Alcance
ISO/PAS 28004-2:2012 provide guidance to medium and small ports that wish to adopt ISO 28000. It identifies supply chain risk and threat scenarios, procedures for conducting risks/threat assessments, and evaluation criteria for measuring conformance and effectiveness of the documented security plans in accordance with ISO 28000 and ISO 28004 implementation guidelines.