Recently, the manager of a Midlands warehouse raised concerns about a rear fire door that was failing to close correctly. For the security engineer dispatched to assess it, however, the door itself was not the principal concern. The more troubling point was that the defect had gone unremarked for several weeks. A dropped hinge had opened a narrow gap, the door had repeatedly been wedged ajar for ventilation, and the detector covering that point of entry had not been tested at any stage in the three years since the system was commissioned.
No harm resulted. No intrusion occurred, nothing was lost and no incident report was required. It nonetheless represents precisely the type of vulnerability that converts an opportunistic offence into a straightforward one, and it is considerably more prevalent than most proprietors suppose.
Data from the Home Office’s Commercial Victimisation Survey indicate that close to one-third of enterprises in the UK will fall victim to some category of crime during the current year. The figure encompasses a broad spectrum of incidents, extending from theft committed by customers to violence directed at staff. Nevertheless, burglary and vandalism, precisely the offences which competent security provision exists to deter, still represent a material proportion: within a typical twelve-month period, 8% of businesses experience burglary or an attempt at it, while an additional 8% report vandalism. Separately, ONS statistics for the year ending March 2025 show that 78,707 burglaries of non-domestic premises were logged in England and Wales. That is by no means an insignificant total, nor is it uniformly distributed. Some premises present markedly easier targets than others, and the distinction generally lies not in a single conspicuous failing but in an accumulation of minor physical and procedural deficiencies that develop incrementally.
Specialists conducting commercial site surveys, whether of single-unit retail outlets or multi-building warehouse estates, consistently identify the same five indicators of risk. Individually, none is especially alarming. Collectively, they provide an unambiguous account of a site’s true level of exposure.
1. Unmonitored Zones Within CCTV Coverage
Cameras are now standard fixtures across most commercial premises. Considerably fewer installations, however, are sited to observe the locations an intruder would realistically use to gain entry.
A recurring scenario involves a commercial CCTV system specified years previously and then expanded piecemeal as the premises altered, with extensions, storage facilities or areas of parking never formally incorporated into its field of view. Installers frequently encounter legacy analogue equipment whose resolution is insufficient for identifying individuals or vehicle registrations at any practical distance, recorders whose retention period extends to only a few days, and cameras oriented towards the entrance to a car park while a loading bay at the side of the building receives no coverage whatsoever.
The remedy is not necessarily to “install more cameras.” In certain cases, relocating two existing units will resolve a blind spot; in others, replacing a legacy DVR with an IP-based NVR platform will deliver adequate retention, remote access and motion-activated alerting. The decisive question is whether coverage corresponds to the building’s genuine points of vulnerability, rather than reflecting mounting positions chosen a decade ago.
2. Deficient or Irregular Perimeter Lighting
Few security shortcomings are as simple to rectify, and few are so frequently disregarded. Vegetation obstructing dusk-to-dawn sensors. A motion-activated floodlight left inoperative for months and never reported, since no personnel are present after hours to observe the fault. Lighting specified at the time of construction but not reassessed as landscaping matured or the building was extended.
Inadequate lighting does not merely hinder visual supervision of a site. It materially undermines CCTV performance, since cameras of good quality will still struggle in low light unless illumination or infrared support is appropriate to the distances concerned. A circuit of the perimeter after dark, lasting no more than five minutes, typically reveals more to engineers than might be anticipated, establishing which areas are properly illuminated, which are lit at an unsuitable angle, and which have lapsed into darkness unobserved.
3. Intruder Alarms Lacking Testing and Maintenance
Encountering an intruder alarm that has gone more than twelve months without any scheduled maintenance is now so routine that experienced installers seldom comment upon it. Once installed and commissioned, systems are commonly neglected until a false activation draws attention to them.
The significance of this is twofold. Firstly, detection equipment deteriorates. Calibration drift affects PIR detectors, standby batteries exceed their serviceable life, and dual-technology detectors combining microwave with infrared technology require periodic recalibration to function as designed. Secondly, and frequently of greater consequence, there is the question of compliance. Under prevailing national policy, systems serviced in accordance with BS EN 50131 and monitored by an alarm-receiving facility accredited under NSI or SSAIB schemes are eligible to receive a response from the police. Should maintenance lapse and false alarms accumulate, that priority status may be withdrawn in full, leaving the business dependent solely upon keyholders or on a private response contractor.
Scheduled servicing should not be regarded as an administrative formality. It is the means by which the system continues to perform the function for which it was specified.
4. Poorly Governed or Obsolete Access Arrangements
Of the five, this is the issue that most often takes proprietors by surprise, as it seldom presents as a security matter until it has been systematically documented. Master keys retained unaltered through successive periods of staff turnover. Alarm codes distributed to colleagues long ago and not revised since. Fobs issued to former employees that remain active because they were never disabled.
Consultants frequently visit premises at which the site manager is genuinely unable to confirm how many individuals retain operational keys or codes. This is no reflection on the manager. It is the natural consequence of prolonged staff turnover in the absence of an adequate electronic system recording entries and exits and the times at which they occurred.
Contemporary electronic access control, whether based on cards, fobs or biometrics, accomplishes two things that shared keys cannot: it confines entry to defined periods and areas, and it produces an audit record. In the event of an incident, that record frequently distinguishes precise knowledge of events from conjecture.
5. Detection Without an Associated Response
In operational terms, an alarm that sounds continuously without eliciting any response is equivalent to having no alarm whatsoever. Engineers continue to encounter sites whose intruder alarm functions as an isolated unit, lacking any connection to remote monitoring and dependent wholly upon its audible output to deter an intruder or attract the attention of a passer-by.
That deficiency is addressed by monitored systems linked to a dedicated alarm receiving centre (ARC) and underpinned by a rigorously maintained keyholder register. Upon receiving an activation, ARC operators can verify the alert, telephone keyholders in the agreed order and, for eligible systems, request that police attend. In the absence of such a connection, response depends entirely upon chance: whether anyone hears the alarm, whether that person knows whom to contact, and whether the contact can in fact be reached.
Keyholder registers also warrant independent scrutiny. Engineers routinely identify obsolete telephone numbers, individuals who have left the organisation, and contact hierarchies that no longer correspond to who is genuinely available at short notice.
Assessing the Combined Picture
Considered in isolation, each of the five issues falls short of catastrophe. A marginally dim floodlight or an unexamined keyholder register will not, by itself, cause a business to fail. The difficulty is that such weaknesses tend to occur in combination. Sites with inadequate lighting frequently also operate an ageing CCTV installation that received no compensating upgrade. Organisations that are negligent in deactivating redundant fobs are often equally negligent regarding alarm maintenance. The effects are cumulative.
The worth of a thorough site assessment lies not in exposing a single striking defect, but in identifying the common thread running through the five areas and establishing how they interrelate. A warehouse equipped with excellent CCTV but lacking a monitored alarm connection retains a critical vulnerability. Likewise, retail premises whose alarm is properly serviced, yet whose cameras leave blind spots, stay vulnerable to opportunistic offences which the alarm cannot detect unaided.
Where proprietors recognise one or two such deficiencies within their own buildings, the appropriate course of action is clear: commission a suitably qualified professional to inspect the site thoroughly, rather than allowing an incident to dictate the timing. The warehouse manager referred to at the outset was fortunate. The gap was discovered before it could be exploited. Few businesses can expect such an outcome by chance, and given prevailing levels of commercial burglary, chance is not a dependable strategy.
