Short answer: a commercial-site security brief should state who may assess an unattended item, when it must be treated as suspicious, who calls 999, how people are moved away, who controls access and who follows police instructions. Nobody should touch, move or open a suspicious item. The local plan should be written, rehearsed and available to the people expected to act.
The purpose is not to turn every misplaced bag into an emergency or ask a security officer to improvise a specialist assessment. It is to give staff a safe, proportionate route from first report to controlled handover. The plan should distinguish ordinary lost-property handling from a possible threat without encouraging unnecessary contact with the item.
This article provides general planning guidance for commercial premises. The site’s risk assessment, emergency plan, police advice, lease arrangements and employer procedures take priority. Detailed evacuation routes, rendezvous points, access arrangements and vulnerabilities should remain in controlled documents.
Start with a trained confirmation process
ProtectUK advises organisations to have a documented local plan and to brief the people responsible for assessing unattended items. Its guidance on unattended and suspicious items uses the HOT approach to help decide whether an item is hidden, obviously suspicious or typical for the location.
The security brief should identify which role may carry out that initial assessment and what information other staff should provide. A receptionist, contractor or member of the public who notices an item should be able to report where it is and what they observed without approaching it again, handling it or broadcasting speculation.
Context matters. An item beside a meeting room shortly after occupants left may be different from something deliberately concealed in an unexpected location. Even so, familiarity is not proof of safety. If the trained assessor believes the item may represent a risk to life, the emergency procedure should begin without delay.
Put the 4 Cs into the local procedure
ProtectUK’s current protocol for a suspicious item is the 4 Cs: Confirm, Clear, Communicate and Control. The site brief should translate those headings into named responsibilities rather than merely copying the words onto a notice.
- Confirm: define who is trained and authorised to assess the report using the local procedure.
- Clear: move people away without touching the item and follow the approved emergency plan.
- Communicate: call 999 when the item is assessed as suspicious and give clear, factual information.
- Control: prevent people from entering the affected area and coordinate with police or other emergency services.
The organisation should decide in advance who takes each action, who deputises when the usual contact is absent and how the responsibilities transfer when emergency services arrive. The guard at an entrance should not have to choose between conflicting instructions from several managers.
Make the emergency call factual
The person calling 999 should give the site location, the item’s location in terms the emergency service can understand, what was observed, what action has already been taken and a safe contact point. They should not claim to know what the item contains or repeat rumours as facts.
Police.uk explains that 999 is for emergencies, including immediate danger and serious incidents in progress, while 101 or online reporting is for non-urgent matters. A suspicious item assessed as a possible risk to life should follow ProtectUK’s direction to call 999. The site plan should not delay that call while waiting for a long management chain.
Agree how the caller remains contactable without standing near the item. If information changes, pass the update through the emergency-services contact rather than allowing several people to make uncoordinated calls.
Clear people without publishing the route
The security brief should connect the suspicious-item procedure to the site’s evacuation, invacuation and lockdown arrangements. Moving everyone by the usual route may not be appropriate if that route passes the item. The responsible manager must therefore maintain site-specific alternatives and make them available to authorised staff without putting sensitive plans on a public notice or social-media channel.
Do not set a universal distance in a generic guarding instruction. The item, surroundings and police assessment affect the safe response. Follow the approved site plan and emergency-services directions, move people out of the immediate area and avoid unnecessary line of sight or proximity.
Visitors, contractors and people who need assistance must be considered. The article on security duties during an evacuation explains why visitor information, route decisions and authority to return should be agreed before an emergency rather than decided at the gate.
Control access without creating another hazard
Control means preventing accidental entry and preserving a workable route for emergency services. The plan should say who can close or redirect an entrance, stop deliveries, brief neighbouring occupiers where necessary and keep staff away from the controlled area.
Security staff should not create a crush point, block an emergency route or position themselves beside the item simply to guard it. Use the site’s safe control points and await police direction. Do not move the item to restore access or treat normal operational pressure as a reason to shorten the procedure.
If electronic access control, gates or vehicle barriers are used, only authorised people should apply the approved emergency arrangement. Avoid sharing door names, codes, override methods or precise control positions outside the controlled brief.
Use CCTV and records carefully
Where authorised CCTV is available, an appropriately authorised person may be able to review relevant footage without approaching the area. The local procedure should identify who may do this, how information is relayed and how recordings are preserved. CCTV should support the response, not delay clearing the area or the emergency call.
Keep a factual incident chronology: the initial report, observations, decisions, calls, instructions received and handover. Preserve original records and note corrections transparently. Do not circulate images of the item through casual messaging groups or publish them online; that can spread misinformation, expose site details and interfere with the response.
Define the limits of guarding and K9 duties
A security officer or K9 handler may be assigned reporting, access control, communication or evacuation-support duties, but those tasks must be agreed in the assignment instructions and emergency plan. The presence of a security dog does not make the team an explosive-ordnance resource, and the dog should not be directed towards a suspicious item unless a competent specialist authority specifically controls that activity.
During clearing and access control, keep normal separation around a working security dog and follow the handler’s direction. The client should also decide who maintains the remaining site-security functions while the incident response is under way. This may require a temporary change to entrances or duties, but it should not reveal patrol routes or leave authority unclear.
Where K9 guarding, static guarding, CCTV or access control form part of a layered arrangement, confirm how each element supports the emergency plan and who authorises any temporary change.
Review the response after the handover
Once police or the responsible authority has concluded the incident, the site should record who authorised a return to normal operation. Do not reopen an area because a shift has ended, a delivery is waiting or the item is no longer visible. Follow the instruction of the authority managing the incident.
A proportionate review should ask whether the report reached the right person, whether 999 was called promptly when required, whether staff knew how to clear and control the area, whether visitors were accounted for and whether emergency-service access remained workable. Update the controlled brief, training and contact list when the review identifies a gap.
Questions for the commercial-site brief
- Who is trained and authorised to assess an unattended item?
- How do staff report an item without approaching or moving it?
- Who calls 999, and who acts if that person is unavailable?
- How are people cleared if the usual route is affected?
- Who controls entrances, deliveries and access to the affected area?
- How are visitors and people needing assistance accounted for?
- Who may review or preserve relevant CCTV and incident records?
- Who follows police instructions and authorises a return to normal operation?
- When was the procedure last briefed or exercised?
Discuss the individual site requirement
When discussing guarding for a commercial property, provide the postcode, operating hours, general site type, expected duties and the existing emergency-management contacts. Send an enquiry so the scope and feasibility can be considered for the individual premises. Do not include access codes, detailed evacuation routes, patrol information or private vulnerabilities in an initial message.
Featured image: an authentic K9 Security Services archive photograph showing a black security dog beside temporary metal fencing. It is used as a general security illustration and does not depict a suspicious item, an emergency response, a client site or a specific deployment.