Fundamental principles and concepts of a Security Operations Management System (SOMS)
Domain focus
The exam tests whether you can explain what a Security Operations Management System is, the principles it rests on, and how those principles appear in audit evidence rather than in slogans.
Core concepts
A SOMS is the set of interrelated policies, processes, resources and responsibilities used to direct and control security operations. ISO 18788:2015 follows the common management-system model - context, leadership, planning, support, operation, performance evaluation, improvement - and applies it to private security operations that may protect people, property, information and sites. The standard is built around risk-based thinking, legal and other requirements, human rights due diligence, competence, incident management, grievance mechanisms and continual improvement. It is aligned with the Montreux Document and the International Code of Conduct for Private Security Service Providers (ICoC); it is a management-system standard, not a product or guarding standard.
Two principles matter in almost every audit question: (1) use of force must be lawful, necessary, proportionate and precautionary, with defined rules of engagement and competence; (2) the organization must exercise due diligence before accepting work and throughout delivery, including subcontractors and client obligations.
Worked example
A guarding company is asked to provide armed protection at a mining site. The auditor finds a contract, a client security risk assessment and a use-of-force policy. She then asks for a pre-deployment human rights risk assessment, rules of engagement, weapon competence records, incident reporting and grievance evidence. The policy alone is not sufficient: the audit trail must show the risk was assessed, controls were implemented and performance is monitored. That links principle to evidence.
Traps
Do not treat the SOMS as the security department's own procedures. Do not confuse ISO 18788 with a certification of guards' conduct. Do not assume use of force is automatically permitted; do not ignore human rights or subcontractor controls. Do not accept a policy as evidence of implementation.