Text Size a a PrintPrint this page

COUNTER-TERRORISM & STATE SECURITY: Security Planning

Guidelines

The following provides examples of security considerations that could be implemented in response to a change in the level of threat.

The guidelines are not exhaustive but provide a minimum basis from which further measures may be developed by specific industries.

Alert Level Security Considerations
Low
  • Identify the risks associated with the normal business operating environment, for example natural disasters and accidents.
  • Ensure a security audit is undertaken and security plans are developed which include:
    • procedures are in place to report any unusual activity or phone calls to local police
    • after-hours contact details of key personnel and a procedure to ensure that local police have access to the contact details
    • training staff, including contractors
    • develop facility bomb threat and evacuation procedures
    • designation of security controlled areas
    • implement effective access and identification controls, and
    • cleaning up facilities so they are easier to search and monitor.
  • Establish and communicate risk management philosophy including the development of a risk management plan that articulates the level of acceptable risk, beyond which risk must be managed.
  • Ensure a Business Continuity Plan has been developed.
  • Comply with State and Territory regulations in relation to dangerous goods.
  • Have the necessary systems, plans and processes in place to respond to increased levels of risk or threats.
  • Detect security breaches within 48 hours.
Medium

Includes considerations for Low plus:

  • Ensure all staff, including contractors are aware of the increased level, particularly those with key responsibilities.
  • Review delivery arrangements from suppliers.
  • Reinforce security practices and policies.
  • Increase vigilance using existing resources for suspicious people, items or vehicles eg check facility each 24 hour period.
  • Check warning and evacuation procedures.
  • Tighten access controls for people and vehicles, eg all visitors escorted.
  • Identification checks on entry and exit points.
  • Establish contact with local police.
  • Review location of, and access to, external rubbish skips, storage containers etc.
  • Review buildings and activities in adjacent buildings.
  • Have the necessary systems, plans and processes in place to respond to increased levels of risk or threats.
  • Ensure Business Continuity Plan has been tested and apparent shortfalls rectified.
  • Detect security breaches within 24 hours.
High

Includes considerations for Low and Medium, plus:

  • Ensure all staff, including contractors are aware of the increased level and measures being implemented.
  • Deploy additional security resources, particularly on entry/exit points.
  • Review delivery arrangements from suppliers.
  • Compulsory identification of staff, suppliers and visitors at all times.
  • Activate operations centre as required and consider preliminary activation of the Business Continuity Plan.
  • Heightened vigilance for unattended vehicles etc; eg check facility every 12 hours.
  • Review response procedures for suspicious articles being found.
  • Screening of packages, mail deliveries and external deliveries to facility.
  • Facilitate closer liaison with police and emergency services.
  • Have the necessary systems, plans and processes in place to respond to increased levels of risk or threats.
  • Detect security breaches within 12 hours.
Extreme

Includes considerations for Low, Medium and High plus:

  • Ensure all staff, including contractors are aware of the increased level and measures being implemented.
  • Continuous patrols of critical assets.
  • Review delivery arrangements from suppliers.
  • Consider service reduction.
  • Restrict access to essential personnel only.
  • Deploy resources to provide constant monitoring and guarding.
  • Implement perimeter security and restrict parking in the near vicinity.
  • Activate operations centre on a 24/7 basis.
  • Activate Business Continuity Plan.
  • Detect security breaches immediately.
Page last revised:3 Aug 2009