Introduction

In a Security Operations Management System (SOMS), the performance of security-related functions is the point where strategy, planning, and resources meet reality. Clause 8 requires that all security-related functions—whether directly protecting assets and people, or indirectly supporting frontline services—are performed effectively, ethically, lawfully, and consistently.

Annex A.8.1.2.1 and A.8.1.2.2 provide guidance on how security companies must control and monitor both primary (frontline) functions and supporting functions, ensuring that risks are managed and objectives achieved.

Performance of Security-Related Functions

Core Security Functions

These are the frontline activities directly related to protecting people, assets, and operations. They include:

• Guarding and patrols.
• Access and perimeter control.
• Crowd management and event security.
• Surveillance and monitoring (CCTV, drones, alarms).
• Response to incidents and emergencies.
• Escorting and secure transportation of people or assets.
• Investigations and evidence handling.

Key Requirements

1. Competence and Training
• Security staff must be trained, licensed, and competent for their functions.
• Skills must be assessed continuously (Clause 7.2), with refresher training to close gaps.
2. Rules of Engagement
• Functions must respect laws, human rights, and proportional use of force.
• Employees must be aware of escalation procedures and grievance mechanisms.
3. Standardization and SOPs
• All functions must follow approved Standard Operating Procedures (SOPs).
• SOPs must be reviewed regularly and updated in line with risk assessments.
4. Monitoring and Supervision
• Supervisors must monitor frontline performance (site inspections, checklists, audits).
• Evidence of performance must be documented (patrol logs, incident reports, CCTV footage).
5. Performance Measurement
• Use KPIs such as:
• Patrol compliance rate.
• Incident response times.
• Accuracy of access control checks.
• Reduction in security breaches.
• Evaluate controls using the Internal Control Effectiveness (ICE) model to confirm reliability.

Performance of Supporting Functions

Supporting Functions

These are the indirect activities that enable security services to operate smoothly and sustainably. Examples include:

• HR and Administration - Recruitment, vetting, payroll, workforce scheduling.
• Logistics and Fleet Management - Maintenance of vehicles, motorcycles, bicycles, and equipment.
• Technology and Systems Support - Command-and-control platforms, radios, mobile apps, satellite phones, CCTV networks.
• Procurement and Supply Chain - Acquisition of uniforms, PPE, tools, weapons (where lawful).
• Finance and Budgeting - Allocation of funds to operational needs.
• Training and Development - Skills development aligned with ISO 10015 and the Skills Development Act.
• Compliance and Legal - Oversight of contracts, regulations, licensing, and human rights frameworks.

Key Requirements

1. Alignment with Operations
• Supporting functions must directly enable frontline staff to perform.
• Example: Fleet management ensures vehicles are serviced and available for patrols.
2. Efficiency and Cost Control
• Supporting functions must be evaluated for cost-effectiveness (CAPEX/OPEX analysis).
• Example: Procurement decisions on new radios or CCTV must balance cost with operational effectiveness.
3. Documentation and Records
• Supporting functions must maintain records for audit: HR files, procurement logs, budget allocations, training registers.
• Documentation must be controlled under Clause 7.5.3.
4. Performance Indicators
• HR: recruitment lead time, staff turnover, training hours per employee.
• Fleet: vehicle availability rate, response mileage.
• Technology: system uptime, radio coverage.
• Finance: variance between operational budget and actual spend.

Integration of Security and Supporting Functions

The strength of the SOMS lies in linking security functions and support functions through:

• Risk Registers: Both frontline risks (e.g., armed robbery) and support risks (e.g., fuel shortage, payroll delay) must be recorded and treated.
• Performance Management System (PMS): Quarterly reviews assess competence and resource alignment.
• Combined Assurance: Both security and support activities must be auditable, with evidence ranked using the Audit Evidence Reliability Model (AERM).
• Golden Thread: Each function, whether guarding a gate or maintaining a vehicle fleet, must link to the organization's strategic, tactical, and operational objectives.

Audit Evidence for Performance of Functions

Auditors will seek:

• Security Functions: Patrol logs, access control records, CCTV evidence, incident reports, KPI dashboards.
• Supporting Functions: HR recruitment logs, training records, procurement registers, vehicle service logs, technology uptime reports.
• Evaluation Reports: Evidence of monitoring, corrective actions, and continual improvement.

Evidence must comply with the Archiving Act, ensuring retention, traceability, and secure storage.

Conclusion

The performance of security-related functions (A.8.1.2.1) and supporting functions (A.8.1.2.2) ensures that security operations are not only executed on the ground but also sustained by strong internal structures.

Frontline functions protect, deter, and respond, while supporting functions provide the resources, systems, and governance to keep them running. Both must be competent, documented, measured, and auditable, with a clear link to risk treatment and organizational objectives.

By embedding performance monitoring, competence evaluation, and documented evidence, organizations demonstrate that their SOMS under ISO 18788 is effective, ethical, and credible.