Conducting an ISO 18788 audit
Domain focus
The exam tests fieldwork: opening meeting, interviews, observation, sampling, evidence recording, finding writing and the closing meeting.
Core rules
The opening meeting confirms objectives, scope, criteria, plan, communication, confidentiality, safety rules and site access. Fieldwork uses interviews, observation and document review; triangulate evidence and record source, date and person. Follow audit trails end-to-end: risk assessment to post instructions, training to deployment, incident to report, investigation, corrective action and client notification. Findings must be written against a requirement and supported by objective evidence; classify nonconformities consistently and agree the facts with the auditee. The closing meeting presents findings and conclusions, explains follow-up, and preserves confidentiality. The auditor does not make the certification decision.
Worked example
An incident report states that a guard used force to restrain a trespasser. The auditor traces the pre-shift risk assessment, rules of engagement, use-of-force training record, medical follow-up, client notification, grievance log and corrective action. The guard's training record is missing. The auditor interviews the supervisor and checks two other guards' records. Because the control is required and the gap affects a high-risk activity, this is a nonconformity, not an observation. The report cites the requirement, the evidence and the risk.
Traps
Do not ask leading questions or accept “we always do it.” Do not audit only the document system and ignore night shifts or subcontractors. Do not write vague findings such as “training insufficient.” Do not argue with the auditee; agree facts and record disagreement. Do not disclose one client's information to another. Do not turn the closing meeting into a consultancy session.