 questions
Part 5Module 5Approx. 8 min
  1. Leadership, the security policy and roles8 min
  2. Practice: Leadership, the security policy and roles3 questions
Part 6Module 6Approx. 8 min
  1. Assessing security risks8 min
  2. Practice: Assessing security risks3 questions
Part 7Module 7Approx. 8 min
  1. Treating risks: strategies, controls and change8 min
  2. Practice: Treating risks: strategies, controls and change3 questions
Part 8Module 8Approx. 8 min
  1. Security objectives and planning changes8 min
  2. Practice: Security objectives and planning changes3 questions
Part 9Module 9Approx. 8 min
  1. People: competence, awareness and communication8 min
  2. Practice: People: competence, awareness and communication3 questions
Part 10Module 10Approx. 8 min
  1. Documented information and operational control8 min
  2. Practice: Documented information and operational control3 questions
Part 11Module 11Approx. 8 min
  1. Security plans: response, warning and recovery8 min
  2. Practice: Security plans: response, warning and recovery3 questions
Part 12Module 12Approx. 8 min
  1. Monitoring, internal audit and management review8 min
  2. Practice: Monitoring, internal audit and management review3 questions
Part 13Module 13Approx. 8 min
  1. Improving, the road ahead, and your part8 min
  2. Practice: Improving, the road ahead, and your part3 questions

Frequently asked questions

Your questions,
answered.

About ISO 28000 Security and Resilience Awareness, its certificate and enrolment.

Ask Sterling
Who is ISO 28000 Security and Resilience Awareness training for?

It is for top management, security, logistics, warehousing and procurement teams, and all staff in organisations using or planning ISO 28000, such as freight forwarders, ports, manufacturers, distributors and BPOs that handle goods or sensitive operations. It helps every person recognise security risks and know how to report them. No prior knowledge of ISO 28000 is needed.

What does the ISO 28000 Security and Resilience Awareness course cover?

It covers why security and resilience matter; how ISO 28000:2022 is organised and applies to any organisation; context, interested parties, scope, leadership and the security policy; security risk assessment and treatment, objectives and planning; security strategies, procedures and plans, including response and recovery; resources, competence, communication and working with suppliers; and monitoring, internal audit, management review and continual improvement.

How long does the ISO 28000 Security and Resilience Awareness course take?

It is a set of short video modules, each followed by practice questions, and a final exam. The course page shows the number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, learners can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for ISO 28000 Security and Resilience Awareness. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. ISO 28000 Security and Resilience Awareness is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

ISO 28000 Security and Resilience Awareness is US$19 per learner. Teams save 20% for 11 to 50 learners and 30% for 51 to 200 learners; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Does this course make our organisation ISO 28000 certified?

No. The Certificate of Completion is a training certificate: it shows that one person completed ISO 28000 Security and Resilience Awareness and reached the pass mark in its final exam. It is not certification of an organisation to ISO 28000, and Sterling does not certify organisations. An organisation is certified by an independent certification body after that body's own audit.

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Ask about course requirements

Your next step

Ready to put ISO 28000 Security and Resilience into practice?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs