I85PREP
⌘ K
PECB ISO 18788 Foundation study materials
PECB ISO 18788 Foundation study resources

PECB ISO 18788 Foundation practice questions

One question at a time. Build your PECB ISO 18788 Foundation understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Fundamental principles and concepts of a Security Operations Management System (SOMS)

In ISO 18788, what is the primary purpose of a Security Operations Management System (SOMS)?

  1. To replace national licensing requirements for private security companies
  2. To provide a management framework for security operations that protects people and assets while respecting human rights Correct answer.
  3. To standardise the pricing of security services across markets
  4. To certify the professional competence of individual security guards

Explanation

ISO 18788 establishes a management system framework specifically for organisations conducting or contracting security operations. It links operational security performance with respect for human rights and legal compliance. It is a management system standard, not a personnel certification or commercial regulation.

Question 2Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which document type in ISO 18788 expresses the organisation's commitment to respect human rights in security operations and provides the basis for setting security objectives?

  1. The incident log
  2. The human rights policy Correct answer.
  3. The security risk register
  4. The statement of applicability

Explanation

The human rights policy is the top-level commitment document that anchors the SOMS and drives objectives, controls and due diligence. The risk register records identified risks, not commitments. The statement of applicability is an information security concept from ISO/IEC 27001, not an ISO 18788 requirement.

Question 3Fundamental principles and concepts of a Security Operations Management System (SOMS)

Under the Plan-Do-Check-Act cycle, which activity belongs to the 'Check' phase of a SOMS?

  1. Implementing controls to mitigate identified risks
  2. Assigning security roles and responsibilities
  3. Defining the scope of the management system
  4. Monitoring and measuring security performance against criteria Correct answer.

Explanation

The 'Check' phase covers monitoring, measurement, internal audit and management review of performance. Assigning roles, defining scope and implementing controls all occur in the planning or execution phases. Monitoring provides the evidence needed for continual improvement.

Question 4Fundamental principles and concepts of a Security Operations Management System (SOMS)

What does the term 'due diligence' mean in the context of ISO 18788 security operations?

  1. A financial audit of security subcontractors' accounts
  2. An ongoing process to identify, prevent, mitigate and account for how the organisation addresses human rights impacts Correct answer.
  3. A physical inspection of guarding posts carried out by supervisors
  4. A one-time legal review performed before signing a client contract

Explanation

Human rights due diligence is a continuous process of assessing actual and potential impacts, integrating findings, tracking responses and communicating how impacts are addressed. It is not limited to a single event or to financial matters. Supervisory inspections are one operational control, not the due diligence process itself.

Question 5Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following best describes the relationship between ISO 18788 and the Montreux Document?

  1. The two documents are identical in content and differ only in language
  2. ISO 18788 is the certifiable management system standard that operationalises principles associated with the Montreux Document Correct answer.
  3. ISO 18788 applies only to states, while the Montreux Document applies only to companies
  4. The Montreux Document supersedes ISO 18788 for all private security companies

Explanation

The Montreux Document sets out good practices and legal obligations for states and private security companies, while ISO 18788 provides a certifiable management system framework aligned with those principles. They are complementary instruments addressing different levels of obligation. Neither supersedes the other, and both address companies as well as states.

Question 6Fundamental principles and concepts of a Security Operations Management System (SOMS)

An organisation's SOMS scope statement excludes its maritime guarding operations. What is the most significant consequence of this exclusion?

  1. The exclusion is permitted only if the excluded activity generates less than 10 percent of revenue
  2. The organisation is automatically non-compliant with all ISO 18788 requirements
  3. The excluded operations cannot be certified but remain subject to legal obligations and stakeholder expectations Correct answer.
  4. The certification body must audit the excluded operations anyway

Explanation

Scope determines which operations are covered by the certified management system, but excluding an activity does not remove legal or human rights obligations attached to it. Stakeholders may still expect responsible conduct in excluded areas. Revenue thresholds and automatic non-compliance are not concepts in the standard.

Question 7Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security company identifies that its client's mining site sits on land subject to a community land dispute. Which SOMS concept most directly requires the company to assess how its services may affect the rights of that community?

  1. Supplier scorecarding
  2. Human rights impact assessment Correct answer.
  3. Configuration management
  4. Business continuity planning

Explanation

A human rights impact assessment examines how security operations may affect the rights of affected stakeholders such as local communities. It feeds the risk assessment and control selection required by the SOMS. Configuration management, continuity planning and supplier scorecards address different concerns.

Question 8Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which statement correctly distinguishes a security risk from a security incident within a SOMS?

  1. A risk is an event that has already occurred, while an incident is a future possibility
  2. A risk applies only to physical assets, while an incident applies only to information
  3. A risk is the effect of uncertainty on objectives, while an incident is an event that has actually disrupted or could disrupt operations Correct answer.
  4. A risk is recorded after an event, while an incident is predicted before it occurs

Explanation

Risk concerns the effect of uncertainty on objectives and is assessed prospectively, whereas an incident is an actual or near-miss event requiring response and reporting. The two are linked because incidents inform future risk assessment. The other options invert or misapply these definitions.

Question 9Fundamental principles and concepts of a Security Operations Management System (SOMS)

What is the main role of 'interested parties' analysis in establishing a SOMS?

  1. To determine which stakeholders' needs and expectations the organisation must consider in its security operations Correct answer.
  2. To calculate the market value of the security company
  3. To identify which employees should be dismissed for poor performance
  4. To select the cheapest supplier of security equipment

Explanation

Interested parties analysis identifies stakeholders such as clients, communities, employees and regulators whose needs and expectations shape the management system. It supports the determination of scope and obligations. It is unrelated to dismissal decisions, valuation or procurement price selection.

Question 10Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following is an example of a preventive control in a SOMS rather than a corrective one?

  1. Issuing a corrective action report following an audit finding
  2. Screening and vetting personnel before deployment Correct answer.
  3. Investigating the root cause of a use-of-force complaint
  4. Updating the risk register after a robbery

Explanation

Preventive controls are designed to stop undesired events before they occur; personnel screening and vetting reduces the likelihood of misconduct or infiltration. Root cause investigation, corrective action reports and risk register updates following events are corrective or reactive activities.

Question 11Fundamental principles and concepts of a Security Operations Management System (SOMS)

In ISO 18788 terminology, what does 'continual improvement' require of a certified organisation?

  1. Recurring activity to enhance performance of the SOMS over time Correct answer.
  2. Achieving zero security incidents before certification
  3. Adopting every new security technology on the market
  4. Replacing all security staff every three years

Explanation

Continual improvement means recurring, systematic activity that enhances security and human rights performance, informed by monitoring, audit and review. It is not tied to staff turnover, a zero-incident target or technology adoption. Improvement is judged against the organisation's own objectives and criteria.

Question 12Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security manager maps each SOMS process to the person accountable for its output. Which fundamental concept does this practice most directly reflect?

  1. Assignment of roles, responsibilities and authorities Correct answer.
  2. Risk transfer to insurers
  3. Benchmarking against competitors
  4. Outsourcing of security functions

Explanation

Defining who is accountable for processes and outputs reflects the requirement to assign roles, responsibilities and authorities within the SOMS. Clear accountability supports implementation and monitoring. Outsourcing, insurance and benchmarking are separate concepts.

Question 13Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following best explains why ISO 18788 emphasises respect for human rights in private security operations?

  1. Human rights compliance reduces the cost of insurance premiums
  2. Security personnel are frequently placed in positions where they can affect the rights of individuals and communities Correct answer.
  3. Human rights law applies only to public police forces
  4. Respecting human rights eliminates the need for security risk assessment

Explanation

Private security personnel often operate with authority over individuals and in sensitive environments, so their actions can directly affect human rights. The standard therefore builds human rights considerations into governance and operations. Insurance savings and the claim that human rights law applies only to police are incorrect, and rights compliance does not replace risk assessment.

Question 14Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which pair correctly matches a SOMS element with its typical output?

  1. Incident reporting - a supplier price list
  2. Management review - a record of decisions and actions to improve the system Correct answer.
  3. Internal audit - a marketing plan for security services
  4. Risk assessment - a list of employee salaries

Explanation

Management review produces documented decisions and actions concerning the suitability, adequacy and effectiveness of the SOMS. Risk assessment yields risk findings and treatments, internal audit yields findings on conformity, and incident reporting yields event records. The other pairings are unrelated outputs.

Question 15Fundamental principles and concepts of a Security Operations Management System (SOMS)

A client asks a security provider to remove a community activist from a site without legal grounds. Which SOMS principle should guide the provider's response?

  1. Escalating the request only if a media inquiry occurs
  2. Refusing actions that are unlawful or inconsistent with human rights commitments, even when requested by a client Correct answer.
  3. Complying with the client's instruction because the contract takes precedence
  4. Delegating the decision to the individual guard on duty

Explanation

The human rights policy and legal compliance obligations require the provider to decline requests that would breach law or rights commitments, regardless of client pressure. Contract terms cannot override legal and ethical duties. Escalation only on media attention or pushing the decision to a guard would be irresponsible governance.

Question 16Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which statement about the 'context of the organisation' in a SOMS is accurate?

  1. It covers external and internal issues relevant to the organisation's purpose and security operations Correct answer.
  2. It is limited to the geographic location of the head office
  3. It refers only to the internal organisational chart
  4. It is fixed at certification and never revisited

Explanation

Context of the organisation encompasses both external and internal issues that affect the organisation's ability to achieve intended SOMS outcomes. It includes legal, social, cultural and operational factors and must be kept current. It is broader than an org chart or a single location and is reviewed over time.

Question 17Fundamental principles and concepts of a Security Operations Management System (SOMS)

What is the purpose of a gap analysis when an organisation is first implementing ISO 18788?

  1. To compare current practices against the standard's requirements and identify what must be developed Correct answer.
  2. To determine the number of auditors needed for certification
  3. To calculate the gap between security staff salaries and market averages
  4. To measure the physical distance between guarding posts

Explanation

A gap analysis compares existing arrangements with ISO 18788 requirements to reveal missing processes and priorities for implementation. It is a planning aid, not a payroll, geographic or resourcing calculation. Its output feeds the implementation roadmap.

Question 18Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following best describes the principle of 'proportionality' as applied to the use of force by security personnel?

  1. Applying identical responses to every type of situation
  2. Deferring all use-of-force decisions to the client
  3. Using the maximum available force to deter future incidents
  4. Using no more force than is reasonably necessary in the circumstances Correct answer.

Explanation

Proportionality requires that any use of force be limited to what is reasonably necessary and appropriate to the threat. It rejects both excessive force and rigid uniform responses. Decisions remain the security provider's responsibility, not the client's.

Question 19Fundamental principles and concepts of a Security Operations Management System (SOMS)

An organisation documents that a specific security procedure is performed at each shift handover. Which SOMS concept does this documentation primarily support?

  1. Marketing differentiation
  2. Operational control and consistency of execution Correct answer.
  3. Shareholder dividend policy
  4. Tax compliance

Explanation

Documented procedures support operational control by ensuring activities are performed consistently and can be verified. They provide evidence for monitoring and audit. Marketing, tax and dividend matters are outside the operational control concept.

Question 20Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following is the most appropriate first step when an organisation decides to align its existing security management practices with ISO 18788?

  1. Purchasing new surveillance equipment
  2. Obtaining top management commitment and defining the SOMS scope Correct answer.
  3. Hiring an external marketing agency
  4. Immediately applying for certification without preparation

Explanation

Implementation begins with top management commitment and a defined scope, which provide the mandate and boundaries for the system. Certification should follow implementation, not precede it. Equipment purchases and marketing are not foundational steps.

Question 21Fundamental principles and concepts of a Security Operations Management System (SOMS)

How does ISO 18788 treat the concept of 'legal and other requirements'?

  1. Only international treaties must be considered, not national law
  2. Organisations must identify and have access to applicable legal and other requirements relevant to security operations and human rights Correct answer.
  3. Legal requirements apply only to armed guarding services
  4. Legal requirements are optional if the client does not request them

Explanation

The standard requires organisations to identify applicable legal and other requirements and ensure they are considered in the SOMS. National law, contracts and voluntary commitments can all be relevant. Compliance obligations are not optional, restricted to treaties or limited to armed guarding.

Question 22Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security provider operating in a conflict-affected region must decide how to handle a request to provide armed protection for a facility. Which combination of SOMS considerations is most relevant?

  1. The colour scheme of uniforms and vehicle branding
  2. The number of social media followers of the client
  3. Human rights risk, legal authority to carry arms, rules on use of force and community impact Correct answer.
  4. Only the client's budget and timeline

Explanation

Armed protection decisions require assessment of human rights risks, legal authority, use-of-force rules and impacts on local communities. These considerations reflect the SOMS emphasis on risk-based and rights-respecting operations. Budget, branding and social media metrics are not decision criteria under the standard.

Question 23Fundamental principles and concepts of a Security Operations Management System (SOMS)

What distinguishes a 'nonconformity' from an 'incident' in SOMS terminology?

  1. A nonconformity is a failure to meet a requirement, while an incident is an event that disrupts or could disrupt security operations Correct answer.
  2. A nonconformity always involves physical injury, while an incident never does
  3. A nonconformity is reported to clients, while an incident is kept internal
  4. A nonconformity applies only to auditors, while an incident applies only to guards

Explanation

A nonconformity is a deviation from a specified requirement of the standard or the organisation's own arrangements, whereas an incident is an operational event. Incidents can reveal nonconformities but the concepts are distinct. Injury, reporting audience and job role do not define the difference.

Question 24Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following best reflects the principle of 'stakeholder engagement' in a SOMS?

  1. Consulting affected communities and other interested parties about security operations that may affect them Correct answer.
  2. Engaging only with regulators during inspections
  3. Limiting communication to shareholders' annual meetings
  4. Avoiding dialogue with critics to prevent reputational risk

Explanation

Stakeholder engagement involves proactive dialogue with affected communities and other interested parties whose rights or interests may be impacted by security operations. It builds trust and informs risk management. Restricting engagement to shareholders, regulators or avoiding critics undermines the principle.

Question 25Fundamental principles and concepts of a Security Operations Management System (SOMS)

An audit finds that guards were not trained on the updated use-of-force policy. Which SOMS response is most appropriate?

  1. Ignoring the finding because no incident occurred
  2. Removing the policy from the system to avoid future findings
  3. Recording the finding, correcting the training gap and reviewing why the process failed Correct answer.
  4. Blaming the guards individually without changing the process

Explanation

The organisation should record the nonconformity, take corrective action to close the training gap and investigate the underlying cause to prevent recurrence. Ignoring the finding, deleting the policy or blaming individuals without systemic review fails the corrective action requirement.

Question 26Fundamental principles and concepts of a Security Operations Management System (SOMS)

In ISO 18788, what is the fundamental purpose of a Security Operations Management System (SOMS)?

  1. To standardise the uniform and rank structure used by private security companies worldwide
  2. To replace the organisation's legal department by interpreting national legislation on the use of force
  3. To certify individual security guards against a fixed international competency standard
  4. To provide a structured framework of interrelated processes for directing and controlling security operations and their risk Correct answer.

Explanation

A SOMS is a management system: a set of interrelated or interacting processes and resources used to establish policy and objectives and to achieve those objectives in the security operations domain. ISO 18788 structures these elements so that security activities are planned, executed, monitored and improved in a controlled, risk-based way. It is a management framework, not a personnel certification scheme or a legislative substitute.

Question 27Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which characteristic most clearly distinguishes a SOMS approach from a purely reactive security service?

  1. Security performance is planned, measured and reviewed against defined objectives Correct answer.
  2. Contracts are renewed automatically without performance review
  3. Incident logs are kept informally by shift supervisors
  4. Guards are deployed only after a client reports an incident

Explanation

A management system is built on the plan-do-check-act cycle, so security performance must be planned against objectives, monitored through indicators and reviewed by management. Reactive security simply responds to events without a feedback loop. The presence of defined objectives, measurement and review is what makes the approach systematic.

Question 28Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security provider states that its SOMS covers only its guarding contracts at port facilities and excludes its cash-in-transit operations. Which SOMS principle governs this decision?

  1. Outsourcing control
  2. Management review
  3. Risk treatment
  4. Determination of the scope of the management system Correct answer.

Explanation

The organisation must determine and document the boundaries and applicability of the SOMS, taking into account external and internal issues and the nature of its activities. Excluding a business line is a scoping decision, which then determines which activities must be controlled within the system. Risk treatment and management review operate inside whatever scope has been established.

Question 29Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following is the best example of a management system 'process' rather than a 'procedure'?

  1. A signed contract annexe describing the client's site layout
  2. The system of activities by which security risks are identified, assessed and treated Correct answer.
  3. A one-page instruction listing the steps to log a visitor at the gate
  4. A certificate confirming successful completion of a first-aid course

Explanation

A process is a set of interrelated or interacting activities that transforms inputs into outputs, such as the risk assessment and treatment cycle. A procedure is a specified way to carry out an activity or process, so it is a subordinate, more prescriptive artefact. Confusing the two leads organisations to document steps without managing the flow of activities.

Question 30Fundamental principles and concepts of a Security Operations Management System (SOMS)

According to ISO 18788, who bears accountability for the effectiveness of the Security Operations Management System?

  1. The on-site shift supervisor
  2. Top management of the security provider organisation Correct answer.
  3. The external certification body
  4. The client's contract manager

Explanation

Top management is accountable for the effectiveness of the management system, which is why the standard requires leadership, policy setting, provision of resources and management review. Accountability cannot be delegated to a client, an auditor or operational staff, although responsibilities may be assigned. This concentration of accountability is a core leadership principle of the standard.

Question 31Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which statement best describes a security 'control' in the context of a SOMS?

  1. A measure that modifies risk by eliminating, reducing or transferring it Correct answer.
  2. A financial budget line for security equipment
  3. A customer complaint received by the operations centre
  4. A record proving that a guard attended training

Explanation

In management system terminology a control is any measure that maintains and modifies risk, whether preventive, detective or corrective. It exists to change the likelihood or consequence of an unwanted event. Records, budgets and complaints may inform control decisions but are not themselves risk-modifying measures.

Question 32Fundamental principles and concepts of a Security Operations Management System (SOMS)

What does the term 'interested party' mean in ISO 18788?

  1. A regulator that has issued a licence to operate
  2. A shareholder owning more than five percent of the company
  3. A person or organisation that can affect, be affected by, or perceive itself to be affected by a decision or activity Correct answer.
  4. Any employee holding a supervisory rank

Explanation

An interested party is defined by its relationship to the organisation's decisions and activities, whether it can affect them, is affected by them, or merely perceives itself to be affected. This broad definition matters in security because communities, clients, regulators and staff all qualify. The concept is wider than ownership, employment or licensing status.

Question 33Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following best describes the 'plan' element of the plan-do-check-act cycle within a SOMS?

  1. Deploying guards to their posts at the start of a shift
  2. Establishing security objectives, processes and controls needed to deliver results Correct answer.
  3. Investigating an incident that has already occurred
  4. Reviewing audit findings with top management

Explanation

The plan phase establishes the objectives, processes and resources needed to deliver results in line with policy and identified risks. It is forward-looking and design-oriented rather than executional or evaluative. Deployment belongs to do, while investigation and review belong to check and act.

Question 34Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security provider operating in a region with weak rule of law is deciding how to structure its SOMS. Which concept most directly requires it to consider local conflict dynamics, corruption levels and community tensions?

  1. Competence of guards
  2. Context of the organisation Correct answer.
  3. Calibration of equipment
  4. Documented information control

Explanation

The context of the organisation covers the external and internal issues relevant to purpose and direction, including legal, social, cultural and economic conditions. In a fragile environment, conflict dynamics and corruption are precisely such issues and must shape the system's design. Documentation, competence and equipment calibration are internal elements that respond to the context rather than define it.

Question 35Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which pairing of a SOMS principle with its practical implication is most accurate?

  1. Confidentiality: all incident data must be withheld from clients indefinitely
  2. Accountability: decisions and their consequences can be traced to a responsible role Correct answer.
  3. Efficiency: the cheapest available control is always selected
  4. Precaution: force may be used whenever a guard suspects wrongdoing

Explanation

Accountability means that authority and responsibility are assigned and that decisions can be traced to the role that made them, supported by records and review. This is why the standard requires defined responsibilities and documented information. The other pairings misstate the principles they claim to describe.

Question 36Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security company's policy commits to 'respecting human rights and fundamental freedoms'. Which SOMS activity most directly demonstrates that this commitment is being operationalised?

  1. Displaying the policy statement in the reception area
  2. Translating the policy into three languages
  3. Publishing the policy on the company website
  4. Embedding human rights screening into recruitment and a grievance mechanism into operations Correct answer.

Explanation

A policy commitment becomes operational only when it is translated into controls and processes, such as vetting that screens out personnel with records of abuse and a channel through which affected people can raise grievances. Communication activities support awareness but do not by themselves change operational behaviour. The test is whether the commitment alters how activities are performed.

Question 37Fundamental principles and concepts of a Security Operations Management System (SOMS)

How does ISO 18788 treat the concept of 'risk-based thinking'?

  1. It applies only to physical threats such as intrusion and excludes legal or reputational risk
  2. It is an optional annexe that organisations may adopt at their discretion
  3. It requires a single quantitative risk matrix prescribed by the standard
  4. It requires risk and opportunity to be addressed when planning the SOMS and its processes Correct answer.

Explanation

Risk-based thinking is integral, not optional: planning must consider risks and opportunities that could affect the system's ability to achieve intended results. The standard does not prescribe a particular matrix or methodology, so organisations design their own approach. It also covers legal, reputational and human rights risk, not only physical threats.

Question 38Fundamental principles and concepts of a Security Operations Management System (SOMS)

A guard's actions during a confrontation are reviewed against the requirement that any use of force be necessary and proportionate. Which SOMS concept does this review most directly support?

  1. Continual improvement through evaluation of operational conduct Correct answer.
  2. Asset calibration
  3. Supplier evaluation
  4. Business continuity planning

Explanation

Reviewing conduct against necessity and proportionality is an evaluation activity that feeds learning and correction back into the system, which is the essence of continual improvement. It examines whether controls and training produced the intended behaviour. Supplier evaluation, calibration and continuity planning address different objects.

Question 39Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following is the clearest example of a 'corrective action' in a SOMS?

  1. Root causes of repeated unauthorised site access are eliminated and the access procedure is revised Correct answer.
  2. A fence is installed around a fuel depot
  3. A guard patrols the perimeter every hour
  4. A risk assessment is scheduled for the coming quarter

Explanation

Corrective action responds to a nonconformity by eliminating its cause so it does not recur, which typically involves root cause analysis and a change to the process. Patrols and fencing are preventive controls that reduce likelihood before an event. Scheduling a future assessment is planning, not correction.

Question 40Fundamental principles and concepts of a Security Operations Management System (SOMS)

What role does 'documented information' play in a SOMS?

  1. It replaces the need for competence and training of personnel
  2. It is limited to documents required by the client contract
  3. It must be maintained exclusively in paper form for audit purposes
  4. It provides evidence of conformity and supports the effective operation of processes Correct answer.

Explanation

Documented information serves two purposes: enabling processes to operate as planned and providing evidence that they did. The standard requires it to be controlled for availability, protection and retention. It complements competence and training rather than replacing them, and may be held in any suitable medium.

Question 41Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security provider is asked by a client to provide 'intelligence gathering' on a local community leader. Which SOMS consideration should drive the response?

  1. Whether the request can be completed before the end of the contract month
  2. Whether the activity is lawful and consistent with the organisation's human rights commitments Correct answer.
  3. Whether the client will pay a premium for the service
  4. Whether the community leader has previously complained about the company

Explanation

Before accepting any task, the organisation must assess legality and consistency with its policy commitments, including human rights and the principles relating to the conduct of personnel. Commercial or scheduling factors cannot legitimise an unlawful or rights-abusive activity. This reflects the primacy of legal and ethical requirements in a SOMS.

Question 42Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which statement best captures the relationship between the SOMS and the organisation's other management systems, such as quality or occupational health and safety?

  1. The SOMS must be certified before any other system can be implemented
  2. The SOMS must operate in complete isolation to avoid conflicts of interest
  3. Other management systems automatically satisfy all SOMS requirements
  4. The SOMS can be integrated with other management systems through shared elements such as policy, risk and review processes Correct answer.

Explanation

ISO management system standards are designed with a common high-level structure, allowing shared elements such as documented information, risk assessment and management review to be integrated. Integration reduces duplication and inconsistency. It does not mean that a quality or safety system alone satisfies security-specific requirements.

Question 43Fundamental principles and concepts of a Security Operations Management System (SOMS)

An organisation defines a security objective as 'reduce unauthorised site access by 30 percent within twelve months'. Which SOMS characteristic does this objective best illustrate?

  1. It is a legal requirement imposed by a regulator
  2. It transfers responsibility to the client
  3. It is deliberately vague to allow flexible interpretation
  4. It is measurable and time-bound, allowing performance to be evaluated Correct answer.

Explanation

Objectives in a management system should be measurable, monitored, communicated and updated, and should be consistent with policy. Specifying a percentage and a timeframe makes the objective verifiable, so progress can be assessed during performance evaluation. Vague objectives cannot be evaluated and undermine the check phase.

Question 44Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which of the following best explains why ISO 18788 places strong emphasis on the conduct of security personnel?

  1. Because private security personnel can directly affect the safety, dignity and rights of individuals they encounter Correct answer.
  2. Because conduct rules reduce the amount of documentation required
  3. Because conduct is primarily a marketing differentiator for clients
  4. Because conduct requirements replace the need for risk assessment

Explanation

Security personnel exercise powers that can affect life, liberty and dignity, so their conduct is a central risk area for the organisation and for affected people. The standard therefore addresses rules of conduct, use of force and human rights. Conduct requirements complement risk assessment rather than replacing it.

Question 45Fundamental principles and concepts of a Security Operations Management System (SOMS)

A company's SOMS has a policy, objectives and risk assessments, but no process for monitoring performance or handling nonconformities. Which essential element of the management system is missing?

  1. Context determination
  2. Leadership commitment
  3. Performance evaluation and improvement Correct answer.
  4. Scope definition

Explanation

Monitoring, measurement, internal audit, management review and the handling of nonconformities with corrective action constitute performance evaluation and improvement. Without them the system cannot check whether it is working or act on findings. The other elements listed are present in the scenario or are earlier planning steps.

Question 46Fundamental principles and concepts of a Security Operations Management System (SOMS)

Two security providers operate in the same city. Provider A has detailed procedures but no measurement of outcomes; Provider B has fewer procedures but regularly reviews performance data and adjusts controls. Which assessment is most consistent with ISO 18788 principles?

  1. Provider A is stronger because the volume of procedures proves control
  2. Provider B is stronger because the system demonstrably evaluates and improves its performance Correct answer.
  3. Neither can conform because the standard prescribes a fixed number of procedures
  4. Both are equally conformant because procedures and measurement are interchangeable

Explanation

Conformity depends on whether the system achieves its intended results and improves, not on the sheer quantity of documentation. Provider B demonstrates monitoring, review and adjustment, which are core requirements of performance evaluation and improvement. Procedures are valuable only insofar as they support effective, evaluated performance.

Question 47Fundamental principles and concepts of a Security Operations Management System (SOMS)

A security provider discovers that a subcontractor supplying guards has been recruiting personnel without any vetting. Applying SOMS principles, what is the most appropriate interpretation of this situation?

  1. A matter for the regulator alone, with no action required by the provider
  2. An external provider issue that must be controlled within the SOMS because outsourced activities remain within the system's responsibility Correct answer.
  3. A client responsibility because the client selected the site
  4. An issue outside the SOMS because the subcontractor is a separate legal entity

Explanation

Activities performed by external providers that fall within the SOMS scope must be controlled, because the organisation remains responsible for conformity of the services it delivers. Vetting is a key human rights-related control, so its absence is a significant risk. Legal separation of the subcontractor does not remove the provider's management responsibility.

Question 48Fundamental principles and concepts of a Security Operations Management System (SOMS)

Which scenario best illustrates the SOMS principle of 'precaution' in a security operation?

  1. Guards detain anyone found near the perimeter without asking questions
  2. Guards defer all decisions to the client's representative on site
  3. Guards withdraw and seek negotiation or supervisor support before any physical intervention Correct answer.
  4. Guards escalate immediately to the highest level of force when confronted

Explanation

The precaution principle calls for graduated response, restraint and avoidance of harm where possible, with force used only when necessary and proportionate. Withdrawal and negotiation are lower-risk steps that precede escalation. Immediate escalation, arbitrary detention and wholesale deferral all conflict with this principle.

Question 49Fundamental principles and concepts of a Security Operations Management System (SOMS)

A SOMS review finds that risk assessments are performed annually but the threat environment changes monthly. What is the most sound management system conclusion?

  1. The frequency should be reduced further to save resources
  2. Risk assessment should be discontinued in favour of incident response only
  3. The risk assessment process is not fit for purpose and should be revised to reflect the rate of change Correct answer.
  4. The annual cycle is adequate because the standard prescribes annual review

Explanation

Risk assessment must be appropriate to the organisation's context and the pace at which its risks change, so a mismatch between review frequency and threat volatility is a process design weakness. The correct response is to revise the process, not to abandon or further weaken it. The standard does not impose a fixed annual frequency.

Question 50Fundamental principles and concepts of a Security Operations Management System (SOMS)

An organisation wants to demonstrate that its SOMS addresses the needs of affected communities, not only those of its clients. Which action most directly reflects this?

  1. Reducing the price of the security contract
  2. Extending guard shift length to twelve hours
  3. Increasing the number of guards deployed at the site entrance
  4. Adding a community liaison channel and including community concerns in the risk assessment Correct answer.

Explanation

Addressing affected communities requires both a means for them to raise concerns and a mechanism to feed those concerns into risk assessment and decision-making. This reflects the broad definition of interested parties in the standard. Deployment numbers, pricing and shift patterns do not by themselves engage community concerns.