Rules for the Use of Force (RUF) in Security Operations

Introduction

The Rules for the Use of Force (RUF) translate the high-level commitments in a Use of Force Policy into practical, actionable instructions for security personnel. They are the frontline application of ISO 18788's requirements for lawful, necessary, and proportionate use of force.

RUF provide clear escalation pathways, decision-making criteria, and accountability requirements so that force is applied only as a last resort, and always in ways that protect life, dignity, and human rights.

Purpose of RUF

  1. Clarity for Personnel - Ensure all security officers know when, how, and under what conditions they may use force.
  2. Consistency of Operations - Standardize responses across all sites and teams.
  3. Protection of Human Rights - Guarantee that actions align with VPSHR and UN Basic Principles on the Use of Force.
  4. Risk Management - Reduce the risk of legal, reputational, and contractual liabilities.
  5. Audit and Accountability - Provide traceable, documented evidence for every use-of-force incident.

Core Principles of RUF

  1. Legality
    • Force may only be used where permitted by national law and organizational policy.
    • RUF must align with contracts, licensing conditions, and international human rights obligations.
  2. Necessity
    • Force may only be applied when strictly necessary, after non-violent means have been attempted or deemed ineffective.
  3. Proportionality
    • The degree of force must be proportionate to the threat faced.
    • Lethal force is only justified when there is an imminent threat to life.
  4. Accountability
    • All uses of force must be reported, reviewed, and investigated.
    • Supervisors and managers are accountable for ensuring compliance with RUF.

Escalation Framework in RUF

The Rules for the Use of Force must outline a graduated escalation model:

  1. Presence - Deterrence through professional conduct, uniform, and posture.
  2. Verbal Commands - Clear, calm instructions, giving the subject an opportunity to comply.
  3. Physical Control - Minimal, non-violent restraint when necessary.
  4. Non-Lethal Means - Use of authorized tools (batons, shields, pepper spray, tasers), only by trained personnel.
  5. Lethal Force - Only as a last resort, to protect life from an imminent threat, and never for intimidation or punishment.

Operational Requirements for RUF

  1. Authorization and Control
    • Only trained, licensed, and authorized personnel may carry or use force-related equipment.
    • Firearms and other weapons must be logged, controlled, and reconciled daily.
  2. Training and Competence
    • All personnel must be trained in RUF, de-escalation, human rights, and rules of engagement.
    • Scenario-based training (e.g., protests, armed threats, crowd management) is mandatory.
  3. Incident Reporting and Documentation
    • Every use of force must be:
      • Immediately reported.
      • Documented with full details (time, place, nature of threat, escalation steps).
      • Supported by evidence (bodycam, CCTV, radio logs, witness statements).
  4. Investigation and Review
    • Independent review of all incidents to assess compliance with RUF.
    • Corrective and disciplinary actions must be documented and enforced.
  5. Integration with Risk and Human Rights
    • RUF must link to risk assessments (Clause 6.1) and human rights requirements (A.8.1.3).
    • Violations must feed into grievance procedures and risk registers for continual improvement.

Strategic, Tactical, and Operational Alignment

  • Strategic Level - Executives approve the RUF, ensuring compliance with ISO 18788, VPSHR, and local laws.
  • Tactical Level - Divisional managers ensure SOPs, training, and audits embed RUF into daily operations.
  • Operational Level - Guards and supervisors apply RUF during incidents, follow escalation steps, and document outcomes.

Documentation and Audit Evidence

Auditors will require:

  • Documented RUF - Accessible to all staff, signed and approved by leadership.
  • Training Records - Evidence that all staff have received RUF instruction and refresher training.
  • Incident Logs - Detailed records of each use-of-force event.
  • Investigation Reports - Findings on compliance or violation of RUF.
  • Corrective Actions - Documented disciplinary or system improvements.
  • Audit Logs - Evidence of management reviews and trend analysis.

Conclusion

The Rules for the Use of Force (RUF) are the operational lifeline of a security company's ethical and lawful conduct. By codifying legality, necessity, proportionality, and accountability into clear escalation pathways, RUF ensure that personnel act consistently, responsibly, and in line with human rights obligations.

For ISO 18788 compliance, RUF provide the documented framework, training, and audit trail needed to prove that force is always applied as a last resort, in the right way, and with full accountability.