100+ Free PECB ISO 18788 Foundation Practice Questions

Prepare for the PECB Certificate Holder in ISO 18788 Foundation exam with instant access — no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

Not published Pass Rate

100+ Questions

100% Free

Loading practice questions...

Same family resources

Explore More PECB ISO Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

2026 Statistics

Key Facts: PECB ISO 18788 Foundation Exam

40 Questions

Official Exam Format

PECB List of Exams (Foundation exams)

60 Minutes

Exam Time Limit

PECB Training Catalog (Foundation exams: 1 hour)

70%

Passing Score

PECB Certification Rules

Closed Book

Exam Delivery Mode

PECB Exam Rules and Policies

3 Options

Answer Choices per Official PECB Multiple-Choice Question

PECB Candidate Handbooks

Clauses 4-10

ISO 18788:2015 Requirements Scope

ISO 18788:2015 Structure

September 2015

ISO 18788 Publication (ISO/TC 292)

ISO 18788:2015

No AMF

Foundation Certificates Require No Maintenance

PECB Certification Maintenance Policy

PECB ISO 18788 Foundation is PECB's entry-level credential for Security Operations Management Systems. The official exam consists of 40 closed-book multiple-choice questions in 60 minutes with a 70% passing score, testing SOMS fundamental concepts and the ISO 18788:2015 requirements across Clauses 4-10. This free bank uses four-option English MCQs as an independent study aid rather than a simulation of the exam's format.

Sample PECB ISO 18788 Foundation Practice Questions

Try these sample questions to test your PECB ISO 18788 Foundation exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1What is the full official title of ISO 18788:2015?

A.Security management systems — Guidelines for private security companies

B.Management system for private security operations — Requirements with guidance for use

C.Private security company operations — Code of practice for armed and unarmed services

D.Security operations — Specification for quality management in conflict zones

Explanation: ISO 18788:2015 is titled 'Management system for private security operations — Requirements with guidance for use'. It combines auditable requirements (Clauses 4 to 10) with guidance in its annexes in a single document.

2To which circumstances is ISO 18788 specifically applicable according to its Scope clause?

A.Any organization operating in circumstances where governance may be weak and the rule of law undermined due to human or naturally caused events

B.Private military and security companies operating during armed conflict, as defined by the Montreux Document from which the standard's obligations are drawn

C.Organizations providing general guarding services in stable jurisdictions, where the standard replaces national licensing requirements for the security industry

D.Organizations contracted by state law enforcement authorities to guard, transport or question persons under arrest or detention

Explanation: The Scope states the standard is specifically aimed at any organization operating in circumstances where governance may be weak and the rule of law undermined due to human or naturally caused events. It also notes the standard is not intended to place additional burdens on general guarding services outside these circumstances.

3In ISO 18788, what does the abbreviation SOMS stand for?

A.Security Organization Maturity Standard

B.Security operations management system

C.Standard for Overseas Military Services

D.System of Operational Monitoring for Security

Explanation: SOMS stands for security operations management system — the management system an organization uses to establish its security operations policy and objectives and the processes to achieve them.

4ISO 18788 states that its generic principles and requirements are intended to be incorporated into an organization's integrated management system based on which model?

A.The Plan-Do-Check-Act (PDCA) model

B.The Capability Maturity Model (CMM)

C.The Six Sigma DMAIC cycle

D.The COBIT governance framework

Explanation: The Scope specifies that the standard's principles and requirements are intended to be incorporated into any organization's integrated management system based on the Plan-Do-Check-Act (PDCA) model, and the Introduction describes the PDCA approach explicitly.

5Which statement best describes the Montreux Document referenced throughout ISO 18788?

A.A 2010 multi-stakeholder code that private security service providers sign, committing them to human-rights-based principles for their operations

B.A 2008 document on pertinent international legal obligations and good practices for States related to operations of private military and security companies during armed conflict

C.A 2011 United Nations framework implementing the 'Protect, Respect and Remedy' principles for business enterprises, including security providers

D.A 2008 Swiss and ICRC initiative establishing an independent association that certifies and monitors private security companies against agreed standards

Explanation: The Montreux Document (September 2008) records pertinent international legal obligations and good practices for States related to the operations of private military and security companies during armed conflict. Although addressed to states and armed conflict, ISO 18788 notes it is also instructive in similar conditions and for other entities.

6What is the International Code of Conduct for Private Security Service Providers (ICoC), as used by ISO 18788?

A.A 2010 multi-stakeholder code setting human-rights-based principles and commitments for private security service providers

B.A 2008 record of States' international legal obligations and good practices relating to private military and security companies during armed conflict

C.A binding international convention obliging signatory States to regulate and license private security providers operating on their territory

D.A 2000 voluntary initiative guiding extractive and energy companies on engaging public and private security while respecting human rights

Explanation: The ICoC (November 2010) is a multi-stakeholder initiative through which private security service providers commit to principles based on international human rights and humanitarian law. ISO 18788 requires the SOMS to implement the principles and commitments of the ICoC (4.4).

7The United Nations Guiding Principles on Business and Human Rights (2011), drawn on by ISO 18788, implement which framework?

A.The 'Protect, Respect and Remedy' framework

B.The 'Polluter Pays' framework

C.The 'Responsibility to Protect' doctrine

D.The 'Safe Harbor' data protection framework

Explanation: The UN Guiding Principles on Business and Human Rights (2011) implement the 'Protect, Respect and Remedy' framework: the state duty to protect, the corporate responsibility to respect human rights, and access to remedy for victims.

8Which voluntary initiative, referenced by ISO 18788, was launched in 2000 and focuses on security and human rights risks primarily for companies in the extractive and energy sectors?

A.The Voluntary Principles on Security and Human Rights

B.The Kimberley Process

C.The Extractive Industries Transparency Initiative

D.The OECD Guidelines for Multinational Enterprises only, with no security component

Explanation: The Voluntary Principles on Security and Human Rights (2000) guide companies — originally and chiefly in the extractive and energy sectors — on engaging public and private security while respecting human rights. ISO 18788's Introduction cites them among the voluntary commitments the standard helps demonstrate.

9Which earlier standard, listed in the ISO 18788 bibliography, provided the management-system foundation on which ISO 18788 was developed?

A.ANSI/ASIS PSC.1-2012, Management System for Quality of Private Security Company Operations

B.ISO 9001:2008, Quality management systems — Requirements

C.ISO/IEC 27001:2005, Information security management systems

D.OHSAS 18001:2007, Occupational health and safety management

Explanation: ANSI/ASIS PSC.1-2012 established a management system for the quality of private security company operations consistent with the Montreux Document and ICoC; ISO 18788 internationalized that approach. ISO 9001, ISO/IEC 27001 and OHSAS 18001 appear only as related management system standards in the bibliography.

10What is the role of the ICoCA (International Code of Conduct Association)?

A.It is the independent governance and oversight mechanism that promotes, governs and oversees implementation of the ICoC, including certification of member companies

B.It is the ISO technical committee responsible for developing and maintaining private security and resilience standards, including ISO 18788

C.It is the accreditation body that authorizes certification bodies to issue ISO 18788 certificates under ISO/IEC 17024

D.It is the intergovernmental forum through which States that endorsed the Montreux Document coordinate their regulation of private security companies

Explanation: The ICoCA, launched in 2013, is the independent governance and oversight association for the ICoC. It certifies member companies against recognized standards (including ISO 18788 and ANSI/ASIS PSC.1), monitors compliance, and handles complaints.

About the PECB ISO 18788 Foundation Exam

Entry-level certification validating knowledge of Security Operations Management Systems (SOMS) based on ISO 18788:2015, covering fundamental SOMS concepts, the Montreux Document, ICoC and UN Guiding Principles human rights framework, and the standard's requirement Clauses 4 through 10 including risk assessment with human rights risk analysis, use of force procedures, personnel vetting, weapons management, grievance mechanisms and incident management for private security operations in environments of weak governance.

Assessment

Two competency domains: Domain 1, fundamental principles and concepts of a Security Operations Management System (SOMS); Domain 2, Security Operations Management System (SOMS) requirements. PECB does not publish a per-domain question split for this exam; the published handbooks for PECB Foundation exams that use the same two-domain wording (ISO 9001 and ISO 37301) weight the requirements domain at 72.5%.

Time Limit

60 minutes

Passing Score

70%

Exam Fee

Included with PECB training course (exam and certificate fees included in course price; one free retake within 12 months). Standalone: US$500 Foundation exam plus US$200 certificate application fee (PECB)

PECB ISO 18788 Foundation Exam Content Outline

Foundational concepts (Day 1 of the official course)

Domain 1: Fundamental principles and concepts of a Security Operations Management System (SOMS)

SOMS purpose and applicability, PDCA, the Montreux Document, ICoC, UN Guiding Principles and Voluntary Principles, key definitions (risk, HRRA, incident, use of force continuum), Annex B principles and Annex E qualifiers

SOMS requirements (Day 2 of the official course)

Domain 2: Security Operations Management System (SOMS) requirements

ISO 18788:2015 Clauses 4-10: context and risk criteria, leadership and Statement of Conformance, risk assessment and HRRA, objectives and risk treatment, competence and communication, documented information, use of force, vetting, weapons management, incident and grievance management, performance evaluation, internal audit, management review and improvement

How to Pass the PECB ISO 18788 Foundation Exam

What You Need to Know

Passing score: 70%
Assessment: Two competency domains: Domain 1, fundamental principles and concepts of a Security Operations Management System (SOMS); Domain 2, Security Operations Management System (SOMS) requirements. PECB does not publish a per-domain question split for this exam; the published handbooks for PECB Foundation exams that use the same two-domain wording (ISO 9001 and ISO 37301) weight the requirements domain at 72.5%.
Time limit: 60 minutes
Exam fee: Included with PECB training course (exam and certificate fees included in course price; one free retake within 12 months). Standalone: US$500 Foundation exam plus US$200 certificate application fee

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

PECB ISO 18788 Foundation Study Tips from Top Performers

1Memorize the clause map: 4 Context, 5 Leadership, 6 Planning, 7 Support, 8 Operation, 9 Performance evaluation, 10 Improvement — and map them to PDCA (Plan 4-7, Do 8, Check 9, Act 10)

2Know the normative quartet cold: Montreux Document (2008, states and armed conflict), ICoC (2010, private security service providers), UN Guiding Principles (2011, Protect-Respect-Remedy), plus the Voluntary Principles (2000) — and that Clause 4.4 requires the SOMS to implement ICoC principles

3Master distinctive ISO 18788 artifacts: the Statement of Conformance (5.1.2, public and top-management endorsed) and the Statement of Applicability (4.3, driven by risk assessment and human rights impact analysis)

4Focus on the operational core in Clause 8: use of force rules (RUF, continuum, lethal force only under necessity), weapons authorization (written, weapon-specific), vetting (no under-18s in armed duties), and incident/grievance/whistle-blower mechanisms

5Remember the retention rules: employment and service records minimum seven years (7.5.3); incident and non-conformance records minimum seven years (8.8.2); use-of-force training every 12 months (8.3.7); exercises at least annually (9.1.3)

6Distinguish correction (treating the immediate nonconformity) from corrective action (eliminating the root cause to prevent recurrence) — Clause 10.1 requires both

Frequently Asked Questions

What is the PECB ISO 18788 Foundation exam format?

The official PECB ISO 18788 Foundation exam consists of 40 multiple-choice questions completed in 60 minutes. Foundation exams are closed-book, delivered online (proctored) or paper-based through PECB partners, and the passing score is 70%. PECB does not publish a candidate handbook for ISO 18788 Foundation, so candidates should confirm the current format via the List of PECB Exams.

What topics are covered on the PECB ISO 18788 Foundation exam?

The exam covers two competency domains: Domain 1, fundamental principles and concepts of a Security Operations Management System (SOMS); and Domain 2, SOMS requirements based on ISO 18788:2015 Clauses 4 through 10. PECB does not publish a per-domain question split for this exam.

What is ISO 18788?

ISO 18788:2015, 'Management system for private security operations — Requirements with guidance for use', is the international management system standard for organizations conducting or contracting private security operations, particularly where governance may be weak or the rule of law undermined. Published in September 2015 by ISO/TC 292, it provides a business and risk management framework demonstrating accountability to law and respect for human rights, implementing the Montreux Document, the ICoC and the UN Guiding Principles on Business and Human Rights.

Are there prerequisites for taking the PECB ISO 18788 Foundation exam?

PECB lists no education or experience prerequisites, and the Foundation credential requires no professional, audit, or project experience. PECB's certificate requirements table for ISO 18788 Foundation names only two conditions: pass the PECB ISO 18788 Foundation exam and sign the PECB Code of Ethics. The 2-day, 14-CPD training course is the usual route and bundles the exam and certificate fees, but candidates may take the exam without attending a course.

How much does the PECB ISO 18788 Foundation exam cost?

Certificate and examination fees are included in the price of the PECB training course, and candidates who fail can retake the exam once for free within 12 months, so the total depends on the partner and delivery format chosen. PECB separately publishes a US$500 Foundation exam fee and a US$200 certificate application fee for candidates buying the exam on its own.

Is this practice test the official PECB exam?

No. OpenExamPrep provides free English multiple-choice practice questions as an independent study aid. It is not affiliated with PECB, does not replace official training materials, and is not the live certificate exam. The official exam uses 40 three-option questions in 60 minutes; this bank uses 100 four-option questions with no time limit, so it is a knowledge study aid rather than a simulation of the exam format.

100+ Free PECB ISO 18788 Foundation Practice Questions

Explore More PECB ISO Certifications

PECB ISO 14001 Lead Auditor (Environmental Management)

PECB ISO 9001 Lead Auditor (Quality Management)

PECB Certified ISO 31000 Risk Manager

PECB ISO 45001 Lead Auditor (OH&S Management)

PECB ISO 22301 Lead Implementer (Business Continuity)

PECB ISO 45001 Foundation (OH&S Management)