Internal and External Complaint and Grievance Procedures under ISO 18788
A robust security operation is not measured only by how it prevents and responds to incidents but also by how it listens and responds to grievances. C...
Internal Audit under ISO 18788
An internal audit is not merely a compliance exercise — it is a systematic, independent, and documented process that evaluates whether the SOMS...
Audit Evidence for ISO 18788 Internal Audit Compliance
Audit Planning Evidence, 3-Year Rolling Audit Plan, Annual Audit Plan, Quarterly Audit Schedule, Monthly Audit Plan, Weekly Audit/Inspection Checklist...
Incident Monitoring, Reporting, and Investigations under ISO 18788
Incident management is only effective if there is a structured approach to monitoring, reporting, and investigating incidents. Clause 8.8.2 of ISO 187...
General Principles of Incident Management
In security operations, incidents are inevitable. From minor breaches such as access violations to major crises like violent protests, cyber intrusion...
Linking Incident Management to Tactical and Strategic Risks and Objectives
In the previous article, we emphasized that incident management is more than an operational task. While frontline security staff detect, respond to, a...
Creating and Updating Documents in the SOMS
A Security Operations Management System (SOMS) lives and breathes through its documented information. Clause 7.5 of ISO 18788:2015 requires organizati...
Control of Documented Information
Clause 7.5.3 of ISO 18788:2015 sets out requirements for the control of documented information within a Security Operations Management System (SOMS). ...
Continual Improvement under ISO 18788
ISO 18788 is designed as a risk-based, performance-driven management system. Its success depends not on one-time compliance, but on the organization's...
Continuous Improvement Strategy for the Security Environment
Continuous improvement in security operations is not a once-off project but a 3-5 year journey of structured transformation. ISO 18788 requires organi...
Complaint and Grievance Procedure Communications
ISO 18788:2015 emphasizes that effective communication channels must exist for complaints and grievances. In security operations, where staff, contrac...
Establishing Norms of Behaviour and Codes of Ethical Conduct
Security companies operate in high-risk environments where staff interact daily with clients, communities, and sometimes hostile actors. These interac...