SO 18788 Certifications Requirements in UAE – Get Certified with SCS
Contact SCS for ISO 18788 Certification in UAE
ISO 18788 requirements in UAE are increasingly relevant to private security companies, security contractors, facility-management organizations, government contractors, infrastructure projects, logistics providers, Oil & Gas companies and other organizations managing professional security operations.
ISO 18788:2015 provides a framework for establishing, implementing, operating, monitoring, reviewing, maintaining and improving a Security Operations Management System (SOMS). It provides a structured approach to security operations while addressing applicable requirements, risk management, accountability and responsible security practices.
For UAE organizations, ISO 18788 should be considered together with applicable UAE legislation, Emirate-level regulatory requirements, customer specifications, tender conditions and contractual requirements.
Where an international customer specifically requires ICoCA Certification, the organization must also consider the applicable ICoCA requirements and the status of the Certification Body used for the external certification.
Organizations looking for the dedicated certification service can visit ISO 18788 Certification in UAE – SCS.
What Are ISO 18788 Requirements in UAE?
ISO 18788 establishes requirements and guidance for a Security Operations Management System.
The objective is to provide a structured management framework through which security operations can be planned, implemented, controlled, monitored and continually improved.
A UAE organization's ISO 18788 system should reflect its actual:
- Security services
- Operating locations
- Customers
- Contracts
- Security personnel
- Operational risks
- Legal obligations
- Regulatory requirements
- Subcontractors
- Security activities
- Performance requirements
A generic security manual does not automatically demonstrate conformity with ISO 18788.
The management system should operate within the organization's actual security activities.
For organizations moving from requirements to certification, the SCS service page provides information about its ISO 18788 certification offering across Abu Dhabi, Dubai, Sharjah and the other Emirates.
ISO 18788:2015 and Current Standard Status
The applicable published standard is ISO 18788:2015, Management system for private security operations – Requirements with guidance for use.
Organizations implementing or maintaining ISO 18788 should use the applicable published requirements and consider applicable amendments.
The certification scope should be based on the organization's actual security activities rather than simply using a generic description of “security services.”
ISO 18788 Requirements vs UAE Legal Requirements
ISO 18788 is an international management-system standard.
UAE legislation establishes legal obligations.
Regulatory authorities establish applicable regulatory requirements.
Customers establish contractual requirements.
Tender documents establish procurement requirements.
These requirements can interact but should not be treated as the same thing.
For example:
- ISO 18788 provides the Security Operations Management System framework.
- UAE legislation establishes applicable legal obligations.
- Emirate-level authorities may establish additional security requirements.
- Customers may specify contractual security controls.
- Tenders may specify certification, licensing, personnel or operational requirements.
ISO 18788 certification should therefore not be represented as replacing a UAE security licence or government authorization.
ISO 18788 and UAE Private Security Company Requirements
Private security activities in the UAE are subject to applicable federal legislation and regulatory requirements.
A security organization should identify the legal requirements applicable to its activities and establish a method for maintaining relevant compliance information.
The distinction is important:
ISO 18788 certification demonstrates conformity of the defined management system with applicable ISO requirements.
Government licensing or regulatory approval authorizes regulated activities where such authorization is required.
A company may therefore need both.
ISO 18788 Requirements for Dubai Security Companies
Dubai has a specific regulatory environment for security activities.
Organizations operating security services in Dubai should determine the SIRA and other regulatory requirements applicable to their activities.
Depending on the organization, relevant requirements may concern:
- Security-company activities
- Security personnel
- Security systems
- Training
- Operational controls
- Site requirements
- Documentation
- Customer requirements
ISO 18788 should complement applicable Dubai regulatory requirements rather than replace them.
ISO 18788 Certification in Dubai
ISO 18788 can be relevant to security operations supporting:
- Dubai Mainland
- Jebel Ali
- JAFZA
- Business Bay
- Al Quoz
- Dubai South
- Dubai Silicon Oasis
- Dubai Healthcare City
- Commercial buildings
- Residential communities
- Hotels
- Industrial facilities
- Warehouses
- Construction sites
The certification scope should identify the organization's actual security activities and applicable locations.
ISO 18788 Requirements in Abu Dhabi
Abu Dhabi has significant demand for security operations across:
- Oil and Gas
- Energy
- Infrastructure
- Construction
- Industrial facilities
- Logistics
- Warehousing
- Government-related projects
- Commercial properties
- Hospitality
Relevant business areas can include Abu Dhabi City, Mussafah, ICAD, KEZAD and Al Ain.
Security contractors should identify customer, regulatory and operational requirements before defining the ISO 18788 certification scope.
ISO 18788 Requirements in Sharjah
Security operations in Sharjah may support:
- Manufacturing
- Industrial facilities
- Warehouses
- Commercial buildings
- Education
- Construction
- Logistics
- Hospitality
The SOMS should reflect actual security operations rather than simply the company's trade licence.
ISO 18788 Requirements in Ajman
Organizations operating in Ajman Mainland, Ajman Free Zone, Al Jurf and industrial areas may require structured security controls for commercial, industrial and logistics operations.
The organization should identify security risks, personnel responsibilities, customer requirements and applicable legal obligations.
ISO 18788 Requirements in Ras Al Khaimah
Ras Al Khaimah has substantial industrial, manufacturing, hospitality, logistics and construction activity.
Security contractors supporting these sectors may encounter customer requirements for:
- Security risk assessment
- Security procedures
- Competence
- Training
- Incident management
- Performance monitoring
- Management-system certification
ISO 18788 Requirements in Fujairah
Fujairah's port, logistics, industrial, construction and hospitality activities can generate security-management requirements.
Organizations should define their ISO 18788 scope around the security services actually provided.
ISO 18788 Requirements in Umm Al Quwain
Security organizations operating in Umm Al Quwain can consider ISO 18788 where it is relevant to customer contracts, operational risks, security activities or business requirements.
ISO 18788 Customer Requirements in UAE
Customer requirements are one of the strongest commercial drivers for ISO 18788 certification.
A customer may require a security contractor to demonstrate a controlled management system before awarding a contract.
Customer requirements may include:
- ISO 18788 certification
- Security policy
- Risk assessment
- Security plans
- Training records
- Competence records
- Personnel records
- Incident reporting
- Emergency procedures
- Performance indicators
- Internal audit
- Corrective action
- Legal compliance
- Contractor controls
- Management review
- Accreditation
- ICoCA Certification
- Certification through an ICoCA-accepted Certification Body
The exact requirement depends on the contract.
Therefore, a UAE security company should obtain and review the customer's specification before finalizing its certification scope.
ISO 18788 Tender Requirements in UAE
Tender requirements should be assessed separately from ISO requirements.
A tender may require:
- ISO 18788 certificate
- Current certificate
- Accredited certification
- Specific certification scope
- Minimum experience
- Security personnel qualifications
- Training
- Regulatory approvals
- Insurance
- Security procedures
- Incident management
- Performance reporting
- ICoCA Certification
- An ICoCA-accepted Certification Body
A company should not assume that any ISO 18788 certificate automatically satisfies every tender.
The tender wording should be compared with the proposed certification scope before certification begins.
ISO 18788 Certification and ICoCA Requirements for UAE Security Companies
For some UAE private security companies, particularly those targeting international customers and major security contracts, ISO 18788 may be connected with an additional ICoCA Certification requirement.
ICoCA currently recognises ISO 18788 as one of the standards that can be used within its certification framework for private security companies.
This creates an important distinction:
ISO 18788 certification is not automatically the same as ICoCA Certification.
Where a customer specifically requires ICoCA Certification, the organization must meet the applicable ICoCA requirements in addition to obtaining the relevant external certification.
ICoCA also requires the relevant external certification to be issued through an ICoCA-accepted Certification Body.
Therefore, a UAE security company should determine the customer's exact requirement before selecting its Certification Body.
What Is an ICoCA-Accepted Certification Body?
An ICoCA-accepted Certification Body is a Certification Body that meets ICoCA's applicable requirements for certification used within the ICoCA certification framework.
Customers sometimes use the phrase “ICoCA-approved CB,” but the terminology used by ICoCA is ICoCA-accepted Certification Body.
Where ICoCA is a customer requirement, the company should verify the Certification Body's current acceptance status and applicable accreditation route.
Why Do UAE Customers Require an ICoCA-Accepted Certification Body?
International customers may include ICoCA requirements in their supplier qualification or security-contract conditions.
This can be particularly relevant to UAE security companies working with:
- International corporations
- Multinational companies
- Oil and Gas organizations
- Energy companies
- Infrastructure contractors
- Construction companies
- Logistics organizations
- Humanitarian organizations
- International organizations
- Government-related projects
- High-value industrial facilities
- International security-service contracts
The customer may therefore be asking not simply:
“Do you have ISO 18788?”
but:
“Do you have ISO 18788 certification through a Certification Body that satisfies our ICoCA requirement?”
ISO 18788 Accreditation Requirements for ICoCA Certification
Accreditation becomes particularly important where a customer specifies an ICoCA-related certification route.
ICoCA identifies accreditation routes involving eligible Global ACI MRA signatories.
ICoCA also identifies accreditation bodies with schemes that accredit Certification Bodies to ISO 18788.
For an alternative route, a Certification Body may be accredited to ISO/IEC 17021 by an eligible Global ACI MRA signatory and complete the applicable ICoCA competency checks.
Therefore, a UAE security company should not reduce the requirement to simply:
“The Certification Body must have ISO 18788 accreditation.”
The more appropriate question is:
“Does the Certification Body have the applicable accreditation and ICoCA acceptance arrangement required by the customer or certification route?”
What Should a UAE Security Company Check Before Selecting an ISO 18788 Certification Body?
Before selecting a Certification Body, the organization should verify:
- Is ISO 18788 within the Certification Body's applicable scope?
- Is the Certification Body currently accepted by ICoCA where this is required?
- What accreditation route applies?
- Is the accreditation provided through an eligible accreditation arrangement?
- Does the certificate scope match the customer requirement?
- Does the customer require ISO 18788 only or ICoCA Certification?
- Does the tender specify an accredited Certification Body?
- Are the relevant UAE regulatory approvals maintained?
- Does the certification scope cover the required UAE locations?
- Does the certification cover the security activities being contracted?
- Are subcontracted security operations included where necessary?
- Does the customer have a specific certification deadline?
These checks should ideally be completed before certification begins.
ISO 18788 and International Security Contracts
The UAE is a major base for organizations providing security services to international customers.
A security company may operate in the UAE while providing services under contracts involving international:
- Oil and Gas companies
- Energy companies
- Construction groups
- Infrastructure contractors
- Logistics companies
- International corporations
- Humanitarian organizations
- Industrial organizations
Where those contracts specify ICoCA Certification, ISO 18788 can become an important component of the certification pathway.
The customer requirement should always be reviewed before certification scope is finalized.
ISO 18788 Requirements for Private Security Operations
Depending on its scope, a private security organization may provide:
- Manned guarding
- Access control
- Patrol services
- Security supervision
- Site protection
- Security monitoring
- Asset protection
- Security escort
- Incident response
- Event security
- Contract security management
The organization should determine how these services are planned, resourced, controlled and monitored.
ISO 18788 Security Risk Management Requirements
Security risks should be assessed according to actual operations.
Examples include:
- Unauthorized access
- Theft
- Violence
- Intrusion
- Property damage
- Security-control failure
- Communication failure
- Emergency situations
- Inadequate staffing
- Contractor risks
- Customer-site risks
- Operational disruption
- Regulatory non-compliance
The organization should implement controls appropriate to the identified risks.
ISO 18788 Requirements for Security Personnel
Personnel competence is an important part of effective security operations.
Competence management may consider:
- Job responsibilities
- Qualifications
- Experience
- Training
- Role-specific competence
- Site requirements
- Customer requirements
- Regulatory requirements
- Refresher training
- Performance evaluation
Where UAE regulations establish specific requirements for security personnel, those requirements should also be addressed.
ISO 18788 Training Requirements
Training should reflect the organization's security operations.
Relevant areas may include:
- Security procedures
- Access control
- Patrol procedures
- Incident reporting
- Emergency response
- Communication
- Site requirements
- Customer requirements
- Security equipment
- Code of conduct
- Applicable legal requirements
Training records can become important evidence during customer assessments and ISO certification audits.
ISO 18788 Operational Planning Requirements
Security operations should be planned based on:
- Customer requirements
- Security risks
- Site conditions
- Personnel
- Equipment
- Communication
- Emergency arrangements
- Security procedures
- Reporting requirements
- Regulatory obligations
- Performance requirements
The level of planning should reflect the complexity and risk of the operation.
ISO 18788 Incident Management Requirements
Security organizations should establish appropriate processes for handling relevant incidents.
Examples include:
- Unauthorized entry
- Theft
- Violence
- Security breaches
- Property damage
- Missing assets
- Emergency events
- Personnel incidents
- Customer complaints
- Operational failures
Incident information should be evaluated to identify corrective actions and opportunities for improvement.
ISO 18788 Requirements for Contractors and Suppliers
Security operations may depend on external providers.
Relevant providers can include:
- Security equipment suppliers
- Technology providers
- Security subcontractors
- Training providers
- Transport providers
- Maintenance contractors
- Specialist security providers
The organization should determine appropriate controls according to the effect of each external provider on security operations.
ISO 18788 for Oil and Gas Security Contractors
Oil and Gas security operations may involve:
- Restricted facilities
- High-value assets
- Remote locations
- Industrial infrastructure
- Contractor access
- Transportation
- Emergency situations
- High-consequence security risks
Security contractors may also face detailed prequalification and customer requirements.
ISO 18788 can provide a structured management framework, while project-specific Oil and Gas requirements remain applicable.
Where the customer requires ICoCA Certification, the ISO 18788 certification arrangement should also be checked against the customer's ICoCA requirement.
ISO 18788 for Infrastructure Projects
Infrastructure projects may involve multiple contractors, large workforces, valuable equipment and changing security conditions.
Security activities may include:
- Perimeter control
- Gate management
- Vehicle access
- Visitor management
- Equipment protection
- Night security
- Contractor access
- Incident reporting
The SOMS should be capable of controlling relevant security activities throughout the project.
ISO 18788 for Logistics and Warehousing
Security requirements in logistics may involve:
- Cargo
- Warehouses
- Distribution centres
- High-value goods
- Vehicle access
- Loading areas
- Restricted areas
- Visitors
- Contractors
ISO 18788 can be relevant where security services are provided under contractual arrangements.
ISO 18788 for Event Security
Event-security organizations may manage:
- Entry control
- Security personnel
- Restricted areas
- VIP areas
- Incident response
- Emergency coordination
- Security reporting
Customer requirements can be particularly detailed for major events, exhibitions, hotels and high-profile functions.
ISO 18788 for Facility Management Security
Facility-management companies may provide security as part of an integrated facilities contract.
Where security is included, the organization should clearly determine which security activities fall within the SOMS.
This can include:
- Security personnel
- Access control
- Patrols
- Visitor management
- Security monitoring
- Incident management
The certification scope should not automatically include unrelated FM services.
What Documents Are Needed for ISO 18788?
Depending on the scope, evidence may include:
- SOMS scope
- Security policy
- Organizational responsibilities
- Risk assessments
- Legal and regulatory information
- Customer requirements
- Security procedures
- Operational plans
- Competence records
- Training records
- Communication records
- Incident records
- Performance records
- Supplier records
- Internal audit records
- Management review records
- Corrective-action records
Where ICoCA Certification is required, relevant evidence should also be aligned with applicable ICoCA requirements and customer expectations.
Documentation should reflect actual operations rather than copied templates.
What Is Checked During an ISO 18788 Audit?
An auditor may evaluate:
- SOMS scope
- Security policy
- Organizational responsibilities
- Risk assessment
- Legal requirements
- Customer requirements
- Operational controls
- Personnel competence
- Training
- Incident management
- Performance monitoring
- Internal audit
- Management review
- Corrective actions
- Continual improvement
The assessment should correspond with the organization's defined certification scope.
How to Define an ISO 18788 Certification Scope
The certification scope should accurately describe the security activities being managed and assessed.
It may consider:
- Security services
- Locations
- Operational units
- Security activities
- Supporting functions
- Contracted operations
The scope should not claim activities that are not actually implemented or assessed.
If the customer requires ICoCA Certification, the certification scope should also be checked against the customer's ICoCA requirement before the Certification Body is selected.
ISO 18788 and Human Rights Responsibilities
ISO 18788 supports responsible security operations and accountability to applicable law and respect for human rights.
This is particularly relevant to organizations working on:
- Sensitive facilities
- Major infrastructure
- International projects
- High-value assets
- Public-facing environments
- High-risk operations
The organization should identify responsibilities relevant to its security activities and integrate them into the management system.
These considerations can also be important for organizations pursuing ICoCA Certification.
ISO 18788 and Other ISO Management Systems
Security companies may use ISO 18788 alongside other management systems where those standards address different organizational requirements.
For example:
- ISO 9001 – Quality Management
- ISO 45001 – Occupational Health and Safety
- ISO 27001 – Information Security
- ISO 22301 – Business Continuity
These standards should not be treated as substitutes for ISO 18788.
The appropriate combination depends on the organization's operations and customer requirements.
ISO 18788 Certification Cost in UAE
There is no universal ISO 18788 certification price.
Cost can depend on:
- Employee numbers
- Security personnel
- Locations
- Security services
- Operational complexity
- Multi-site arrangements
- Existing management systems
- Audit requirements
- Customer requirements
- Certification scope
- ICoCA-related requirements where applicable
A quotation should therefore be based on the actual certification scope.
Organizations can discuss their requirements directly through the SCS service page: ISO 18788 Certification Services in UAE.
How Long Does ISO 18788 Certification Take?
The timeline depends on:
- Organizational readiness
- Number of locations
- Number of employees
- Security-service complexity
- Existing management systems
- Documentation readiness
- Internal audit
- Management review
- Certification audit scheduling
- Customer deadlines
- ICoCA requirements where applicable
SCS's service page describes a structured certification route involving application review, Stage 1, Stage 2, certification decision and surveillance audits.
How to Prepare for an ISO 18788 Customer, Tender or ICoCA Requirement
A UAE security company can use this preparation sequence:
- Obtain the customer or tender specification.
- Confirm whether ISO 18788 is mandatory.
- Check the required certificate scope.
- Determine whether accreditation is specified.
- Determine whether ICoCA Certification is required.
- Determine whether an ICoCA-accepted Certification Body is required.
- Identify operating locations.
- Identify security activities.
- Identify UAE legal requirements.
- Identify applicable Emirate requirements.
- Review security personnel requirements.
- Conduct a gap assessment.
- Establish the SOMS.
- Implement operational controls.
- Conduct internal audit.
- Conduct management review.
- Confirm the Certification Body's applicable accreditation and acceptance status.
- Complete the certification assessment.
- Complete applicable ICoCA requirements where required.
Is ISO 18788 Mandatory in the UAE?
ISO 18788 should not be described as universally mandatory for every UAE business.
Whether certification is required depends on:
- Applicable regulations
- Customer contracts
- Tender requirements
- Supplier qualification
- Security operations
- Business objectives
- International customer requirements
- ICoCA requirements where applicable
A company may pursue ISO 18788 because a customer requires it, a tender specifies it, a contractor requests it, an international customer expects it, an ICoCA-related requirement applies, or the organization wants a structured security-management system.
Government licensing requirements remain separate where applicable.
Who Can Benefit from ISO 18788 in UAE?
ISO 18788 can be relevant to:
- Private security companies
- Security guarding companies
- Security contractors
- Facility-management companies
- Security-service providers
- Infrastructure security contractors
- Oil and Gas security contractors
- Industrial security providers
- Logistics security providers
- Warehouse security providers
- Event-security organizations
- Asset-protection companies
- Organizations managing contracted security operations
SCS's current ISO 18788 service page specifically identifies private security companies, facility-management companies, government contractors, Oil & Gas organizations, infrastructure projects and logistics and transportation companies among the sectors it serves.
ISO 18788 Requirements Across UAE Business Locations
Relevant markets include:
- Dubai
- Abu Dhabi
- Sharjah
- Ajman
- Ras Al Khaimah
- Fujairah
- Umm Al Quwain
- Al Ain
- Jebel Ali
- JAFZA
- Mussafah
- ICAD
- KEZAD
- Dubai South
- Industrial zones
- Logistics parks
- Commercial developments
- Hospitality locations
- Infrastructure projects
The location itself does not automatically create an ISO 18788 requirement. Applicable legal, regulatory, customer and operational requirements must be determined for the actual activity.
SCS states that its ISO 18788 certification service covers Abu Dhabi, Dubai, Sharjah and all Emirates.
How to Get ISO 18788 Certification in UAE with SCS
Organizations seeking ISO 18788 certification should first establish their actual requirement.
Useful information for an initial certification discussion includes:
- Company activity
- UAE location
- Number of employees
- Number of security personnel
- Number of locations
- Security services
- Customer requirement
- Tender requirement
- Existing ISO certifications
- Existing regulatory approvals
- ICoCA requirement, if applicable
- Required certification timeline
For the dedicated certification route, visit SCS ISO 18788 Certification in UAE.
Get Certified with SCS for ISO 18788 in UAE
If your organization has received an ISO 18788 requirement from a customer, main contractor, tender authority, international business partner or security-service buyer, the certification scope should be aligned with the actual requirement before implementation begins.
If the customer has specifically requested ICoCA Certification or certification through an ICoCA-accepted Certification Body, this requirement should be identified before selecting the certification arrangement.
SCS provides ISO 18788 certification services across the UAE, including Abu Dhabi, Dubai, Sharjah and other Emirates. Its published certification process includes application review, Stage 1 audit, Stage 2 audit, certification decision and surveillance audits.
Ready to discuss your ISO 18788 certification requirement?
View ISO 18788 Certification in UAE with SCS
http://www.scscertification.com/contactus.php
|
UAE |
Saudi Arabia |
UK |
Canada |
India |
|
SCS Certification6th Floor Salaam Bldg, Office 9 Al Marakib St, Al Danah, Zone 1,Abu Dhabi, UAE. |
SCS Certification (Partners)7713, King Abdulaziz Street, Al Dawasir, Dammam, 32416Kingdom of Saudi Arabia |
SCS CERTIFICATION EUROPE LIMITED Office 6996,58 Peregrine Road, Hainault, Ilford, Essex, United Kingdom IG6 3SZ. |
SCS Certification (E) Limited Oaklea Blvd, Brampton, ONL6Y 5A2, Canada. |
Chennai: Building bearing No.19/35, V 270,Situated on First Floor, Mount Road, Little Mount, Chennai – 600015, India. Bangalore: Bangalore, Karnataka, India. |
Need ISO Certification for Your Business?
Speak with our certification specialists to understand certification requirements, audit process, implementation timelines and accredited certification services.
