This lesson develops practical capability in Personnel, Suppliers, Equipment, Operations, Incidents, and Complaints within ISO 18788 Foundation. Activities reflect a security company formalizing governance for personnel, subcontractors, sensitive sites, equipment, and incident response, keeping responsibilities, decisions, evidence, exceptions, and improvement actions connected.
The work contributes to the wider course objective to interpret ISO 18788 requirements for accountable security operations, human rights, risk treatment, operational evidence, and improvement.
The instructor traces a realistic case involving a security company formalizing governance for personnel, subcontractors, sensitive sites, equipment, and incident response. The demonstration shows how to define scope and criteria, collect evidence, record decisions in security operations evidence portfolio, and challenge the condition where personnel is undocumented or assigned to conflicting owners.
Complete a controlled exercise for Personnel, Suppliers, Equipment, Operations, Incidents, and Complaints. Establish responsibilities and acceptance criteria, examine the case where personnel is undocumented or assigned to conflicting owners, reach a supported conclusion, and preserve the result in security operations evidence portfolio.
Begin with the earliest point where expected practice and observed evidence diverge. Separate a missing record from an ineffective process, and distinguish role ambiguity from a control or competence failure. Treat “personnel is undocumented or assigned to conflicting owners” as a hypothesis until the response is tested against the applicable criteria and intended outcome.
Learners can apply Personnel, Suppliers, Equipment, Operations, Incidents, and Complaints, explain the reasoning used, and defend the result through security operations evidence portfolio.