Services / ISO 18788 certification
ISO 18788 certification for private security operations
For private security providers that guard sites, people and assets: an audit of how you manage risk, use of force and respect for human rights, from $800.
From $800Certified by EUROTECH
- Accredited by IAB and INTAQS
- Issuing certificates since 2004
- Online or on-site audits worldwide
- Verify any EUROTECH certificate
What ISO 18788 certification covers
ISO 18788:2015 sets the requirements for a management system for private security operations. It is written for organizations that provide security services, such as guarding sites, protecting people, escorting convoys or securing assets, especially in complex or high-risk environments. It is also used by organizations that run their own in-house security teams.
The standard combines a management system, with the same structure as ISO 9001, with requirements specific to security work. Respect for human rights runs through it: the standard draws on international frameworks such as the UN Guiding Principles on Business and Human Rights and the International Code of Conduct for Private Security Service Providers.
The audit looks at how you assess risks, including risks to the rights of the people your operations affect, and how you control them through vetting and training of personnel, rules on the use of force, management of weapons where they are used, incident reporting, grievance handling and supervision of subcontractors.
- Stage 1 review of the risk assessment, policies and documented system
- Stage 2 audit at headquarters and at selected operational sites
- Certification decision and three-year certificate
- Listing on verify.eurotechcertification.com
- Yearly surveillance audits and recertification
The standard expects leadership to set the tone. Senior managers must commit to respecting human rights and to the rules on use of force, and the auditor checks how that commitment is communicated to guards in the field, not only written in a policy.
Scope and audit format
The scope names the services, the countries and the contracts covered. A guarding company operating only in commercial premises has a very different risk profile from a provider protecting infrastructure in a conflict-affected area, and the scope should make that clear to clients.
The audit has two parts. Management processes, such as policies, risk assessments, personnel files, training records and incident reports, can be reviewed at headquarters, partly online. Operations need to be seen: the auditor visits a sample of sites to observe guards on duty, check post orders, see how access control and incident reporting work, and, where weapons are used, inspect storage, issue and return records.
ISO 18788 can be integrated with ISO 9001, ISO 45001 for the health and safety of your guards, or ISO 28000 for supply chain security clients.
For providers with many contracts, the auditor selects sites that represent the range of services and risks, so a sample of a few contracts can give confidence in the whole operation. Over the three-year cycle, different sites are visited.
What drives the price
ISO 18788 certification with EUROTECH starts at $800. Audit time depends on the size and risk of your operations.
- Number of personnel, including guards on client sites
- Number of contracts and operational sites to sample
- Risk environment of operations, from commercial premises to high-risk areas
- Use of weapons and the related controls
- Countries of operation and travel to sites
We confirm audit days, travel and all fees in a written quote. Organized personnel files and training records keep the headquarters part of the audit efficient.
Operations in remote or high-risk locations take more planning and travel, and some visits may need security arrangements of their own. We agree these with you when we prepare the audit plan.
How ISO 18788 certification works with us
Step 1
Scope and quote
We agree the services, contracts and countries in scope and quote the audit in writing.
Step 2
Stage 1 review
We review risk assessments, human rights commitments, use of force rules and personnel controls.
Step 3
Stage 2 audit
Headquarters records are sampled and selected sites are visited to observe operations.
Step 4
Certificate and surveillance
After the decision you receive the ISO 18788 certificate, with yearly surveillance audits.
Licensing and legal rules by country
We certify ISO 18788 for security providers in the USA, Europe, Asia and Africa. Private security is licensed in most countries: companies need operating licences, guards often need individual licences, and the carrying of weapons is tightly regulated. ISO 18788 requires you to identify and meet these rules, and the auditor samples licences and permits during the audit.
Rules on detention, search, use of force and data from cameras also differ by country. Your rules on the use of force and your training must reflect the law where each contract runs, not only the policy written at head office.
Clients such as extractive companies, embassies, international organizations and humanitarian agencies often require ISO 18788 or alignment with the International Code of Conduct in their contracts.
Data protection matters as well. Security providers handle camera footage, visitor logs and personal data of the people they screen, so the auditor checks how that data is stored, who can see it and how long it is kept under local law.
What to expect during the audit
At headquarters, expect the auditor to test vetting and training: personnel files with background checks where the law allows, training on use of force, human rights and first aid, refresher training records, and evidence that guards understand their post orders.
At sites, the auditor will speak with guards and supervisors, check logbooks and incident reports, and review how incidents involving force, injury or complaints from the public were reported and investigated. Grievance mechanisms are checked too: how people affected by your operations can complain and what happens next.
Where weapons are used, expect a detailed review of licensing, secure storage, issue and return logs, maintenance and qualification of armed personnel.
Subcontractors are a frequent gap. If you use local security firms to deliver part of a contract, the standard expects you to vet them, set the same rules on use of force and human rights, and monitor their performance. The auditor will ask for evidence of each step.
Findings are graded and the certification decision rests on the evidence. You receive a written report explaining each finding.
Keeping the certificate
Keep risk assessments current for each contract, especially when the security situation changes. Keep training and licences up to date, review every incident involving use of force and act on grievances. Supervision of subcontractors should be documented as carefully as your own operations.
Surveillance audits sample new contracts, incidents since the last visit, changes in countries of operation and the effectiveness of corrective actions. Tell us before you start operating in a new country, so the audit plan can cover it.
Lessons learned from incidents should reach training. When an incident shows that a procedure was unclear or training was missing, update both and keep a record, so the surveillance auditor can see the system learning.
Questions buyers ask
How much does ISO 18788 certification cost?
With EUROTECH it starts at $800. Personnel, contracts, sites, risk environment, weapons and countries set the final price.
Who needs ISO 18788?
Private security providers and in-house security functions, especially those working for clients that require evidence of human rights and use of force controls.
Does ISO 18788 replace a security licence?
No. Licences for companies, guards and weapons remain legal requirements in each country.
Is the audit done on site?
Partly. Headquarters records can be reviewed partly online, but operational sites are visited to see security work in practice.
How does ISO 18788 relate to the International Code of Conduct?
The standard draws on the International Code of Conduct for Private Security Service Providers and the UN Guiding Principles on Business and Human Rights.
Which edition is current?
ISO 18788:2015.
Related services
- ISO 28000 certification
From $800
- ISO 45001 certification
From $800
- ISO 22301 certification
From $800
Get a quote for ISO 18788 certification
Tell us your company, sites and the standard you need. We reply with a written quote and the audit plan.
Prefer to talk? Call +1 307 205 1833
Monday to Friday, 09:00 to 18:00 (US Mountain Time)