Introduction

Security personnel represent the frontline face of a company's Security Operations Management System (SOMS). Their actions directly impact client trust, community relations, and human rights outcomes. For this reason, ISO 18788 requires a structured process for the selection, screening, and vetting of personnel before they are authorized to perform security functions.

This process ensures that individuals deployed in security roles are competent, reliable, and aligned with the ethical and legal standards of the organization.

1. Selection of Personnel

The selection process must go beyond filling vacancies; it must strategically align human resources with the strategic, tactical, and operational objectives of the organization.

• Role Clarity: Each position must have a detailed job description outlining required skills, competencies, and ethical responsibilities.
• Competency Matching: Applicants should be evaluated against both technical competencies (e.g., surveillance, access control) and behavioural competencies (e.g., integrity, judgment, respect for human rights).
• Equal Opportunity: Recruitment must avoid discrimination based on race, gender, religion, or political affiliation, in line with human rights principles.

Outcome: The organization selects candidates who are both technically capable and ethically suitable for security roles.

2. Background Screening

Before employment, candidates must undergo rigorous screening to ensure they meet legal and ethical standards and pose no risk to clients, communities, or the company itself.

• Identity Verification: Checking official documents to confirm identity and eligibility to work.
• Criminal Record Checks: Ensuring candidates have no disqualifying criminal history, especially in areas such as violence, theft, fraud, or human rights violations.
• Employment History Verification: Confirming previous roles, responsibilities, and reasons for leaving.
• Reference Checks: Speaking to former employers or supervisors about character and reliability.
• Educational Verification (where applicable): Confirming qualifications required for specialized roles (e.g., IT security, investigations).

Outcome: Screening establishes a baseline of trustworthiness and legal compliance.

3. Vetting of Personnel

Vetting goes further than screening by assessing whether a candidate's values, behaviours, and risk profile align with the company's commitment to ISO 18788 and the Voluntary Principles on Security and Human Rights (VPSHR).

• Integrity Testing: Assessing honesty and ethical conduct through structured interviews or psychological profiling.
• Community and Human Rights Risks: Ensuring personnel have not been implicated in abuses, discriminatory behaviour, or misconduct.
• Security Risk Profiling: Identifying vulnerabilities (e.g., financial distress that could lead to corruption).
• Continuous Vetting: Periodic re-screening during employment to capture changes in risk profile.

Outcome: Vetting ensures ongoing suitability, protecting the organization from reputational and compliance risks.

Strategic, Tactical, and Operational Impact

• Strategic: Selection and vetting demonstrate to clients, regulators, and communities that the company prioritizes integrity and professionalism.
• Tactical: Managers can deploy trustworthy personnel, reducing operational risks.
• Operational: Guards and supervisors on the ground are competent, ethical, and authorized, reducing the likelihood of misconduct or rights violations.

Documentation and Audit Evidence

To prove compliance with ISO 18788, organizations must maintain:

• Selection Records: Job descriptions, recruitment advertisements, interview notes.
• Screening Records: Background checks, identity verification, criminal record reports.
• Vetting Records: Risk assessments, integrity tests, references, and continuous vetting logs.
• Authorization Documentation: Formal approvals before deployment.

Audit Evidence Reliability (AERM):

• Most reliable: Official police clearances, biometric verifications, documented references.
• Moderate: Signed declarations by candidates, supervisor endorsements.
• Least reliable: Verbal confirmations without supporting evidence.

Conclusion

Selection, background screening, and vetting of personnel form the first line of defence in risk management for security companies. By embedding rigorous processes, organizations ensure that only competent, ethical, and trustworthy individuals are deployed into sensitive roles.

This not only ensures compliance with ISO 18788 but also protects clients, communities, and the organization itself from risks associated with misconduct, corruption, or human rights violations.