ISO 18788 Certification in Saudi Arabia – Requirements, Cost & Process | Get Certified with SCS

http://www.scscertification.com/contactus.php

ISO 18788 certification in Saudi Arabia provides private security organizations with a structured framework for managing security operations, security risks, personnel competence, customer requirements, legal obligations, incidents and continual improvement.

For Saudi security companies, ISO 18788 can become an important customer, contractual or tender requirement, particularly when working with industrial organizations, oil and gas companies, petrochemical facilities, banks, hospitals, logistics operators, construction projects and international customers.

Where a customer specifically asks for ICoCA Certification or an ICoCA-accepted certification route, organizations should also verify the Certification Body and accreditation requirements before starting certification. ISO 18788 is recognized by ICoCA for land-based private security services, but an ISO 18788 certificate does not automatically mean that the organization is ICoCA Certified.

What Is ISO 18788 Certification in Saudi Arabia?

ISO 18788 is an international standard for establishing and maintaining a Security Operations Management System (SOMS).

For a Saudi private security company, the system can provide a structured approach to:

• Security risk management
• Security operations
• Legal and regulatory requirements
• Customer requirements
• Personnel competence
• Training
• Operational controls
• Incident management
• Emergency preparedness
• Monitoring and measurement
• Internal audit
• Management review
• Corrective action
• Continual improvement

The certification scope should reflect the company's actual security activities, locations, personnel and customer requirements.

Why Saudi Security Companies Need ISO 18788 Certification

ISO 18788 can be particularly valuable when a security provider needs to demonstrate that its operations are managed through a defined and independently assessed management system.

Customers may request evidence of:

• Structured security procedures
• Security risk assessments
• Competent security personnel
• Training and competency records
• Incident reporting
• Emergency response arrangements
• Operational monitoring
• Customer-specific security instructions
• Legal compliance
• Internal audits
• Management oversight

The commercial importance of ISO 18788 therefore depends not only on certification itself but also on what the customer's contract, tender or supplier-qualification process requires.

Saudi Private Security Law and ISO 18788

ISO 18788 certification should be distinguished from Saudi regulatory licensing.

Saudi Arabia has a Law of Private Security Services governing applicable private-security activities and related requirements.

A private security organization should identify the laws, regulations, licensing obligations and other requirements applicable to its activities.

ISO 18788 provides a management-system framework; it does not replace Saudi regulatory authorization.

The organization should therefore maintain an appropriate process for identifying and evaluating applicable:

• Saudi laws
• Regulations
• Licensing requirements
• Customer requirements
• Contractual obligations
• Industry requirements
• Other applicable obligations

ISO 18788 Requirements for Saudi Security Companies

The exact requirements depend on the organization's scope and activities. A Saudi security provider should establish controls appropriate to its operational risks.

Organization and Security Context

The organization should understand internal and external factors that can affect security operations.

These may include:

• Security threats
• Operating environment
• Customer expectations
• Personnel
• Contractors
• Security incidents
• Infrastructure
• Technology
• Geographic operating conditions
• Applicable laws and regulations

Interested Parties and Customer Requirements

Relevant interested parties may include:

• Customers
• Employees
• Security personnel
• Government authorities
• Contractors
• Property owners
• Project owners
• International customers
• Business partners

Customer requirements should be identified and incorporated into applicable security controls.

Security Operations Scope

The organization should define the boundaries of its Security Operations Management System.

The scope can consider:

• Security services
• Locations
• Facilities
• Personnel
• Operational activities
• Supporting processes
• Outsourced activities

A clearly defined scope is especially important when certification is required for a customer contract or tender.

Legal and Regulatory Requirements

The organization should determine applicable legal and regulatory requirements and establish suitable processes for maintaining and evaluating compliance.

For Saudi security companies, the applicable legal register should be developed according to the company's actual activities rather than copied from another organization.

Security Risk Management

Security risks should be identified and assessed according to the organization's activities.

Examples can include:

• Unauthorized access
• Theft
• Intrusion
• Violence
• Security breaches
• Personnel misconduct
• Emergency events
• Contractor risks
• Asset protection failures
• Communication failures

Controls should be established according to the identified risks.

Personnel Competence and Training

Security personnel should have appropriate competence for their assigned responsibilities.

The organization should establish suitable processes for:

• Competence
• Training
• Awareness
• Role responsibilities
• Training evaluation
• Competence records

Operational Control

Security operations should be planned and controlled according to the organization's scope and risks.

Operational controls can include:

• Access control
• Patrols
• Visitor management
• Site instructions
• Security monitoring
• Communication
• Contractor control
• Incident response
• Asset protection

Incident Management

Security organizations should have processes for reporting, investigating and responding to relevant incidents.

Records can help demonstrate:

• What happened
• When it happened
• Who responded
• Actions taken
• Customer communication
• Corrective action
• Lessons learned

Monitoring, Internal Audit and Management Review

The organization should monitor the performance of its Security Operations Management System.

This can include:

• Performance indicators
• Security incidents
• Customer feedback
• Internal audits
• Corrective actions
• Management reviews
• Improvement opportunities

Customer and Tender Requirements for ISO 18788

This is one of the most important considerations before beginning certification.

A Saudi security company may encounter requirements such as:

• ISO 18788 certification
• Accredited certification
• ICoCA Certification
• Certification through a specified Certification Body
• Security risk assessments
• Guard competency records
• Training records
• Insurance
• Incident-management procedures
• Emergency procedures
• CCTV controls
• Access-control procedures
• Contractor controls
• Security performance records

The company should review the customer's tender or contract before selecting its certification route.

This helps prevent a situation where the organization obtains an ISO 18788 certificate but later discovers that the customer requires an additional accreditation, Certification Body acceptance or ICoCA certification.

ICoCA and ISO 18788 Certification in Saudi Arabia

ICoCA is particularly relevant to private security companies whose international customers require responsible-security certification.

ICoCA currently recognizes ISO 18788 as one of the standards used within its certification framework for companies providing security services on land.

The other standards identified by ICoCA include PSC.1 and ISO 28007.

Is ISO 18788 the Same as ICoCA Certification?

No.

This distinction should be clearly understood by Saudi security companies.

ISO 18788 certification demonstrates conformity with the applicable ISO 18788 requirements.

ICoCA Certification is a separate certification framework operated by the International Code of Conduct Association.

Therefore:

ISO 18788 Certification does not automatically equal ICoCA Certification.

Where an international customer specifically requests ICoCA Certification, the company should follow the applicable ICoCA requirements in addition to obtaining certification to a recognized standard.

ICoCA Accepted Certification Body Requirement

The Certification Body is particularly important when ICoCA Certification is part of the customer's requirement.

ICoCA states that it does not accept certification from every Certification Body.

Its published acceptance framework includes routes involving:

• Accreditation to an ICoCA-recognized standard by a qualifying Global ACI MRA signatory; or
• Accreditation to ISO/IEC 17021 by a qualifying Global ACI MRA signatory followed by the applicable ICoCA competency checks.

ICoCA also states that a Certification Body accredited to ISO 18788 must additionally be accredited to ISO 17021.

Therefore, a security company should verify the current ICoCA acceptance status and accreditation arrangement before selecting a Certification Body where ICoCA Certification is required.

Why Accreditation Matters for ICoCA

When a customer says:

“We require ICoCA-approved ISO 18788 certification.”

the security company should clarify exactly what the customer expects.

The company should determine:

• Is ISO 18788 certification required?
• Is ICoCA Certification required?
• Must the Certification Body be accepted by ICoCA?
• Does the Certification Body have appropriate accreditation?
• Does the accreditation cover ISO 18788?
• Does the certification route satisfy the customer's tender?

This is particularly important for international security contracts.

ISO 18788 Certification Process in Saudi Arabia

Step 1 – Review the Customer or Tender Requirement

Determine why certification is required.

The requirement may originate from:

• A customer
• Tender
• International contractor
• Supplier qualification
• Corporate policy
• Risk-management requirement
• ICoCA requirement

Step 2 – Define the Certification Scope

Define the security services, locations and activities that will be covered.

For example:

Private security guarding and security operations for industrial and commercial facilities in Riyadh and the Eastern Province.

The actual scope should accurately represent the organization's operations.

Step 3 – Identify Saudi Legal and Other Requirements

Identify applicable:

• Laws
• Regulations
• Licences
• Customer requirements
• Contractual obligations
• Industry requirements

Step 4 – Conduct Security Risk Assessment

Evaluate risks associated with:

• Sites
• Personnel
• Customers
• Security operations
• Assets
• Contractors
• Emergencies
• Locations

Step 5 – Establish the Security Operations Management System

Develop applicable:

• Security policy
• Objectives
• Procedures
• Operational controls
• Responsibilities
• Competence requirements
• Communication processes
• Incident-management processes
• Monitoring arrangements

Step 6 – Implement the System

Evidence should demonstrate that the system operates in practice.

Examples include:

• Training records
• Security instructions
• Patrol records
• Incident reports
• Inspection records
• Customer communications
• Risk assessments
• Corrective-action records

Step 7 – Conduct Internal Audit

Evaluate whether the Security Operations Management System is implemented and effective.

Step 8 – Conduct Management Review

Management should review relevant performance information, including:

• Audit results
• Incidents
• Customer feedback
• Performance indicators
• Risks
• Corrective actions
• Changes in requirements
• Improvement opportunities

Step 9 – Certification Audit

The Certification Body conducts the applicable certification audit against ISO 18788.

Step 10 – Correct Nonconformities

Where findings are raised, the organization should investigate their causes and implement appropriate corrective action.

Step 11 – Certification Decision

Following completion of the applicable audit and review process, certification can proceed according to the Certification Body's procedures.

Step 12 – Maintain Certification

The organization should continue:

• Monitoring
• Internal auditing
• Management review
• Security-risk assessment
• Training
• Incident analysis
• Corrective action
• Continual improvement

ISO 18788 Certification Cost in Saudi Arabia

There is no single fixed ISO 18788 certification cost for every Saudi security company.

The quotation can depend on:

• Number of employees
• Number of security personnel
• Number of sites
• Number of branches
• Certification scope
• Security activities
• Geographic coverage
• Operational complexity
• Shift arrangements
• Existing management systems
• Audit duration
• Customer requirements

A small security company operating from one location will normally have different certification requirements from a large security provider operating across multiple Saudi cities.

What Can Increase Certification Cost?

Cost can increase when the scope includes:

• Multiple locations
• Large numbers of employees
• Multiple shifts
• Complex security operations
• High-risk industrial sites
• Multiple customer locations
• Extensive outsourced processes

Where ICoCA Certification is also required, the organization should consider the separate ICoCA requirements and associated process rather than assuming they are automatically included within ISO 18788 certification.

ISO 18788 Certification in Riyadh

Riyadh is a major market for private security services.

Potential customer sectors include:

• Government contractors
• Banks
• Corporate offices
• Hospitals
• Hotels
• Construction
• Infrastructure
• Retail
• Major development projects

Security companies operating in Riyadh can use ISO 18788 to demonstrate a structured approach to managing security operations.

ISO 18788 Certification in Jeddah

Jeddah has significant commercial, logistics, healthcare, hospitality and industrial activity.

Security providers may serve:

• Commercial facilities
• Hotels
• Hospitals
• Warehouses
• Logistics facilities
• Industrial organizations
• Corporate customers
• Major projects

ISO 18788 can provide a structured management framework for these operations.

ISO 18788 Certification in Dammam and the Eastern Province

Dammam and the Eastern Province are particularly important for industrial, energy, logistics and commercial security operations.

Relevant business areas include:

• Dammam
• Al Khobar
• Dhahran
• Jubail
• Ras Tanura
• Ras Al Khair
• Al Ahsa

Security providers serving these locations may encounter customer requirements for systematic security management and documented operational controls.

ISO 18788 Certification in Dhahran

Dhahran's energy and corporate environment can create significant security-management requirements.

Security providers may need controls covering:

• Access control
• Site protection
• Personnel competence
• Contractor access
• Incident management
• Emergency response
• Security monitoring

ISO 18788 Certification in Jubail

Jubail is an important industrial and petrochemical location.

Security companies serving industrial facilities may need systematic controls for:

• Restricted areas
• Personnel access
• Contractor management
• Patrols
• Incident response
• Asset protection
• Emergency situations

ISO 18788 Certification in Yanbu

Yanbu's industrial and logistics environment can create requirements for structured facility security.

Potential applications include:

• Industrial security
• Facility protection
• Access control
• Contractor management
• Asset protection
• Logistics security

ISO 18788 Certification in Makkah and Madinah

Security operations in Makkah and Madinah can involve complex hospitality, healthcare, transportation and commercial environments.

Security providers may require controls for:

• Visitor management
• Access control
• Hotels
• Healthcare facilities
• Events
• Commercial facilities
• Emergency response

The applicable controls should be determined according to the individual customer's operational requirements.

ISO 18788 for Oil and Gas Security Companies

Oil and gas security is a significant potential application of ISO 18788 in Saudi Arabia.

Security providers may be responsible for:

• Perimeter security
• Access control
• Vehicle control
• Contractor access
• Patrols
• Incident response
• Restricted areas
• Asset protection

The Eastern Province, Dhahran, Dammam, Jubail and Ras Tanura are particularly relevant operating environments.

ISO 18788 for Petrochemical Security

Petrochemical facilities can involve:

• Critical infrastructure
• High-value assets
• Restricted areas
• Large contractor populations
• Multiple shifts
• Complex access requirements

ISO 18788 can provide a structured management framework for security providers serving these facilities.

ISO 18788 for Banks in Saudi Arabia

Security services for financial institutions can involve:

• Guarding
• Access control
• CCTV monitoring
• Emergency response
• Incident reporting
• Security personnel competence

Financial-sector security providers should consider applicable SAMA requirements together with ISO 18788 and customer-specific requirements.

ISO 18788 for Hospitals and Healthcare Security

Healthcare security operations can include:

• Emergency departments
• Restricted areas
• Visitor access
• Staff protection
• Patient-related areas
• Incident response
• Patrols
• CCTV
• Emergency situations

ISO 18788 can provide a structured management approach for security providers serving healthcare organizations.

ISO 18788 for Hotels

Hotels in Riyadh, Jeddah, Makkah, Madinah, Dammam and Al Khobar can require security controls covering:

• Guest protection
• Access control
• Visitor management
• Events
• Staff areas
• Parking
• Emergency response

The security provider can use ISO 18788 to establish consistent operational processes.

ISO 18788 for Logistics and Warehousing Security

Saudi logistics facilities can require security controls covering:

• Warehouses
• Distribution centres
• Cargo
• Vehicle access
• Fleet areas
• High-value goods
• Contractors
• Visitors

This makes ISO 18788 relevant to security providers serving logistics and supply-chain organizations.

ISO 18788 for Construction and Major Projects

Large Saudi construction and infrastructure projects can involve:

• Multiple contractors
• Large workforces
• Controlled access
• Valuable equipment
• Temporary facilities
• Vehicle management
• Remote locations
• Emergency response

Where a project specifies ISO 18788 or ICoCA Certification, the security contractor should confirm the exact tender requirements before selecting the certification route.

What Documents Are Needed for ISO 18788 Certification?

Depending on the organization's scope, evidence can include:

• Security policy
• SOMS scope
• Security risk assessments
• Legal register
• Customer requirements
• Security procedures
• Site security instructions
• Organization chart
• Roles and responsibilities
• Competence records
• Training records
• Incident reports
• Patrol records
• Inspection records
• Emergency procedures
• Contractor controls
• Monitoring records
• Internal audit records
• Management-review records
• Corrective-action records

The required documented information should be appropriate to the organization's actual risks and activities.

How to Choose an ISO 18788 Certification Body in Saudi Arabia

A security company should not select a Certification Body solely on price.

Consider:

• Accreditation
• Certification scope
• ISO/IEC 17021 accreditation
• ISO 18788 competence
• Auditor competence
• Certification process
• Audit duration
• Geographic coverage
• Customer acceptance
• ICoCA requirements where applicable

If an international customer requires ICoCA Certification, verify the Certification Body's current ICoCA acceptance status before signing the certification agreement.

How to Get ISO 18788 Certification with SCS

Organizations considering ISO 18788 certification should first establish their actual business and customer requirements.

When contacting SCS, provide:

• Company name
• Security activities
• Saudi locations
• Number of employees
• Number of security personnel
• Number of sites
• Customer sector
• Existing certifications
• Tender requirements
• Whether ICoCA Certification is required
• Any specified Certification Body or accreditation requirement

This information helps determine the appropriate certification scope and certification route.

Get ISO 18788 Certified in Saudi Arabia with SCS

If your Saudi security company is being asked for ISO 18788 certification, accredited certification, ICoCA Certification or a recognized security-management system, it is important to establish the customer's exact requirement before starting the certification process.

SCS can discuss the applicable certification scope, security activities, locations, audit requirements and customer requirements.

Request ISO 18788 certification information from SCS:

http://www.scscertification.com/contactus.php