Introduction

A Security Operations Management System (SOMS) cannot exist in policy alone—it requires resources to bring strategic intent into operational reality. Clause 7 of ISO 18788:2015 emphasizes that organizations must identify, allocate, and document the resources necessary to achieve their strategic, tactical, and operational objectives.

Resources are the fuel that drives implementation. Without them, even the best policies, risk assessments, and objectives remain aspirational. More importantly, the proper recording and documentation of resources is a compliance and audit requirement, ensuring transparency and accountability to clients, regulators, auditors, and stakeholders.

Linking Resources to Objectives

1. Strategic Objectives (Top-Level)
• Long-term goals (e.g., international certification, brand trust, market expansion).
• Require board-approved budgets, facilities, and major capital investments to ensure credibility and sustainability.
2. Tactical Objectives (Divisional / Departmental)
• Translate strategic goals into departmental priorities (e.g., provincial deployment readiness, training roll-outs, technology upgrades).
• Require allocated funds, human resources, and support systems for execution.
3. Operational Objectives (Frontline)
• Daily actions (e.g., guard deployments, patrols, incident reporting, equipment use).
• Require practical tools and resources (uniforms, vehicles, communication devices, SOP manuals).

The “golden thread” ensures that resources flow from the top-level strategy down to day-to-day execution, providing traceability and alignment.

The Security Resources Environment

1. Budget and Finance

• Central to achieving all objectives.
• Includes CAPEX (capital expenditures like vehicles, CCTV, biometric systems) and OPEX (recurring costs like salaries, fuel, training, system licenses).
• Must be allocated transparently and monitored for audit purposes.

2. Facilities and Infrastructure

• Headquarters, regional offices, guard houses, training academies, command centres.
• Must be safe, accessible, and equipped to support operations.

3. Human Resources

• Security officers, supervisors, managers, SOMS Champions, compliance officers.
• HR practices include recruitment, vetting, training, performance management, and wellbeing.

4. Vehicles and Mobility Assets

• Cars, 4x4s, motorbikes, bicycles, armoured vehicles where necessary.
• Enable rapid response, patrol coverage, and tactical presence.
• Require lifecycle management, maintenance, and insurance.

5. Equipment and Tools

• Radios, body-worn cameras, PPE, firearms (where lawful), batons, handcuffs.
• Must comply with legal and human rights requirements.

6. Technology and Systems

• Surveillance (CCTV, drones, AI analytics).
• Control rooms and command & control software.
• Risk registers, incident reporting systems, and audit platforms.
• Integrated GRC solutions (like ISOLTX) for combined assurance.

7. Training and Competence Development

• Training funds for initial and refresher training.
• Competency-based programs (human rights, use of force, rules of engagement, crisis management).
• Certification in ISO standards for managers and compliance staff.

8. Stakeholder and Community Resources

• Engagement forums, grievance mechanisms, and outreach programs.
• Build trust and legitimacy within operating environments.

Documentation and Audit Requirements

Clause 7 requires that resources be documented, managed, and auditable. This ensures assurance and transparency:

• Resource Registers - Comprehensive list of available resources (budget allocations, assets, personnel, technology).
• Allocation Records - Document which objectives each resource supports.
• Maintenance and Calibration Logs - For vehicles, equipment, and systems.
• Training Records - Documenting qualifications, attendance, and refresher training.
• Budget Control Reports - Tracking CAPEX and OPEX allocations.
• Audit Trails - Evidence that resources are sufficient and effectively deployed.

During internal or external audits, resource records must demonstrate that:

1. Resources exist.
2. They are allocated appropriately.
3. They are sustainable.
4. They are aligned to strategic, tactical, and operational objectives.

Why Resource Documentation Matters

• Compliance - Demonstrates alignment with ISO 18788 Clause 7 requirements.
• Transparency - Builds client confidence that resources are not overstated.
• Accountability - Allows traceability of how budgets and assets are used.
• Performance Measurement - Links resource allocation to outcomes and KPIs.
• Continual Improvement - Identifies gaps, inefficiencies, or resource misallocations.

Conclusion

Clause 7 of ISO 18788 ensures that organizations recognize resources as the foundation of operational capability. Strategic objectives require budgets and infrastructure, tactical objectives depend on people, systems, and vehicles, and operational objectives rely on equipment, training, and procedures.

By creating and maintaining resource registers, budgets, and documentation, organizations provide assurance that their SOMS is real, auditable, and sustainable. In a sector where credibility and trust are paramount, resources are not just enablers—they are evidence of capability.