COUNTER-TERRORISM & STATE SECURITY: Security Planning
Guidelines
The following provides examples of security considerations that could be implemented in response to a change in the level of threat.
The guidelines are not exhaustive but provide a minimum basis from which further measures may be developed by specific industries.
| Alert Level |
Security Considerations |
| Low |
- Identify the risks associated with the normal business operating environment, for example natural disasters and accidents.
- Ensure a security audit is undertaken and security plans are developed which include:
- procedures are in place to report any unusual activity or phone calls to local police
- after-hours contact details of key personnel and a procedure to ensure that local police have access to the contact details
- training staff, including contractors
- develop facility bomb threat and evacuation procedures
- designation of security controlled areas
- implement effective access and identification controls, and
- cleaning up facilities so they are easier to search and monitor.
- Establish and communicate risk management philosophy including the development of a risk management plan that articulates the level of acceptable risk, beyond which risk must be managed.
- Ensure a Business Continuity Plan has been developed.
- Comply with State and Territory regulations in relation to dangerous goods.
- Have the necessary systems, plans and processes in place to respond to increased levels of risk or threats.
- Detect security breaches within 48 hours.
|
| Medium
|
Includes considerations for Low plus:
- Ensure all staff, including contractors are aware of the increased level, particularly those with key responsibilities.
- Review delivery arrangements from suppliers.
- Reinforce security practices and policies.
- Increase vigilance using existing resources for suspicious people, items or vehicles eg check facility each 24 hour period.
- Check warning and evacuation procedures.
- Tighten access controls for people and vehicles, eg all visitors escorted.
- Identification checks on entry and exit points.
- Establish contact with local police.
- Review location of, and access to, external rubbish skips, storage containers etc.
- Review buildings and activities in adjacent buildings.
- Have the necessary systems, plans and processes in place to respond to increased levels of risk or threats.
- Ensure Business Continuity Plan has been tested and apparent shortfalls rectified.
- Detect security breaches within 24 hours.
|
| High |
Includes considerations for Low and Medium, plus:
- Ensure all staff, including contractors are aware of the increased level and measures being implemented.
- Deploy additional security resources, particularly on entry/exit points.
- Review delivery arrangements from suppliers.
- Compulsory identification of staff, suppliers and visitors at all times.
- Activate operations centre as required and consider preliminary activation of the Business Continuity Plan.
- Heightened vigilance for unattended vehicles etc; eg check facility every 12 hours.
- Review response procedures for suspicious articles being found.
- Screening of packages, mail deliveries and external deliveries to facility.
- Facilitate closer liaison with police and emergency services.
- Have the necessary systems, plans and processes in place to respond to increased levels of risk or threats.
- Detect security breaches within 12 hours.
|
| Extreme |
Includes considerations for Low, Medium and High plus:
- Ensure all staff, including contractors are aware of the increased level and measures being implemented.
- Continuous patrols of critical assets.
- Review delivery arrangements from suppliers.
- Consider service reduction.
- Restrict access to essential personnel only.
- Deploy resources to provide constant monitoring and guarding.
- Implement perimeter security and restrict parking in the near vicinity.
- Activate operations centre on a 24/7 basis.
- Activate Business Continuity Plan.
- Detect security breaches immediately.
|