PECB ISO 18788 Lead Implementer flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Security Operations Management System

A structured set of policies, processes, resources and responsibilities used to direct and control security operations so they respect human rights, comply with law and meet stakeholder requirements.

ISO High-Level Structure

Common clause framework (context, leadership, planning, support, operation, performance evaluation, improvement) shared by ISO management system standards, enabling integration of a SOMS with quality or environmental systems.

Human Rights Due Diligence

Ongoing process to identify, prevent, mitigate and account for how the organization addresses its actual and potential adverse human rights impacts arising from security operations.

Use of Force Principle

Force must be lawful, necessary, proportionate and a last resort, with firearms limited to imminent threat to life and every use documented and reported.

PDCA Cycle

Plan-Do-Check-Act improvement cycle applied to the SOMS: establish objectives and processes, implement, monitor and measure against criteria, then act to improve.

Scope of the SOMS

Documented statement of the sites, services, contracts and boundaries covered by the management system; exclusions must be justified and must not undermine conformity.

Security Operations Policy

Top-management statement of commitment to legal compliance, human rights respect, continual improvement and provision of a framework for setting security objectives.

Grievance Mechanism

Accessible, transparent and rights-compatible process for receiving, investigating and remedying complaints from workers and affected communities about security operations.

Operational Control

Planned arrangements and documented procedures that keep security activities, equipment, personnel deployment and use of force within defined criteria and legal limits.

Incident Investigation

Structured process to secure evidence, record statements, determine causes and produce findings and corrective actions after a security incident or allegation.

Subcontractor Control

Pre-qualification, contractual flow-down of human rights and use-of-force requirements, and performance monitoring applied to subcontracted security providers.

Gap Analysis

Comparison of current practices against ISO 18788 clause requirements, producing a prioritized action register that drives the implementation roadmap and budget.

Context of the Organization

Identification of internal and external issues, interested parties and their requirements, and the resulting boundaries that determine the SOMS scope and risk inputs.

Legal and Other Requirements

Register of applicable national law, international human rights law, client contract terms and voluntary commitments that the organization must comply with and evaluate.

SMART Objectives

Security objectives that are specific, measurable, achievable, relevant and time-bound, with assigned responsibility, resources and a defined evaluation method.

Stakeholder Mapping

Identification of clients, employees, communities, authorities, NGOs and contractors, with planned engagement frequency and channels for each group.

Competence Planning

Determining required skills per role, such as use of force, human rights, investigation and first aid, and planning training and licensing before deployment.

Top Management Commitment

Active leadership through policy issuance, resource allocation, integration into business processes and participation in management review, which cannot be delegated.

Personnel Vetting

Screening of personnel before deployment to confirm suitability, conducted lawfully and without discrimination, with records retained as documented information.

Weapons and Equipment Control

Procedures covering authorization, issue, storage, inventory, maintenance and loss reporting for weapons and security equipment, all auditable.

Change Management

Assessment of changes to scope, contracts, sites, laws or personnel for SOMS impact, with updates to risk assessments, procedures and training before implementation.

Communication Plan

Defined what, when, with whom and how to communicate internally and externally, including escalation to clients, authorities and communities after serious incidents.

Monitoring and Measurement

Defined indicators, methods, timing and analysis responsibilities used to evaluate SOMS performance, with results retained as documented information.

Internal Audit Programme

Risk-based schedule of audits performed by competent, impartial auditors, with results reported to management and used to drive corrective action.

Management Review Inputs

Required review data including audit results, incidents, grievances, legal compliance, risk updates, objectives status, resource adequacy and stakeholder feedback.

Compliance Evaluation

Planned periodic assessment of conformity with legal and other requirements, with evidence of the evaluation and any resulting follow-up actions retained.

Corrective Action

Action to eliminate the cause of a nonconformity, proportionate to its effect, verified for effectiveness before closure and recorded as documented information.

Root Cause Analysis

Methods such as 5 Whys, fishbone or fault tree used to identify underlying causes of nonconformities so corrective actions prevent recurrence.

Improvement Register

Log of improvement projects with objectives, owners, timelines and success measures, used to track continual improvement progress and maturity.

Stage 1 Audit

Certification readiness review covering documentation, scope confirmation and audit planning, conducted before the Stage 2 implementation effectiveness audit.

Stage 2 Audit

On-site certification audit verifying implementation effectiveness and conformity through records, site observation and interviews with management and operational personnel.

Surveillance Audit

Periodic post-certification audit, typically annual within a three-year cycle, confirming continued conformity and effective corrective action on findings.