General Principles of Incident Management
In security operations, incidents are inevitable. From minor breaches such as access violations to major crises like violent protests, cyber intrusion...
Linking Incident Management to Tactical and Strategic Risks and Objectives
In the previous article, we emphasized that incident management is more than an operational task. While frontline security staff detect, respond to, a...
Creating and Updating Documents in the SOMS
A Security Operations Management System (SOMS) lives and breathes through its documented information. Clause 7.5 of ISO 18788:2015 requires organizati...
Control of Documented Information
Clause 7.5.3 of ISO 18788:2015 sets out requirements for the control of documented information within a Security Operations Management System (SOMS). ...
Continual Improvement under ISO 18788
ISO 18788 is designed as a risk-based, performance-driven management system. Its success depends not on one-time compliance, but on the organization's...
Continuous Improvement Strategy for the Security Environment
Continuous improvement in security operations is not a once-off project but a 3-5 year journey of structured transformation. ISO 18788 requires organi...
Complaint and Grievance Procedure Communications
ISO 18788:2015 emphasizes that effective communication channels must exist for complaints and grievances. In security operations, where staff, contrac...
Establishing Norms of Behaviour and Codes of Ethical Conduct
Security companies operate in high-risk environments where staff interact daily with clients, communities, and sometimes hostile actors. These interac...
Business Impact Analysis (BIA): The Cornerstone of Business Continuity and Preve...
In today's volatile security and business environment, organizations face threats that can suddenly disrupt operations—ranging from civil unres...
Prevention and Management of Undesirable or Disruptive Events
Security operations are often exposed to disruptive events—ranging from sudden attacks, public disorder, equipment failures, cyber incidents, c...
Apprehension and Search in Security Operations under ISO 18788
Apprehension and search activities are high-risk security functions that must be governed by clear policies and procedures. Misconduct in these areas ...
Connecting Apprehension and Search with the Use of Force Continuum, Human Rights...
Apprehension and search are among the most sensitive activities in security operations. They involve direct physical interaction with individuals, whi...