PECB ISO 18788 Lead Auditor flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Security operations management system

A structured set of policies, processes, and controls an organization uses to plan, deliver, monitor, and improve security operations in conformance with ISO 18788 requirements.

Human rights conformance

The ISO 18788 expectation that security operations respect applicable human rights law and the organization's stated commitments, including use-of-force and detention practices.

Plan-Do-Check-Act

The improvement cycle underlying ISO 18788: establish objectives and processes, implement them, monitor and report results, then take action to improve performance.

High-Level Structure

The common clause framework (clauses 4 to 10) shared by ISO management system standards, which lets an organization integrate its SOMS with quality or environmental systems.

Interested party

A person or organization that can affect, be affected by, or perceive itself affected by the security operations, such as clients, regulators, communities, and personnel.

Risk-based thinking

The principle that the security risk assessment determines which controls and resources are needed, rather than applying a fixed control catalogue uniformly.

SOMS scope

The documented boundary of the management system stating which sites, activities, contracts, and security services are covered by the ISO 18788 system.

Security risk assessment

A documented process that identifies threats and vulnerabilities, evaluates likelihood and impact, and determines risk treatment for security operations.

Control of outsourced providers

Clause 8 requirement that contracted security providers be selected, monitored, and held to the same operational and human rights requirements as internal staff.

Documented information

Information the organization must control and maintain, including procedures, records, risk assessments, and incident reports, with protection and retention rules.

Incident management process

The defined flow for reporting, recording, investigating, escalating, and learning from security incidents so that corrective action and improvement occur.

Management review

A top-management evaluation of SOMS performance and suitability, using defined inputs such as audit results and incidents, producing decisions on improvement and resources.

Competence requirement

Clause 7 expectation that personnel whose work affects security performance are competent on the basis of education, training, or experience, with evidence retained.

Audit criteria

The set of requirements used as a reference against which audit evidence is compared, such as ISO 18788 clauses, legal obligations, and internal procedures.

Audit evidence

Records, statements of fact, observations, or other verifiable information relevant to the audit criteria that supports findings and conclusions.

Major nonconformity

A nonconformity that represents a system failure or absence of a required element, raising doubt about the capability of the SOMS to meet requirements.

Minor nonconformity

An isolated lapse or single observed departure from a requirement that does not indicate a systemic failure of the management system.

Auditor impartiality

The obligation to remain free of bias and conflicts of interest, so auditors never audit their own work and identified threats are managed.

Sampling risk

The possibility that the evidence examined during an audit does not reveal a nonconformity that exists elsewhere in the population audited.

Third-party audit

An audit performed by an independent external body, typically for certification or contract purposes, with no organizational link to the auditee.

Audit objectives

The stated purpose of an audit, such as determining conformity, evaluating effectiveness, or qualifying a supplier, which drives scope and criteria selection.

Audit plan

A document specifying dates, durations, auditees, processes or clauses to be covered, and the team assignments for a specific audit.

Document review

The preparation activity of examining the security policy, risk assessment, legal register, and prior findings to focus the on-site audit effort.

Audit team competence

The combined knowledge and skills of auditors in ISO 18788, the security sector, and applicable law needed to meet the audit objectives.

Opening meeting

The first formal audit activity, confirming scope, criteria, schedule, communication channels, confidentiality, and safety arrangements with the auditee.

Evidence triangulation

Confirming a finding through at least two independent sources, such as interview plus record plus direct observation of the operation.

Audit trail

A prepared line of enquiry that guides the auditor from a criterion through questions and evidence to a conclusion for a given process.

Closing meeting

The final audit activity presenting findings, nonconformities, and conclusions to the auditee, without introducing new findings not previously evidenced.

Audit report

The documented output of an audit covering objectives, scope, criteria, team, dates, findings, and the conclusion on conformity with the criteria.

Corrective action verification

The follow-up activity confirming that the auditee removed the cause of a nonconformity and that the action was effective, not merely recorded.

Audit programme

The set of audits planned for a defined time period and directed at a specific objective, including frequency, methods, and responsibilities.

Programme risk-based frequency

The rule that audit frequency and depth increase where security risk, prior poor results, or significant organizational change are greater.