Contract eligibility
Recognised by governments, extractive companies and humanitarian clients.
Certification support
ISO 18788 Security Operations Management
Current edition: ISO 18788:2015
The management system standard for organisations that provide or contract private security services. It combines operational risk management with respect for human rights and the law, in line with international frameworks for private security.
What the standard covers
What ISO 18788 controls
ISO 18788 manages the risks of security operations to the organisation, its clients and the communities where it works.
Human rights
Respect for human rights built into policy, risk assessment and operations.
Legal compliance
Applicable national and international law identified and followed.
Use of force
Rules on the use of force, weapons and escalation.
Personnel
Vetting, selection, training and competence of security personnel.
Risk assessment
Security operations risks assessed, including to local communities.
Subcontractors
Control of subcontracted security services.
Incident management
Reporting, investigation and grievance mechanisms.
Community relations
Engagement with communities affected by operations.
Why organisations implement it
What ISO 18788 delivers
Human rights assurance
Evidence that operations respect people and the law.
Controlled risk
Operational and reputational risks assessed and treated.
Competent personnel
Vetted, trained and supervised security staff.
Clear accountability
Incidents reported, investigated and resolved.
Integrates with security
Works alongside ISO 28000 and ISO 45001.
How we work
Path to certification
One AEC methodology from first assessment to certificate, delivered by registered lead auditors.
- AssessGap assessment against ISO 18788, scope and roadmap
- DesignProcesses, risk register, policy and documented information
- ImplementProcesses embedded with coaching for process owners
- TrainAwareness for all staff and internal auditor development
- VerifyInternal audit, management review and mock certification audit
- Certify & sustainStage 1 and Stage 2 support, then surveillance readiness
Full implementation
No existing system. We design and implement from the ground up.
Typically 6 to 9 monthsGap remediation
Some documentation in place. We close the gaps and prove effectiveness.
Typically 5 to 7 monthsUpgrade & integration
Integration with ISO 9001, ISO 28000 or ISO 45001.
Typically 3 to 5 months
Who certifies
Independent certification, chosen to fit your market
Your ISO 18788 certificate is issued by an independent certification body accredited by UKAS, DAkkS or an equivalent national accreditation body. AEC prepares you for that audit; the certification decision is theirs.
CB-neutral
We are not tied to one certification body and help you select one your stakeholders recognise.
Audit-ready
Mock certification audit and closed corrective actions before Stage 1 and Stage 2.
No guarantees
We prepare you thoroughly and never promise an outcome only an independent auditor can decide.
Where it applies
ISO 18788 by industry
Oil & gas · site and pipeline security
Shipping & ports · maritime and port security
Government · government security contracts
Construction · project site security
Related standards
Questions
ISO 18788 FAQ
Does AEC issue the ISO 18788 certificate?
No. Certificates are issued by independent certification bodies accredited by a national accreditation body. AEC prepares your organisation for that audit.
Is ISO 18788 only for armed security providers?
No. It applies to armed and unarmed security operations, and to organisations that contract security services.
How does it relate to the International Code of Conduct?
ISO 18788 supports the principles of the Montreux Document and the International Code of Conduct for Private Security Service Providers by turning them into management system requirements.
Can it be combined with ISO 28000?
Yes. ISO 28000 manages security risk across operations and supply chains; ISO 18788 manages the security operations themselves.
Start your ISO 18788 programme
Tell us your services, locations and clients. We reply with a proposal covering gap assessment, implementation and certification support.
Certification decisions are made by independent, accredited certification bodies. AEC prepares organisations for certification and does not guarantee certification outcomes.