Introduction
The ISO 28000 Lead Auditor Certification (ISO 28000 LA) is awarded by the Global Institute of Professional Management Certification (GIPMC). It covers auditing security management systems that protect supply chains, from planning through evidence to reporting. ISO 28000 is published by the International Organization for Standardization (ISO); this credential is awarded by GIPMC, not by ISO.
GIPMC aims it at auditors and audit program managers, supply chain, logistics and transport managers, security, risk and resilience staff, trade compliance and customs professionals, and consultants.
BlueMorpho Learning Solutions is your training and enrollment partner for ISO 28000 LA. We help you understand the requirements, plan your preparation and enroll for the exam. GIPMC runs the exam and awards the certification.
Key Highlights
- Audit-focused outline: Thirteen modules cover supply chain threats, ISO 28000 requirements, security risk and each audit stage from planning to reporting.
- Online proctored exam: 80 objective multiple-choice questions, including scenario-based items, in 120 minutes, with a 70% pass mark.
- Renewal: GIPMC describes a renewal process but does not state how long the credential stays valid.
- Eligibility: GIPMC's page lists no prerequisites. Ask our team to confirm before you enroll.
Curriculum
GIPMC's ISO 28000 LA outline has thirteen modules:
- Fundamentals of ISO 28000 and Supply Chain Security: what a security management system is and how the standard follows Plan-Do-Check-Act.
- Supply Chain Risk and Threat Landscape: theft, tampering, fraud and smuggling, and physical, cyber and organizational risks.
- ISO 28000 Requirements and Interpretation: a clause-by-clause reading, including context, leadership, and security policy and objectives.
- Risk Assessment and Security Planning: threats, vulnerabilities, likelihood and consequence, choosing controls, and testing risk treatment.
- Supply Chain Security Governance: roles and accountability, security culture, and auditing governance.
- Process-Based Security Auditing: following security processes across functions instead of relying on checklists alone.
- Audit Planning and Preparation: scope, objectives and criteria, the audit plan and checklists, and resources.
- Conducting ISO 28000 Audits: the opening meeting, interviewing security, logistics and operations staff, and collecting evidence.
- Physical Security and Asset Protection: protecting sites, cargo and vehicles, controlling access, and monitoring by surveillance.
- Supplier, Partner, and Third-Party Security: security controls of suppliers and contractors and dependency risks.
- Identifying and Writing Nonconformities: linking findings to evidence, grading nonconformities and judging their impact.
- Audit Reporting and Professional Conduct: clear reports, presenting findings to management, and confidentiality.
- Audit Program Management and Continual Improvement: managing security audit programs and using results to build resilience.
We help you link each requirement to the evidence an auditor would look for, so you are ready for the scenario questions.
Course Benefits
- Evidence-based audit skills: Learn to judge whether security controls match the assessed risks, based on objective evidence.
- Exam readiness: Understand the exam format (80 questions in 120 minutes, 70% to pass) and practise choosing the right auditor action.
- A credential you can show: On passing, GIPMC awards a certificate for your CV and professional profiles.
Post-Course Accomplishments
After completing your ISO 28000 LA preparation and passing the exam, you will be able to:
- Explain the standard: Describe the requirements of ISO 28000 and how they apply to supply chain security.
- Assess security risk: Review how an organization identifies threats and vulnerabilities and chooses controls.
- Plan and run an audit: Set scope and criteria, prepare the plan, interview staff and gather objective evidence.
- Report findings: Grade nonconformities and report them clearly and confidentially to management.
Exam at a glance
| Item | Details |
|---|---|
| Awarding body | Global Institute of Professional Management Certification (GIPMC) |
| Credential | ISO 28000 Lead Auditor Certification (ISO 28000 LA) |
| Format | Objective multiple-choice questions (MCQs) with scenario-based questions |
| Number of questions | 80 |
| Duration | 120 minutes |
| Passing score | 70% |
| Delivery | Online proctored |
| Fee (USD) | Certificate: 379 USD (listed price; regular 500 USD). Optional study material: 149 USD (listed price; regular 249 USD). |
| Prerequisites | Not listed on GIPMC's credential page. Ask our team before you enroll. |
| Validity and renewal | GIPMC describes renewal but does not state a period. It says renewal usually involves professional development, validation of audit experience or a knowledge refresh. |
| Retakes | Not stated on GIPMC's credential page. |
Fees are in USD, were checked in October 2026 and can change.
Exam details checked in October 2026. Always confirm on GIPMC's official credential page before booking.
Why Choose BlueMorpho for ISO 28000 LA Certification
- Clear guidance: We explain the exam format, online proctoring and GIPMC's certificate and optional study material, so you know what to buy and what to expect.
- Preparation planned around GIPMC's modules: We help you plan your study around GIPMC's 13 ISO 28000 LA modules and the published exam pattern.
- Enrollment support: We guide you through enrollment and answer your questions along the way.
Conclusion
ISO 28000 LA suits auditors, security professionals and supply chain managers who want to evaluate supply chain security against ISO 28000. To build and demonstrate that skill, send us an enquiry to get started.
