Conduct a gap analysis comparing existing company policy against ISO 18788 management system requirements.
Security Management
Implementing ISO 18788 Management Systems for Private Security Providers
Implement an ISO 18788 management system that lets a private security provider demonstrate accountable, rights-respecting operations to clients, regulators and auditors.
🗓️Duration5 training days
📚Content4 modules · 8 sessions
🎓On completionAccredited attendance certificate
About the programme
Course Overview
Clients contracting private security providers increasingly want proof of accountable, rights-respecting operations, not just a competitive rate, and an ISO 18788 management system is how a provider supplies that proof in a form clients and regulators recognise. This course takes participants through implementing ISO 18788, the international management system standard for private security operations, from initial gap analysis against existing policy through to preparation for third-party conformity assessment. Participants work through the standard's requirements for governance, risk assessment, use-of-force policy, human rights due diligence and subcontractor management, and connect these to related references such as the Montreux Document and the International Code of Conduct for Private Security Service Providers. The course also covers grievance mechanism design, incident reporting and the documentation discipline an auditor will expect to see during assessment. A gap-analysis and documentation exercise using a realistic provider organisation gives participants practice building the policies, records and evidence trail that turns a paper management system into one that actually governs daily operations.
Expected Learning Outcomes
Develop governance arrangements and a policy framework that satisfy ISO 18788's leadership requirements.
Write use-of-force policy and escalation procedures consistent with human rights due diligence obligations.
Design a grievance mechanism that lets affected parties raise complaints and receive a documented response.
Extend management system requirements to subcontractors so accountability holds across the supply chain.
Build the documentation and record-keeping discipline an auditor expects to see during conformity assessment.
Prepare an organisation for third-party audit and respond to non-conformities raised during assessment.
Who Should Attend
Owners and directors of private security companies seeking ISO 18788 certification for their operations.
Compliance and quality managers responsible for building or maintaining a security management system.
Operations managers who must translate management system policy into daily guarding and response practice.
Clients and procurement teams assessing private security providers against management system requirements.
Consultants supporting security providers through gap analysis and certification preparation.
Human resources and training managers implementing use-of-force and grievance procedures under the standard.
Course Modules
Select any module to see its sessions and points.
01Understanding ISO 18788 and Its Context
2 sessions · 8 points
Session 1The Standard and Related References
- Explain the scope and structure of ISO 18788 as a management system standard for private security operations.
- Connect ISO 18788 to related references, including the Montreux Document and the International Code of Conduct.
- Distinguish ISO 18788 from related standards such as ANSI/ASIS PSC.1 and clarify where each applies.
- Identify which parts of an existing quality or safety management system can be extended to meet ISO 18788.
Session 2Conducting the Gap Analysis
- Compare current company policy, contracts and training records against each clause of ISO 18788.
- Identify missing governance elements, such as a documented risk assessment process or accountability structure.
- Prioritise gap analysis findings by the effort and time required to close each identified gap.
- Present gap analysis results to leadership to secure commitment and resource for implementation.
02Governance, Risk and Policy Framework
2 sessions · 8 points
Session 1Leadership and Governance Requirements
- Establish leadership accountability and a policy framework consistent with ISO 18788's governance requirements.
- Define roles and responsibilities for management system ownership, including a designated management representative.
- Build a risk assessment process covering operational, legal and human rights risks specific to security work.
- Integrate management system requirements into existing contract and client onboarding procedures.
Session 2Use of Force and Human Rights Due Diligence
- Write use-of-force policy that sets clear escalation stages consistent with applicable law and client contracts.
- Apply human rights due diligence principles to identify risks arising from armed or unarmed operations.
- Train personnel on use-of-force policy and document that training has been delivered and understood.
- Review incidents involving use of force against policy to identify training or procedural gaps.
03Grievance, Subcontractors and Accountability
2 sessions · 8 points
Session 1Designing the Grievance Mechanism
- Design a grievance mechanism accessible to employees, clients and members of the public affected by operations.
- Define investigation and response timelines that give complainants confidence a grievance will be addressed.
- Protect complainants from retaliation through documented policy and confidential reporting channels.
- Record grievance outcomes to identify recurring issues requiring wider policy or training change.
Session 2Extending Accountability to Subcontractors
- Extend ISO 18788 policy requirements contractually to subcontracted personnel and partner organisations.
- Audit subcontractor compliance with use-of-force, training and human rights due diligence requirements.
- Define escalation procedures for subcontractor non-compliance identified during operations or audit.
- Maintain oversight records demonstrating accountability across the full subcontracting chain.
04Documentation and Conformity Assessment
2 sessions · 8 points
Session 1Building the Documentation System
- Build a document control system that keeps policies, procedures and records current and accessible.
- Maintain incident, training and grievance records in the form an auditor will expect to review.
- Conduct internal audits against ISO 18788 requirements ahead of any external conformity assessment.
- Correct nonconformities identified internally before they are discovered during external audit.
Session 2Preparing for the External Audit
- Select and engage a conformity assessment body experienced in private security management systems.
- Prepare staff and management for interviews and record checks conducted during the audit.
- Respond to nonconformities raised during audit with corrective action plans and supporting evidence.
- Plan surveillance audits and continual improvement activity required to maintain conformity over time.
What the participant receives
4 course modules
A structured syllabus
8 training sessions
across 5 days
32 detailed points
Applied, detailed content
Accredited attendance certificate
On completing the programme
Complete your registration
We will contact you within one business day to confirm.
Ready to start?
Reserve your seat and start building the skill.