Question 1

Which of the following describes the primary objective of ISO 18788 regarding Security Operations Management Systems (SOMS)?

Accepted Answer

To provide a framework for organizations to demonstrate their commitment to legal and human rights obligations during security operations.

Answer

To provide a universal pricing index for private military contracting services globally.

Answer

To standardize the specific architectural layouts for high-security detention facilities.

Answer

To establish technical specifications for the internal circuitry of biometric access control hardware.

Question 2

In the context of ISO 18788, which management principle is central to the iterative process of 'establishing, implementing, operating, monitoring, reviewing, maintaining, and improving' the SOMS?

Accepted Answer

The Plan-Do-Check-Act (PDCA) cycle

Answer

The Six Sigma DMAIC framework

Answer

The Agile Scrum sprint cycle

Answer

The Waterfall methodology

Question 3

ISO 18788 requires organizations to conduct a formal assessment of specific risks related to security operations. Which risk category is uniquely emphasized in this standard compared to traditional security standards?

Accepted Answer

The impact of security operations on human rights and the local community.

Answer

The physical durability of tactical gear in extreme weather conditions.

Answer

The volatility of international stock market exchange rates.

Answer

The bandwidth capacity of local wireless communication networks.

Question 4

According to the ISO 18788 framework, what must an organization's security operations policy specifically include as a core commitment?

Accepted Answer

A commitment to comply with applicable legal requirements and respect for human rights.

Answer

A commitment to outsourcing all liability to third-party insurance providers.

Answer

A commitment to using the maximum available force for all security escalations.

Answer

A commitment to prioritizing profit margins over operational risk mitigation.

Question 5

Under the ISO 18788 framework, what is required of an organization regarding the 'Use of Force' by its personnel?

Accepted Answer

The organization must establish and maintain a specific policy and procedures for the use of force, ensuring it is used only when necessary and in a proportionate manner.

Answer

The organization must delegate all decisions regarding force to local militia or non-regulated third parties.

Answer

The organization is exempt from local law enforcement regulations as long as they follow internal ISO guidelines.

Answer

The organization must ensure all personnel are equipped with lethal weapons regardless of the local risk environment.

Question 6

Which of the following describes the relationship between ISO 18788 and the International Code of Conduct for Private Security Service Providers (ICoC)?

Accepted Answer

ISO 18788 provides a management system framework to implement and demonstrate the principles established in the ICoC.

Answer

ISO 18788 refers only to cyber security, while the ICoC refers only to physical guards.

Answer

ISO 18788 was designed to contradict the ICoC in order to favor government agencies over private security firms.

Answer

ISO 18788 is a technical manual that replaces all legal requirements found in the ICoC.

Question 7

Which of the following elements is a mandatory requirement for 'Performance Evaluation' within the ISO 18788 framework?

Accepted Answer

Conducting internal audits at planned intervals to ensure the SOMS conforms to the organization's own requirements and the standard.

Answer

Ensuring that all security personnel possess an academic degree in international law.

Answer

The automatic outsourcing of all internal investigations to local law enforcement agencies.

Answer

Submitting weekly operational budget reports to the International Monetary Fund.

Question 8

Which of the following describes the 'Top Management' responsibilities under the ISO 18788 framework for a Security Operations Management System (SOMS)?

Accepted Answer

Ensuring that the security operations policy and objectives are established and compatible with the strategic direction of the organization.

Answer

Developing the proprietary source code for the organization's firewall and network security software.

Answer

Managing the personal social media accounts of all private security contractors.

Answer

Providing tactical ammunition counts for every individual guard post on a daily basis.

Question 9

In accordance with ISO 18788, when an organization performs a risk assessment for security operations, which of the following must be specifically identified and analyzed?

Accepted Answer

Potential impact on the safety and security of the local population and stakeholders.

Answer

The historical architectural significance of local government buildings.

Answer

The potential impact on the organization's public relations marketing budget.

Answer

The quarterly fluctuations in the global price of crude oil.

Question 10

Under ISO 18788, which of the following is a specific requirement for the 'Competence' of personnel involved in security operations?

Accepted Answer

Ensuring that personnel are competent on the basis of appropriate education, training, and experience, including specific training on human rights and the use of force.

Answer

Mandating that all personnel pass a standardized physical fitness test designed for Olympic-level athletes.

Answer

Requiring that all security personnel have at least five years of prior service in a national military or police force.

Answer

Prohibiting the use of any personnel who do not hold a master's degree in international relations or criminal justice.

Question 11

An organization is currently in the 'Reviewing' stage of its Security Operations Management System (SOMS) using a scenario-based approach. If the organization is testing its response capabilities against a simulated high-impact supply chain breach to identify gaps between planned performance and actual results, which primary component of the PDCA (Plan-Do-Check-Act) cycle is being addressed?

Accepted Answer

Check

Answer

Act

Answer

Do

Answer

Plan

Question 12

During the 'Implementing' phase of a Security Operations Management System (SOMS), a security firm decides to use scenario-based training to simulate a 'hostile intrusion' at a client site. Which of the following best describes the primary goal of applying this scenario-based approach during the 'Do' stage of the management cycle?

Accepted Answer

To operationalize the security policy and transform theoretical controls into practical competencies through realistic application.

Answer

To perform a gap analysis solely for the purpose of identifying legal non-compliance before the system is active.

Answer

To conduct a final management review to decide on the annual budget for the security department.

Answer

To establish the initial scope, boundaries, and risk appetite of the security organization.

Question 13

An organization is utilizing a scenario-based approach to the 'Improving' (Act) stage of its Security Operations Management System (SOMS). After a scenario-based exercise revealed that a 'Civil Unrest' response plan failed due to communication silos, the management decides to re-allocate resources and update the incident protocols. This specific action is intended to achieve what outcome in a management system context?

Accepted Answer

Continual improvement of the SOMS effectiveness through corrective actions.

Answer

Defining the initial security policy and risk assessment criteria.

Answer

The static maintenance of existing controls to prevent any changes in procedures.

Answer

Purely documenting the failure of the exercise for external regulatory compliance without changing internal processes.

Question 14

When 'Establishing' a Security Operations Management System (SOMS) using a scenario-based approach, what is the primary purpose of identifying 'Maximum Foresight Scenarios' during the 'Plan' phase?

Accepted Answer

To define the context and risk criteria by anticipating plausible threats that could impact the achievement of security objectives.

Answer

To provide a final performance score for the security personnel after the system has been fully implemented.

Answer

To identify the specific insurance premiums that must be paid for each identified asset.

Answer

To replace the need for a formal risk assessment process with hypothetical storytelling.

Question 15

In the context of 'Maintaining' a Security Operations Management System (SOMS), an organization uses a scenario-based 'Stress Test' to determine if its security infrastructure can handle a prolonged multi-vector attack without degradation. According to the ISO series logic (e.g., ISO 18788 or ISO 28000), which activity best describes the purpose of this 'Maintenance' phase action?

Accepted Answer

Ensuring the continued suitability, adequacy, and effectiveness of the system under changing or extreme conditions.

Answer

The initial drafting of the security personnel's code of conduct and ethics policy.

Answer

Eliminating the need for periodic internal audits by relying on automated software logs alone.

Answer

The procurement of a one-time insurance policy for physical assets.

Question 16

An organization is in the 'Monitoring' phase of its Security Operations Management System (SOMS). To validate the efficacy of its detection capabilities, the team uses a 'Red Teaming' scenario where an external entity attempts to bypass physical and digital barriers without notice. This scenario-based activity is primarily designed to provide data for which of the following?

Accepted Answer

Performance evaluation and the measurement of control effectiveness against established security metrics.

Answer

The permanent removal of all physical security guards to save organizational costs.

Answer

The automatic dismissal of staff members who fail to detect the intrusion attempt.

Answer

The initial creation of the organization's mission and vision statements.

Question 17

When applying a scenario-based approach to the 'Operating' phase of a Security Operations Management System (SOMS), which of the following actions best illustrates the integration of scenario-derived insights into daily operations?

Accepted Answer

Adjusting manning levels and resource deployment patterns based on specific high-probability threat profiles identified during planning simulations.

Answer

Eliminating all risk assessment procedures in favor of reacting only to actual, live security incidents.

Answer

Conducting a post-mortem review once every five years to determine if the security policy is still relevant.

Answer

Defining the high-level legal and regulatory requirements that the organization must comply with before the system is designed.

Question 18

An organization is integrating a 'Scenario-Based Approach' into the 'Establishing' (Plan) phase of a Security Operations Management System (SOMS). If they are currently analyzing how a sudden 'Geopolitical Instability' event in a critical operational region could impact their supply chain security, they are primarily performing which part of the framework?

Accepted Answer

Contextualizing the organization and performing a risk assessment to define the scope of the SOMS.

Answer

Conducting a management review to certify the final audit results of the previous year.

Answer

Training security staff on how to use new surveillance hardware installed in the regional office.

Answer

Performing a corrective action to fix a failed communication protocol during a live protest.

Question 19

When implementing a scenario-based approach within the 'Monitoring' and 'Reviewing' stages of a Security Operations Management System (SOMS), which specific tool is most effective for visualizing the causal relationship between a threat scenario and the effectiveness of preventative and mitigative controls?

Accepted Answer

A Bow-tie analysis diagram

Answer

A cumulative frequency distribution of past incidents

Answer

A Gantt chart for project scheduling

Answer

A simple linear organizational chart

Question 20

An organization is in the 'Act' (Improving) stage of its Security Operations Management System (SOMS) after a scenario-based exercise revealed that its recovery time objective (RTO) during a simulated cyber-physical attack was exceeded. Which action specifically represents the 'Improving' component of the framework?

Accepted Answer

Updating the incident response procedures and re-training staff based on the lessons learned to close the performance gap.

Answer

Ignoring the exercise results because the attack was only a simulation and not a real event.

Answer

Suspending all security operations until a full external audit can be scheduled.

Answer

Documenting the current failure in a report without taking any subsequent action to modify the system.

Related quizzes

Related quizzes