PECB ISO 18788 Foundation flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Security Operations Management System

A management system that establishes policy, objectives, processes and controls for the security operations an organization performs or commissions, integrating risk management, legal compliance and human rights due diligence.

ISO 18788

The international standard specifying requirements for a Security Operations Management System, applicable to organizations providing security services and to those contracting them, using the ISO High-Level Structure.

Plan-Do-Check-Act

The continual improvement cycle underlying the SOMS: establish objectives and processes, implement them, monitor and measure against policy and objectives, then act to improve performance.

Annex SL structure

The common clause framework for ISO management system standards, comprising context, leadership, planning, support, operation, performance evaluation and improvement, which ISO 18788 follows.

Risk-based approach

The principle that security controls are selected and prioritized according to assessed risk to the organization, people and interested parties, rather than applied uniformly from a fixed checklist.

Context of the organization

The internal and external issues, interested parties and their requirements, and the scope of security operations that determine how the SOMS is designed and applied.

Interested parties

Persons or organizations that can affect, be affected by, or perceive themselves affected by the organization's security operations, including clients, personnel, communities and regulators.

Human rights due diligence

An ongoing process to identify, prevent, mitigate and account for how the organization addresses adverse human rights impacts linked to its security operations, aligned with the UN Guiding Principles.

Voluntary Principles

A multi-stakeholder initiative giving guidance on security and human rights, particularly for extractive and energy operations, covering risk assessment, engagement with public security and incident reporting.

Use of force principles

The rule that force is used only when lawful, only when necessary to achieve a legitimate objective, and only to the extent proportionate to the threat faced.

Top management commitment

Demonstrated leadership through establishing policy, ensuring resources, integrating the SOMS into business processes, communicating importance and promoting continual improvement.

Scope of the SOMS

The documented boundaries and applicability of the management system, determined by external and internal issues, compliance obligations and the security operations covered.

Documented information

Information the organization must control and maintain, including procedures, records and evidence of conformity, managed for availability, protection, retention and disposition.

Security risk assessment

A systematic process to identify threats, vulnerabilities and consequences, evaluate likelihood and impact, and determine treatment priorities for security operations.

Human rights risk assessment

Identification and evaluation of potential adverse human rights impacts arising from security operations, including interactions with public security forces and community exposure.

Legal and other requirements

Laws, regulations, permits, contractual obligations and voluntary commitments applicable to security operations that the organization must identify, access and comply with.

Security objectives

Measurable goals set at relevant functions and levels, consistent with policy, covering security performance and human rights, with plans specifying what, resources, who, when and how evaluated.

Operational planning and control

Establishing criteria for security processes, implementing control according to those criteria, and controlling planned changes and outsourced processes to achieve intended outcomes.

Management of change

A process to review and control changes such as new sites, contracts, equipment or threats, assessing consequences for the SOMS before implementation.

Outsourcing control

Requirements applied to externally provided security processes, ensuring contractors meet the same competence, conduct, human rights and performance standards as the organization.

Competence

The combination of education, training and experience needed by persons performing security work, verified for effectiveness and supported by retained evidence.

Awareness

Ensuring personnel and contractors understand the security policy, their contribution to SOMS effectiveness, and the implications of not conforming with requirements.

Incident management

The structured process of reporting, recording, classifying, investigating and responding to security incidents, followed by root cause analysis and corrective action.

Emergency preparedness

Planned arrangements and periodic testing of response to identified potential emergencies, reviewed and revised after tests, drills or actual events.

Monitoring and measurement

Determining what to monitor, methods used, when monitoring occurs and who evaluates results, using both leading and lagging indicators of security performance.

Internal audit

A planned, independent and objective examination of SOMS conformity and effectiveness, conducted at defined intervals by auditors who do not audit their own work.

Management review

Top management's periodic evaluation of SOMS suitability, adequacy and effectiveness, using defined inputs and producing decisions on improvement, resources and changes.

Nonconformity

Failure to meet a requirement of the standard or the organization's own SOMS requirements, which must be controlled, corrected and analyzed for cause.

Corrective action

Action taken to eliminate the cause of a nonconformity or incident so it does not recur, including review of effectiveness and update of risks where needed.

Continual improvement

Ongoing enhancement of SOMS performance, achieved through analysis of data, audit results, incident trends, corrective actions and management review decisions.

Leading indicator

A proactive performance measure predicting future security outcomes, such as training completion, drill frequency, near-miss reporting or audit findings closed on time.

Lagging indicator

A retrospective performance measure recording outcomes that have already occurred, such as incident counts, complaints received or use-of-force events.