This lesson develops practical capability in Performance Evaluation, Internal Audit, Management Review, and Improvement within ISO 18788 Foundation. Activities reflect a security company formalizing governance for personnel, subcontractors, sensitive sites, equipment, and incident response, keeping responsibilities, decisions, evidence, exceptions, and improvement actions connected.
The work contributes to the wider course objective to interpret ISO 18788 requirements for accountable security operations, human rights, risk treatment, operational evidence, and improvement.
The instructor traces a realistic case involving a security company formalizing governance for personnel, subcontractors, sensitive sites, equipment, and incident response. The demonstration shows how to define scope and criteria, collect evidence, record decisions in SOMS assurance and improvement report, and challenge the condition where evidence for internal audit is incomplete, outdated, or inconsistent.
Complete a controlled exercise for Performance Evaluation, Internal Audit, Management Review, and Improvement. Establish responsibilities and acceptance criteria, examine the case where evidence for internal audit is incomplete, outdated, or inconsistent, reach a supported conclusion, and preserve the result in SOMS assurance and improvement report.
Begin with the earliest point where expected practice and observed evidence diverge. Separate a missing record from an ineffective process, and distinguish role ambiguity from a control or competence failure. Treat “evidence for internal audit is incomplete, outdated, or inconsistent” as a hypothesis until the response is tested against the applicable criteria and intended outcome.
Learners can apply Performance Evaluation, Internal Audit, Management Review, and Improvement, explain the reasoning used, and defend the result through SOMS assurance and improvement report.