Guide
ISO 18788 - in brief
ISO 18788 is an international standard for management systems for private security operations. It describes how a security company plans, performs and controls its work so that it is professional, lawful and respects human rights - from the contract with the client to the actions taken at the post.
The current version is ISO 18788:2015 with a 2024 amendment that adds consideration of climate change. The standard builds on international frameworks for private security - the Montreux Document and the International Code of Conduct for Private Security Service Providers (ICoC).
Who is ISO 18788 for
The standard is intended for anyone who carries out security activities:
- Licensed security companies
- In-house security units in companies
- Event security companies
- Companies securing the transport of valuables
- Providers of alarm systems and monitoring
- Bidders in public procurement for security services
What ISO 18788 requires
The standard requires a risk assessment for every operation and site, clear rules for response and the use of force - only when necessary and proportionate - and respect for human rights in all actions, contracts and training. In practice, proportionality works like a ladder: the guard starts from the lowest step and climbs only if the situation demands it. Visible presence and observation prevent most incidents; clear, polite instructions resolve most situations; the next step is notifying management and, if needed, the police; and intervention comes only when necessary, proportionately and lawfully - followed by a report.
It also requires recruitment and screening of personnel, site-specific training, management of subcontractors, reporting and investigation of incidents, a complaints procedure, monitoring of results and internal audits. Every guard has a file showing that they are ready for the specific site: identity and document checks, the legal requirements for security guards, training on the site and its procedures, human rights training, incident response training and periodic performance reviews.
The benefits
Clients and contracting authorities entrust a security company with people, property and reputation. ISO 18788 certification shows that operations are managed systematically - with vetted people, clear rules and traceable actions.
Inside the company, the system brings order to the work: fewer incidents and complaints, easier onboarding of new staff and sites, and a stronger position in public procurement and in contracts with international clients.
How implementation works
- Current-state analysisContracts, sites, procedures and personnel - compared against the requirements of ISO 18788.
- Risk assessmentRisks by site and type of security service, including risks to people’s rights.
- Rules and proceduresResponse, use of force, reporting, complaints and subcontractors.
- Personnel and trainingRecruitment, screening, site-specific training and human rights training.
- Internal audit and reviewWe check the system at your sites and prepare the management review.
- Certification auditWe prepare the company for the audit by an independent certification body.
What you get
- Policy and objectives for security operations
- Risk assessment for each site
- Rules for response and the use of force
- Personnel files and training
- Procedure for incidents and complaints
- Requirements for subcontractors
- Internal audit and management review
- Preparation for the certification audit