ForewordIntroductionScopeNormative referencesTerms and definitionsField of applicationStatement of applicationBusiness partnersInternationally accepted certificates or approvalsBusiness partners exempt from security declaration requirementSecurity reviews of business partnersSupply chain security processGeneralIdentification of the scope of the security assessmentConduction of the security assessmentAssessment personnelAssessment processDevelopment of the supply chain security planExecution of the supply chain security planDocumentation and monitoring of the supply chain security processGeneralContinual improvementActions required after a security incidentProtection of the security informationSupply chain security process (informative)GeneralIdentification of the scope of the security assessmentConduction of the security assessmentGeneralPerformance review listPerformance reviewSecurity threat scenariosDevelopment of the security planGeneralDocumentationCommunicationExecution of the security planDocumentation and monitoring of the security processContinual improvementMethodology for security risk assessment and development of countermeasures (informative)GeneralStep one – Consideration of the security threat scenariosStep two – Classification of consequencesStep three – Classification of likelihood of security incidentsStep four – Security incident scoringStep five – Development of countermeasuresStep six – Implementation of countermeasuresStep seven – Evaluation of countermeasuresStep eight – Repetition of the processContinuation of the processGuidance for obtaining advice and certification (informative)GeneralDemonstrating conformance with by auditCertification of by third party certification bodiesBibliography