ISO 28000 Certification in Angola
Last reviewed: November 2026
ISO 28000 certification in Angola is gaining weight as cargo volumes, port investment and transit trade grow. Luanda, Lobito, Soyo and Cabinda handle imports, oil and gas logistics and, increasingly, minerals moving to the Atlantic, and every handover point is a risk of theft, tampering, delay or infiltration. Shippers and insurers want proof that security is managed, not assumed.
Nathan ISO Consulting implements ISO 28000:2022 security and resilience management systems for Angolan ports, terminals, forwarders, hauliers, warehouses and service companies. We combine remote development with on-site risk assessment and audit attendance across Luanda, Soyo, Cabinda, Lobito and Benguela.
Quick answer: ISO 28000:2022 is the international standard for security and resilience management in the supply chain. In Angola, a single-site operator can usually be certified in four to eight months, with certification body fees of roughly US$4,000 to US$9,500 over three years, before consulting.
Looking for ISO 28000 Certification in Angola?
ISO 28000 at a Glance for Angolan Businesses
| Item | Typical position in Angola |
|---|---|
| Current edition | ISO 28000:2022 |
| Certificate validity | Three years, with annual surveillance audits |
| Typical timeline | 4 to 8 months for a single-site operator |
| Indicative certification body fees | US$4,000 to US$9,500 (small), quoted individually for larger organisations |
| Legal requirement | Voluntary; complements port security codes and customs requirements |
| Best fit | Ports, terminals, forwarders, hauliers, warehouses, oil and gas logistics |
What Is ISO 28000?
ISO 28000:2022 specifies requirements for a security management system, including aspects relevant to supply chain security and resilience. It helps organisations identify security threats, assess risks, implement controls and monitor performance across activities such as storage, transport, handling and information flow.
The 2022 edition adopted the Annex SL structure and replaced the 2007 edition, so it now integrates directly with ISO 9001, ISO 14001, ISO 45001 and ISO 27001.
Why ISO 28000 Certification in Angola Matters
Luanda, Lobito, Soyo and Cabinda ports and terminals operate under maritime security regimes and customer expectations that require controlled access, cargo integrity and incident response. ISO 28000 provides a management system that links those operational controls to documented risk assessment and review, which is helpful when shippers or insurers audit.
The Lobito Atlantic Railway links the port of Lobito with the DRC Copperbelt over roughly 1,300 km of Angolan track and a connecting DRC section, with capacity expected to rise significantly as financing is deployed. High-value minerals in transit increase exposure to theft, diversion and tampering, so shippers, forwarders and rail and port operators need defined security controls from loading to vessel.
Offshore supply bases, marine logistics, fuel distribution and equipment imports move through a small number of facilities. Operators expect logistics contractors to control access, manage convoys and protect assets and personnel.
Marine cargo insurers, trade financiers and international buyers increasingly ask for evidence of security management. A certified system supports negotiation on premiums and strengthens bids.
Angola's accreditation institute (IAAC) is still developing, and accredited certification is generally supplied by foreign bodies. Buyers expect a certificate from a certification body accredited within the Global Accreditation Cooperation arrangements, with scope matching your operation.
Which Angolan Organisations Need ISO 28000
The Business Benefits
How to Get ISO 28000 Certified in Angola: Step by Step
| Step | What Happens |
|---|---|
| Step 1: Gap Analysis | We assess current security practice against ISO 28000:2022 and port, customs and customer requirements. |
| Step 2: Scope and Supply Chain Mapping | We define activities, sites and routes in scope, and map the flow of cargo, vehicles, people and information. |
| Step 3: Security Risk Assessment | We assess threats such as theft, tampering, unauthorised access, piracy-related risk, cargo diversion and insider threats, and rate vulnerabilities and consequences. |
| Step 4: Policy, Objectives and Roles | We establish the security policy, measurable objectives and clear responsibilities for management, supervisors and guards. |
| Step 5: Physical and Access Controls | We design controls for perimeters, gates, CCTV, seals, key control, visitor management and driver verification. |
| Step 6: Cargo and Conveyance Integrity | We define sealing, inspection, tracking and handover procedures for containers, trailers, wagons and vessels. |
| Step 7: Personnel and Supplier Security | We set screening, training and contractual security requirements for staff, drivers and subcontractors. |
| Step 8: Incident Response and Resilience | We prepare response plans for theft, tampering, hijack, fire and disruption, and rehearse them. |
| Step 9: Internal Audit and Management Review | We train internal auditors, run a full audit cycle, investigate incidents and facilitate a management review. |
| Step 10: Certification Audit Support and Surveillance | We help select an accredited certification body, attend Stage 1 and Stage 2, close findings and support surveillance audits. |
ISO 28000 Certification Cost in Angola
The bands below are indicative certification body fees for ISO 28000 certification in Angola across the three-year cycle, in US dollars, excluding consulting and local taxes.
Audit time depends on headcount, sites and route complexity. Integrated audits with ISO 9001 and ISO 45001 reduce total audit days.
How Long Does ISO 28000 Certification Take?
Typically four to eight months for a single-site operator with reasonable existing records, and six to ten months for multi-site or network operators. A completed risk assessment, incident drill, internal audit and management review must be evidenced before the certification audit.
Common Implementation Challenges in Angola
Why Choose Nathan ISO Consulting
We build security systems around how cargo and people actually move through your sites and routes. Risk assessments reflect Angolan port, road and rail conditions, controls are proportionate to threat, and records prove that checks are done. ISO 28000 certification in Angola should reduce losses and strengthen bids. Fixed scope and fee, full audit attendance and continuing support, delivered remotely and on site. Nathan ISO Consulting is a consultancy, not a certification body, and does not provide legal advice.
Where We Deliver ISO 28000 in Angola
Related Services
See also: ISO 9001 quality management certification Angola, ISO 45001 occupational health and safety Angola, ISO 22301 business continuity certification Angola, ISO 27001 information security Angola and IEC 62443 industrial cybersecurity Angola.
Request a Free ISO 28000 Scoping Call
For ISO 28000 certification in Angola, tell us your sites, routes and cargo types, and we will confirm the likely scope, timeline and certification body options within one working day.
Ready to start your ISO 28000 certification journey?
Sources and References
Frequently Asked Questions
No. ISO 28000 is voluntary. Port security codes, customs rules and customer requirements still apply independently, but a certified system helps document how those obligations are managed and wins business from shippers, operators and insurers that ask for security evidence.
Certification body fees typically fall around US$4,000 to US$9,500 over three years for small single-site operators and US$9,500 to US$20,000 for medium or multi-site ones, before consulting. Headcount, sites and route complexity determine audit time.
Typically four to eight months for a single-site operator and six to ten months for multi-site or network operators. Risk assessment, incident drills, internal audit and management review must be evidenced before the certification audit is scheduled.
The 2022 edition adopted the Annex SL structure, aligned terminology with other ISO management standards and emphasised security and resilience. The older 2007 edition is no longer used for new certification, so projects should be based on the 2022 requirements.
No. The ISPS Code is a maritime security regime applying to ships and port facilities. ISO 28000 is a voluntary management system that can include those obligations, adding risk assessment, monitoring and continual improvement across the wider supply chain.
Yes. Forwarders, hauliers and warehouses certify regularly, and customers often prefer certified partners for high-value cargo. The scope should describe the services and sites accurately, including any subcontracted transport that you control. We confirm specifics during scoping.
It gives rail, port and logistics operators a documented approach to cargo integrity, access control and incident response for high-value transit freight. Shippers and insurers can then see how risks are assessed and controlled along the route.
It can support negotiations. Marine cargo insurers and trade financiers look favourably on documented risk assessment and controls, though premiums depend on loss history, cargo, routes and underwriter policy. Certification is evidence, not a guaranteed discount.
Yes. All follow the Annex SL structure, so one document control system, audit programme and management review can serve several standards. Integrated audits usually reduce total audit days and administration for logistics operators. We can advise.
Through supplier and personnel controls: screening, contractual security obligations, vehicle checks, tracking and incident reporting. Auditors will test whether subcontractors are held to the same standards as employees where they affect cargo security. We confirm specifics once scope is agreed.
Yes. A small operator can implement a compact system proportionate to its fleet and routes. Many smaller companies certify specifically to be accepted by oil and gas and mining customers, and records can be kept simple and practical.
Evidence that threats are assessed, controls are applied and incidents are learned from. Auditors inspect gates, seals, storage and vehicles, review logs and drills, and interview guards, drivers and managers to confirm that practice matches procedures.
Certificates last three years, with annual surveillance audits and a recertification audit at the end of the cycle. Internal audits, drills and management reviews must continue throughout to keep the system credible between external visits.
Largely yes for risk assessment, documentation, training and reviews. Site walk-throughs, gate and cargo checks, and certification audits benefit from physical presence, which we arrange at Angolan ports, depots and terminals when required. We confirm specifics once scope is agreed.
Yes. Procedures, drills and training can be prepared in Portuguese, English or both, depending on staff and customer needs. Practical, visual materials usually work best for guards, drivers and warehouse teams, and we tailor them accordingly.
Nathan ISO Consulting is headquartered in Dubai and does not maintain an Angolan office. We deliver through remote engagement and scheduled on-site visits. Workshops and documentation run online, while verification, internal audits and certification audits are attended in person.
0
Projects
0
Services
0
Clients Serving
0
Countries Serving