Business Security

The responsibility for the implementation of protective security measures following a vulnerability and risk assessment may fall on an individual site owner/manager, an area manager or business development manager with a security remit within a larger organisation. The person responsible for security must have sufficient authority to direct the action taken in response to a security threat. He or she must be involved in the planning of the sites exterior security, access control, contingency plans etc, so that the terrorism dimension is taken into account.

The responsible person must similarly be consulted over any new building or renovation work, so that counter terrorism specifications, e.g. concerning access control, glazing and physical barriers can be factored in, taking into account any Health & Safety and planning regulations as well as the Fire Safety Order 2005.

This person should already have responsibility for most if not all of the following key areas:

• the production of the security plan based on the risk assessment
• the formulation and maintenance of a search plan
• the formulation and maintenance of other contingency plans dealing with bomb threats, suspect packages and evacuation
• liaising with the police, other emergency services and local authorities
• arranging staff training, including his/her own deputies and conducting briefings/ debriefings
• conducting regular reviews of the plans.

The Vulnerability Self Assessment Tool (VSAT) will help you identify and assess areas of vulnerability and also provide guidance on how to mitigate any vulnerabilities. Contact your local CTSA (see Contact Us) who can register you as user of VSAT.

For independent and impartial counter terrorism advice and guidance that is site specific, the responsible person, (which may be the Security Manager), should establish contact with the local police Counter Terrorism Security Adviser (CTSA). Most UK Police Forces have at least two CTSAs.

Your CTSA can:

• help you assess the threat, both generally and specifically
• give advice on physical security equipment and its particular application to the methods used by terrorists; your CTSA will be able to comment on its effectiveness as a deterrent, as protection and as an aid to post-incident investigation
• facilitate contact with emergency services and local authority planners to develop appropriate response and contingency plans
• identify appropriate trade bodies for the supply and installation of security equipment
• offer advice on search plans.

Creating your Security Plan 

The responsible person should aim to produce a plan that has been fully exercised, and which is regularly audited to ensure that it is still current and workable.

Before you invest in additional security measures, review what is already in place, including known weaknesses such as blind spots in your CCTV system.

When creating your security plan, consider the following:

• details of all the protective security measures to be implemented, covering physical, information and personnel security
• instructions on how to respond to a threat (e.g. telephone bomb threat)
• instructions on how to respond to the discovery of a suspicious item or event
• a search plan
• evacuation plans and details on securing your premises in the event of a full evacuation
• your business continuity plan
• a communications and media strategy which includes handling enquiries from concerned family and friends.

You should also be familiar with the advice contained in the 'Fire Safety Risk Assessment – Small and Medium Places of Assembly' (3.3MB PDF) and ‘Fire Safety Risk Assessment – Large Places of Assembly’ (2.1MB PDF) guidance documents.

Your planning should incorporate the seven key instructions applicable to most incidents:

1. Do not touch suspicious items
2. Move everyone away to a safe distance
3. Prevent others from approaching
4. Communicate safely to staff, visitors and the public
5. Use hand-held radios or mobile phones away from the immediate vicinity of a suspect item, remaining out of line of sight and behind hard cover
6. Notify the police
7. Ensure that whoever found the item or witnessed the incident remains on hand to brief the police.

Effective security plans are simple, clear and flexible but must be compatible with existing plans, e.g. evacuation plans and fire safety strategies. Everyone must be clear about what they need to do in response to a particular incident. Once made, your plans must be reviewed and tested regularly.