🛠 Standard Overview

ISO 18788 – Security Operations Management Systems (SOMS)

An international management system standard for private security operations delivering risk-based, accountable, and legally compliant security services.

Published: 2015
Type: Management System Standard
Status: Certifiable
Adoption: 50+ countries

Key Characteristics

Structured framework for private security organizations to manage risk, ensure accountability, and demonstrate respect for human rights.

Risk Management Human Rights Legal Compliance Governance

What is ISO 18788?

ISO 18788 specifies requirements for establishing, implementing, operating, monitoring, reviewing, maintaining, and improving a Security Operations Management System (SOMS).

The standard was first published in 2015 by the International Organization for Standardization (ISO). It was developed to formalize best practices for private security companies operating in complex and high-risk environments, particularly where regulatory oversight may be limited or inconsistent.

🎯 Risk Management

Systematic approach to managing security risks in operations across complex environments.

⚖️ Legal Compliance

Framework for compliance across multiple jurisdictions and legal frameworks.

🤝 Human Rights

Demonstrates respect for human rights and international humanitarian law.

📋 Governance

Transparent governance structures and accountability mechanisms.

🔍 Incident Prevention

Proactive controls for incident prevention and corrective action processes.

✓ Third-Party Certification

Independent verification through accredited certification bodies.

Who Should Use ISO 18788?

Designed for organizations providing security operations in high-risk and complex environments.

Target Organizations

  • Private security companies (PSCs)
  • Security contractors in defense or conflict zones
  • Maritime security providers
  • Infrastructure protection firms
  • Security operations supporting oil & gas, mining, and energy sectors
  • Government contractors delivering protective services

Key Roles That Benefit

  • Security operations directors
  • Compliance and risk officers
  • Contract managers
  • Corporate governance leaders
  • Human rights and legal advisors
  • Quality and management system professionals

Key Requirements & Clauses

ISO 18788 follows the Annex SL high-level structure common to modern ISO management system standards.

1. Context of the Organization

  • Identify internal and external issues
  • Understand stakeholder expectations
  • Define SOMS scope

2. Leadership

  • Top management accountability
  • Policy development
  • Assignment of roles and responsibilities

3. Planning

  • Risk assessment and treatment
  • Legal and human rights compliance planning
  • Objectives and performance metrics

4. Support

  • Competence and training
  • Documented information control
  • Communication processes

5. Operation

  • Operational controls
  • Use of force management
  • Incident management procedures
  • Supply chain oversight

6. Performance Evaluation

  • Monitoring and measurement
  • Internal audits
  • Management review

7. Improvement

  • Corrective actions
  • Continual improvement processes

What Does Compliance Require?

Organizations seeking ISO 18788 certification must:

  • Establish a documented Security Operations Management System
  • Conduct structured security and human rights risk assessments
  • Implement operational controls and incident reporting systems
  • Demonstrate compliance with applicable laws and contractual obligations
  • Train personnel in security governance and responsible conduct
  • Undergo independent third-party certification audits

Note: Certification is performed by accredited certification bodies.

Benefits of ISO 18788

🏆 Enhanced Credibility

Gain recognition in government and defense-sector procurement processes with internationally recognized certification.

🎯 Structured Risk Management

Implement systematic risk management in high-threat environments with clear protocols and controls.

⚖️ Legal & Human Rights Compliance

Demonstrate respect for human rights and compliance with international humanitarian law.

🛡️ Reduced Liability

Minimize operational incidents and liability exposure through proactive risk management and incident prevention.

📈 Competitive Advantage

Stand out in international contracting and tender processes with third-party verified security management.

🌎 Best Practice Alignment

Align with global best practices for responsible security operations and industry standards.

Common Challenges

Multi-Jurisdiction Legal Compliance

Navigating complex legal requirements across different countries and jurisdictions, especially in conflict zones with limited regulatory oversight.

Human Rights Integration

Integrating human rights considerations into operational controls and use-of-force protocols while maintaining security effectiveness.

Cultural Change

Driving cultural change in field-based security teams accustomed to less formal operating procedures and documentation requirements.

Audit Readiness in Remote Regions

Maintaining documentation and audit readiness in remote or high-risk regions with limited infrastructure and communication capabilities.

Related Standards

ISO 18788 is often implemented alongside other management system standards within a unified management system framework.

ISO 9001

Quality Management Systems
Establish consistent quality in security service delivery and operational processes.

Learn more →

ISO 14001

Environmental Management
Manage environmental impacts of security operations, particularly relevant for infrastructure and resource sector operations.

Learn more →

ISO 45001

Occupational Health & Safety
Protect personnel safety in high-risk security operations and conflict environments.

Learn more →

ISO 31000

Risk Management (guidance)
Enhance risk management capabilities with structured principles and frameworks applicable to security contexts.

Learn more →

ISO 22301

Business Continuity Management
Ensure continuity of critical security operations during disruptions and crisis situations.

Learn more →

Ready to get ISO 18788 certified?

Explore our ISO 18788 certification services including implementation support, gap analysis, internal audit preparation, and third-party certification assistance.

View Certification Services Get a Quote