Policy
BASC Information Security Policy
This policy establishes the framework for managing and protecting the organization's information assets and supporting infrastructure in alignment with the applicable Business Alliance for Secure Commerce (BASC) International Security Standard (6.0.2 or 6.0.3, per the organization's role in the cargo chain). It ensures that the confidentiality, integrity, and availability of data are maintained across all BASC-certified operations.
- Type
- Policy
- Version
- 1.2.14
- Date
- 2026-11-06
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Compliance: Logistics Sector
- Review frequency
- Annual and upon material BASC framework or infrastructure change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Roles and responsibilities
- 5. BASC information security requirements
- 6. Information security controls
- 7. Exception process
- 8. Information security audit checklist
- 9. Framework alignment
Frameworks it maps to
- BASC International Security Standard 6.0.2/6.0.3 (2022)
- ISO/IEC 27001:2022
- NIST SP 800-53 r5
- CSA CCM v4.1
- WCO SAFE Framework (2025 edition)
Related documents
- compliance/
logistics/ sourceREADME.md (opens in a new tab) - BASC Programme Overview Annexcompliance
- Information Security Policysecurity
- BASC IT and Information Security Responsibilitiescompliance
- BASC IT Compliance Monitoring and KPIscompliance
- Compliance, Audit, and CAPA Management Policycompliance
- Exception and Risk Acceptance Management Policygovernance
Next
All Documents