bs7499 Static Site Guarding and Mobile Patrol Service
bs7499 Static Site Guarding and Mobile Patrol Service
bs7499 Static Site Guarding and Mobile Patrol Service
Publication history
First published as BS 7499-1, December 1991
Second edition, June 1998
Third edition, February 2002
Fourth edition, July 2007
Fifth (present) edition, September 2013
Contents
Foreword ii
1 Scope 1
2 Normative references 1
3 Terms and definitions 1
4 The organization 3
5 Resources 3
6 Service 16
Annexes
Annex A (informative) Use of the term “security guarding” 24
Bibliography 25
Summary of pages
This document comprises a front cover, an inside front cover, pages i to iv,
pages 1 to 26, an inside back cover and a back cover.
Foreword
Publishing information
This British Standard is published by BSI Standards Limited, under licence from
The British Standards Institution, and came into effect on 30 September 2013. It
was prepared by Technical Committee GW/3, Manned security services. A list of
organizations represented on this committee can be obtained on request to its
secretary.
Supersession
This British Standard supersedes BS 7499:2007, which is withdrawn.
Presentational conventions
The provisions of this standard are presented in roman (i.e. upright) type. Its
recommendations are expressed in sentences in which the principal auxiliary
verb is “should”.
Commentary, explanation and general informative material is presented in
smaller italic type, and does not constitute a normative element.
The word “should” is used to express recommendations of this standard. The
word “may” is used in the text to express permissibility, e.g. as an alternative to
the primary recommendation of the clause. The word “can” is used to express
possibility, e.g. a consequence of an action or an event.
Notes and commentaries are provided throughout the text of this standard.
Notes give references and additional information that are important but do not
form part of the recommendations. Commentaries give background information.
iv • © The British Standards Institution 2013 This page deliberately left blank
BRITISH STANDARD BS 7499:2013
1 Scope
This British Standard gives recommendations for the management, staffing and
operation of an organization providing security guarding (see Annex A) services
on a static site and/or mobile patrol basis.
This British Standard does not apply to all security services, for example
cash-in-transit services, secure parcel services, keyholding and response services,
door supervisors, close protection services, event stewarding and the
management and operation of closed-circuit television (CCTV).
NOTE Recommendations for cash-in-transit services, CCTV, door supervisors,
keyholding and response services and event stewarding are given in BS 7872,
BS 7958, BS 7960, BS 7984 and BS 8406 respectively.
2 Normative references
The following documents, in whole or in part, are normatively referenced in this
document and are indispensable for its application. For dated references, only
the edition cited applies. For undated references, the latest edition of the
referenced document (including any amendments) applies.
BS 5839-1, Fire detection and fire alarm systems for buildings – Part 1: Code of
practice for design, installation, commissioning and maintenance of systems in
non-domestic premises
BS 5979, Remote centres receiving signals from fire and security systems – Code
of practice
BS 7858, Security screening of individuals employed in a security environment –
Code of practice
BS 7958, Closed circuit television (CCTV) – Management and operation – Code of
practice
BS 7984, Keyholding and response services – Code of practice
BS EN 50131-1, Alarm systems – Intrusion and hold-up systems – System
requirements
PD 6662, Scheme for the application of European standards for intrusion and
hold-up alarm systems
NOTE For the purposes of this British Standard the control room is also known as
the communication centre.
3.5 controller
person designated to monitor control room operations and communications
3.6 customer
individual or body retaining the services of the organization
3.7 key(s)
instrument or data allowing authorized access to a customer’s property
3.8 keyholding
service whereby the organization holds keys to a customer’s premises and/or
equipment for use as agreed in the contract
NOTE 1 Keyholding might involve dual key systems. One key is held by the
customer, and another (different) key to the same premises or equipment is held by
the organization. Both keys would be required to gain access to the premises or to
operate the equipment.
NOTE 2 See BS 7984 for further information on keyholding and response services.
3.10 organization
sole or main provider of static site guarding and/or mobile patrol services to a
particular customer
3.11 principal
owner, partner, board director or other top executive in the private sector, or an
executive officer in the public sector or a not-for-profit organization
3.15 supplier
individual or company (and the persons employed, including all levels of
subcontractor, by that individual or company) that supplies the organization
with equipment, material and/or labour which is used in providing the service to
the customer
3.16 takeover
transfer of contractual responsibilities from one organization to another
4 The organization
4.1 Structure
The organization should possess a clearly defined management structure
showing control and accountability at each level of operation.
The organization should operate a complaints management system.
NOTE 1 Guidance is given in BS ISO 10002.
Details of the ownership of the organization should be established and the
principals’ curricula vitae made available. Any unspent criminal convictions or
undischarged bankruptcy of a principal should be disclosed on request.
NOTE 2 Attention is drawn to the Rehabilitation of Offenders Act 1974 [1], whose
provisions govern such disclosure.
4.2 Finances
The organization should have sufficient working capital for its requirements.
The capital reserves of the organization should be sufficient for current and
planned needs.
The organization should be able to present two years’ audited trading accounts,
except if it is starting as a subsidiary of an established business, and adequate
financial backing is evident, or in the case of a new start up business where
management accounts should be made available to show that the organization
can demonstrate it has the funding available to achieve its plan for the business.
NOTE Where the organization is solely providing a service in-house (and not
contracting out such services), some of the recommendations given in this subclause
might not apply.
The organization should prepare annual accounts in accordance with applicable
accounting standards. The accounts should be certified by an accountant or
solicitor with complete details of expenditure and income. Accounts should be
available for examination on request.
4.3 Insurance
The organization should possess insurance cover commensurate with the
business undertaken and the number of persons employed, e.g. public liability,
contractual, efficacy, employer’s liability and vehicle insurance.
NOTE Where the organization is solely providing a service in-house (and not
contracting out such services), then efficacy insurance and some other types of
insurance mentioned in this subclause might not be needed.
Fidelity guarantee should be available up to limits required by the customer,
e.g. loss of keys, wrongful arrest and product liability.
5 Resources
5.1 Premises
The organization should have an administrative office(s) and/or operational
centre(s) where records, professional and business documents, certificates,
correspondence, files and other documents necessary for conducting business
transactions should be kept in a secure manner. The location of records and
documentation, both local and centralized, should be clearly defined by the
organization.
5.2.2 Location
Control rooms should be situated within premises owned or leased by the
organization, and to which the organization has access at all times.
5.2.3 Construction
All parts of the shell of a control room should be soundly constructed to ensure
physical security, safety and integrity, for the protection of employees and the
safeguarding of customers’ records and property.
Only the following openings should be permitted in the shell of a control room:
a) a normal entrance;
b) emergency exits;
c) glazed areas;
d) ventilation inlets and outlets;
e) service inlets and outlets;
f) key transfer hatches.
NOTE Attention is drawn to relevant building regulations, fire regulations and
health and safety legislation.
If the normal entrance is directly accessible from the exterior of the premises in
which the control room is situated, it should comprise two sequential doors
controlled from within the control room and interlocked to prevent more than
one door from opening at a time.
If the normal entrance to the control room is located within the premises to
which access is controlled, a single door should be sufficient. The door should
open outwards and should have a locking device, operable from within the
control room and which can be unlocked from outside.
All doors, including emergency exits, hinges, frames, fixings and locking devices
should be of substantial construction, resistant to entry by physical attack.
Emergency exit doors should open outwards and should have unlocking devices
for release, only in emergencies. Emergency doors should be fitted with
a 24 hour remote-signalling intruder alarm system conforming to
BS EN 50131-1/PD 6662.
Voice communication across normal entrance doors should be by an intercom
system. A viewing means should be incorporated so that the identity of persons
wishing to enter the control room can be established before the control room
door is opened.
External or publicly accessible glazed areas should be protected to offer
resistance to entry by physical attack, e.g. by the use of window bars.
Ventilation and service inlets and outlets should also be protected. Internal
operational areas should not be visible externally.
The equipment, furnishings and layout of the control room should allow its
efficient operation. Heating, lighting and ventilation should be provided to
ensure a comfortable working environment.
Facilities for the management and operation of CCTV systems should conform to
BS 7958.
Control rooms that serve as a manned or unmanned alarm-receiving centre for
intruder, fire, CCTV and social alarm systems and other monitoring services, and
require a unique reference number (URN) for emergency response, should be
constructed and secured in accordance with BS 5979. 1)
5.2.4 Facilities
A deliberately operated remote-signalling alarm system conforming to
BS EN 50131-1/PD 6662 should be installed, with sufficient deliberately operated
devices to allow the controller to warn of any attack on the control room.
The control room and surrounding areas should be fitted with a fire alarm
system, designed and installed in accordance with BS 5839-1.
Single-manned control rooms should be fitted with a remote-signalling fail-safe
emergency alarm system, which should warn whether the controller is disabled
for more than 60 minutes. This system should activate an alarm at another
remote 24 hour control room or an alarm receiving centre constructed and
equipped in accordance with BS 5979.
Emergency lighting should be provided, able to start up within 60 seconds of
failure of mains powered illumination. Emergency lighting should be able to
illuminate the control room for continued operation and should provide at
least 3 hours continuous operation.
Where computerized and/or electronic systems are in operation, adequate
resources should be available to ensure continued operation of the control room
in the event of power or system failure.
Where customer keys are held, strongly constructed, secure, lockable storage
should be provided for keys.
A communication line exclusive to the control room should be provided. Where
possible, the line should be routed separately from other lines into the premises.
An emergency alternative means of communication should be provided.
1)
pr EN 50518-1, pr EN 50518-2 and pr EN 50518-3 are to replace BS 5979 for alarm
receiving centre (ARC) requirements for intruder alarm systems in 2014.
5.2.5 Procedures
Controllers should receive, in writing, details of the identity of the person to
whom they should report and the method of reporting incidents or problems
both within the organization and to the customer.
The organization should review and update control room information at regular
intervals (at least once every 12 months).
A control room manual should be produced for the guidance of controllers. The
manual should clearly indicate the stages at which an incident should be
reported by the controller to more senior personnel. A copy of the control room
manual should be readily available within the control room at all times.
The control room manual should outline the action to be taken on receipt of
incident reports, and methods of recording incidents. Records of incidents
should include the following:
a) the date, time and location of the incident;
b) the date and time of reporting, who reported and who received the report;
c) details of the incident;
d) action taken, including onward reporting;
e) action to be taken;
f) names and addresses of persons who witnessed the incident.
Check calls from security officers should be received and recorded at the control
room at intervals specified in their assignment instructions. The control room
manual should detail the procedures to follow and actions to be taken in the
event of a late and missed check call. The frequency of check calls should be
determined following a health and safety risk assessment, and should take into
account the number of security officers on duty. Procedures for daily verification
that automated systems are working should be detailed in the control room
manual and verifications should be documented.
5.2.6 Information
The controller should have immediate access to the following:
a) all assignment instructions,
b) details of hours of cover for all assignments with the number of security
officers, the number of contracted visits, and site telephone numbers;
c) a means of displaying the names of security officers working at each
assignment during shifts;
d) the names, addresses and telephone numbers of all security officers,
including supervisors and principals of the organization;
e) emergency contact records (including telephone numbers) for all customers;
f) telephone numbers of police stations within the operational area of the
control room;
g) useful telephone numbers (e.g. water companies, electricity companies,
boarding-up services);
h) a copy of the control room manual;
i) emergency procedures and contingency plans in case of fire, flood or bomb
threat, etc., for the control room and other premises;
j) a register of keys that are held in the control room.
5.2.7 Records
NOTE Minimum periods for retention of records might be reviewed, if applicable,
for particular purposes, especially with regard to potential liabilities for civil action.
The following records should be kept:
a) records of all reported incidents for a minimum of 12 months from the date
of the event. Entries should be numbered serially and should include the
time and date of the incident and the name of the controller completing
the record;
b) records of all telephone and radio calls from security officers and supervisors
for a minimum of 12 months.
Details of all check calls should be recorded, including missed and late check
calls. Precise times of contact should be noted.
Records should be made of all mobile patrol visits and supervisory visits.
Controllers should also maintain a register of keys held in the control room and
should sign for keys on shift change over.
5.2.8 Personnel
The number of controllers on duty should be consistent with the expected
workload.
Toilet and washing facilities and a facility for cooking or heating food or drink
should be provided within close proximity of the control room and within the
protected confines of the premises in which the control room is located.
A first-aid box and fire-fighting equipment should be provided.
5.3 Staff
5.3.1 General
The organization should ensure that it has employed sufficient security officers
to fulfil its contractual obligations and sufficient supervisory staff to manage day
and night assignments and to make regular site visits.
5.3.3 Health
Prospective employees should be sent an employment medical questionnaire,
with questions that relate to, or are intrinsic to, the job function, this can be
sent with the offer of employment.
NOTE 1 The offer of employment is conditional on the results of the medical
questionnaire supplied, which might fundamentally inhibit the employee from
carring out the job.
NOTE 2 Attention is drawn to the Equality Act 2010 [3].
In order to ensure that the physical condition of security officers remains
compatible with the duties to which they have been assigned, documented
procedures should be in place for performing routine health checks and reports.
When the physical demands of a person’s duties change their physical condition
and suitability should be reassessed as appropriate.
NOTE 3 Where health and safety risk or medical concerns of personnel are raised, it
is reasonable for a company to ask that person to undergo a medical examination to
ensure fitness for duty.
5.3.6 Identification
Employees, who are required to be screened in accordance with 5.3.2, should be
issued with an identity card incorporating the following information:
a) the name, address and telephone number of the organization;
b) the name of the employee, employee number and employee’s signature;
c) the expiry date of the card (not more than three years from the date of
issue);
d) a current photograph of the employee.
Employers should require that employees carry their identity cards whilst on
duty.
Identity cards should be formally withdrawn from employees renewing their
cards or leaving the organization, and destroyed in a secure manner.
A record of identity cards issued should be maintained. This record should also
indicate the status and location of withdrawn cards, e.g. whether they have
been destroyed or lost, or where they are held by the employee/organization.
NOTE Where a security officer is required to display a SIA licence this does not
negate the need for company identification.
5.4.2 Vehicles
5.4.2.1 General
Unless they are involved in covert operations or otherwise excepted under
contract, operational vehicles should clearly display the organization’s name,
badge or logo, and telephone number. Operational vehicles should:
a) be appropriate for the intended use;
b) carry a two-way communication device;
c) be inspected by the organization at least once per month to ensure that
they are roadworthy;
d) be serviced regularly, in accordance with the manufacturer’s instructions;
e) have any damage repaired as soon as possible;
f) be kept clean and tidy.
NOTE For example, the vehicle’s location can be monitored by fitting a tracking
device, or a GPS signal.
Where a tracking device is installed in the vehicle, it should be able to signal the
location of the vehicle to a remote 24 hour monitoring centre. The tracking
system should be known to cover the entire area in which the vehicle operates.
5.5 Training
5.5.1 General
The organization should have a clearly defined and documented training policy.
Training should last a total of at least 32 hours, including the examinations, and
should cover the following core subjects:
a) introduction to the security industry role and responsibilities of security
officers;
b) patrolling;
c) access control;
d) searching;
e) security and emergency systems;
f) fire safety;
g) health and safety at work;
h) the law;
i) emergencies;
j) customer care and social skills;
k) communications and reporting;
l) equality and diversity;
m) communication skills and conflict management.
When the training period is complete, the trainee should take a written
examination with a national recognized qualification that meets the minimum
core competency as set by the Sector Skills Body (SSB).
The employer should carry out a gap analysis for security personnel holding a
door supervision license (including those who have transitioned from a door
supervising license to security guarding) or close protection license who wish to
work in the security guarding area. Any training identified by the gap analysis
should be provided.
The training should also include additional training hours for subject-specific
modules that relate to the role to be undertaken, for example:
1) retail duties;
2) crowd control;
3) reception skills;
4) use of technology.
5.5.9 Takeovers
If employees are acquired through a takeover, the organization should identify
their training needs and address them with a specific training policy. This policy
should take practical work-related experience as well as qualifications into
account.
Employees acquired through takeover should not be exempt from the induction
training given in 5.5.2.
5.6 Suppliers
5.6.1 Suppliers of subcontract labour
The organization should obtain the customer’s agreement on conditions for the
use of suppliers of subcontract labour for undertaking the duties of security
officers, supervisors and controllers.
Employers should require that employees of subcontract labour also follow the
recommendations given in 5.3, 5.4 and 5.5. The organization should satisfy itself
that these recommendations have been followed.
NOTE Attention is drawn to HMRC guidance on use of labour providers.
6 Service
6.1 Sale of services
6.1.1 Contacting prospective customers
When contacting potential customers in order to promote security services,
confirmation of the identity of the individual representing the organization and
the organization being represented should be given and the purpose of the
contact made clear. Enquiries should not be made of their existing operational
security arrangements (i.e. sensitive information) however general service
requirements can be ascertained.
6.1.3 Quotations
A clear quotation should be provided by the organization. If the quotation is
accepted by the customer, it should form part of the contract. The quotation
document should state:
a) the terms and conditions under which the work would be carried out;
b) the total costing for the service, and the arrangements for payment;
6.1.5 Contracts
The customer should be asked to sign either:
a) a form of acceptance indicating that they have read and understood the
quotation, terms and conditions; or
b) a contract document referring to the quotation, terms and conditions.
The contract should be agreed and exchanged before work commences, or, in
cases of great urgency, as soon as practicable.
If the customer is reluctant to enter into a written contract, a copy of the
quotation, terms and conditions should be sent to the customer with a letter
stating that, in the absence of indication to the contrary, the terms and
conditions of the organization apply to the work.
If the quotation, terms and conditions are accepted but include amendments or
optional extras, the organization should confirm in writing the agreed changes
within seven days.
6.3.2 Content
The following details should be included in the assignment instructions:
a) the location, description and extent of the site or property;
6.3.3 Amendments
Any permanent alteration to the instructions that results in changes to security
officers’ duties or operational requirements should be agreed between the
organization and the customer in writing.
Minor amendments should be approved by the organization, and details sent to
the customer.
Assignment instructions should be amended and reissued as soon as practicable
after changes have been agreed.
Temporary alterations should be recorded in the site records (see 6.4.3).
6.4.2 Duties
The prime responsibility of a security officer should be to protect the customer’s
people, property and assets at all times, as far as they can reasonably do so.
Typical duties could include, but are not limited to:
a) regular tests of timing, communication, safety or other equipment specified
in the assignment instructions;
b) regularly checking that the site has been secured;
c) the management and/or monitoring of movement of people, goods or
transport;
8) be scheduled to take place at an agreed time, ideally away from the normal
place of duty and when operational activities can be temporarily covered by
another security officer.
6.5.2 Duties
The prime responsibility of a security officer on mobile patrol should be to make
prearranged visits to inspect the sites as detailed in the assignment instructions
and to ensure that they are secured as far as reasonably possible.
At the start of duty, security officers should sign for keys in the key register
(see 5.2.7), and sign again, next to the corresponding first entry, when returning
the keys at the end of duties.
Where automated patrol systems are not used security officer’s should make
check calls to the control centre on arrival and departure from site giving their
location and details of the next site to be visited. Additional check calls should
be made to ensure that the frequency between calls is no more than 1 hour.
NOTE It might be necessary to consider conducting mobile patrols at random times
and varying the route to and from the sites to ensure that no patterns can be
established.
Bibliography
Standards publications
For dated references, only the edition cited applies. For undated references, the
latest edition of the referenced document (including any amendments) applies.
BS 7799-1:2005, Information technology – Code of practice for information
security management
BS 7872:2011, Manned security services – Cash and valuables in transit services
(collection and delivery) – Code of practice
BS 7960:2005, Door supervisors/stewards – Code of practice
BS 8406:2009, Event stewarding and crowd safety services – Code of practice
BS ISO 10002, Quality management – Customer satisfaction – Guidelines for
complaints handling in organizations
BS ISO/IEC 27001:2005, Information technology – Security techniques –
Information security management systems – Requirements
PD 5454:2012, Guide for the storage and exhibition of archival documents
pr EN 50518-1, Monitoring and alarm receiving centre – Location and
construction requirements
pr EN 50518-2, Monitoring and alarm receiving centre – Technical requirements
pr EN 50518-3, Monitoring and alarm receiving centre – Procedures and
requirements for operation
Other documents
[1] GREAT BRITAIN. Rehabilitation of Offenders Act, 1974. London:
The Stationery Office.
[2] GREAT BRITIAN. The Working Time Regulation 2003. London: The Stationery
Office.
[3] GREAT BITAIN. The Equality Act, 2010. London: The Stationery Office.
[4] GREAT BRITAIN. Private Security Industry Act 2001. London: The Stationery
Office.
[5] GREAT BRITAIN. Data Protection Act, 1998. London: The Stationery Office.
[6] GREAT BRITAIN. Health and Safety at Work etc. Act 1974. London:
The Stationery Office.
Websites
http://sia.homeoffice.gov.uk [last viewed 29 August 2013]
http://www.hmrc.gov.uk/leaflets/labour-providers-due-diligence.pdf [last viewed
29 August]
26 • © The British Standards Institution 2013 This page deliberately left blank
This page deliberately left blank
NO COPYING WITHOUT BSI PERMISSION EXCEPT AS PERMITTED BY COPYRIGHT LAW
About us Revisions
We bring together business, industry, government, consumers, innovators Our British Standards and other publications are updated by amendment or revision.
and others to shape their combined experience and expertise into standards We continually improve the quality of our products and services to benefit your
-based solutions. business. If you find an inaccuracy or ambiguity within a British Standard or other
The knowledge embodied in our standards has been carefully assembled in BSI publication please inform the Knowledge Centre.
a dependable format and refined through our open consultation process.
Organizations of all sizes and across all sectors choose standards to help Copyright
them achieve their goals. All the data, software and documentation set out in all British Standards and
other BSI publications are the property of and copyrighted by BSI, or some person
Information on standards or entity that owns copyright in the information used (such as the international
We can provide you with the knowledge that your organization needs standardization bodies) and has formally licensed such information to BSI for
to succeed. Find out more about British Standards by visiting our website at commercial publication and use. Except as permitted under the Copyright, Designs
bsigroup.com/standards or contacting our Customer Services team or and Patents Act 1988 no extract may be reproduced, stored in a retrieval system
Knowledge Centre. or transmitted in any form or by any means – electronic, photocopying, recording
or otherwise – without prior written permission from BSI. Details and advice can
Buying standards be obtained from the Copyright & Licensing Department.
You can buy and download PDF versions of BSI publications, including British
and adopted European and international standards, through our website at Useful Contacts:
bsigroup.com/shop, where hard copies can also be purchased. Customer Services
If you need international and foreign standards from other Standards Development Tel: +44 845 086 9001
Organizations, hard copies can be ordered from our Customer Services team. Email (orders): orders@bsigroup.com
Email (enquiries): cservices@bsigroup.com
Subscriptions
Subscriptions
Our range of subscription services are designed to make using standards
Tel: +44 845 086 9001
easier for you. For further information on our subscription products go to
Email: subscriptions@bsigroup.com
bsigroup.com/subscriptions.
With British Standards Online (BSOL) you’ll have instant access to over 55,000 Knowledge Centre
British and adopted European and international standards from your desktop. Tel: +44 20 8996 7004
It’s available 24/7 and is refreshed daily so you’ll always be up to date. Email: knowledgecentre@bsigroup.com
You can keep in touch with standards developments and receive substantial
Copyright & Licensing
discounts on the purchase price of standards, both in single copy and subscription
format, by becoming a BSI Subscribing Member. Tel: +44 20 8996 7070
Email: copyright@bsigroup.com
PLUS is an updating service exclusive to BSI Subscribing Members. You will
automatically receive the latest hard copy of your standards when they’re
revised or replaced.
To find out more about becoming a BSI Subscribing Member and the benefits
of membership, please visit bsigroup.com/shop.
With a Multi-User Network Licence (MUNL) you are able to host standards
publications on your intranet. Licences can cover as few or as many users as you
wish. With updates supplied as soon as they’re available, you can be sure your
documentation is current. For further information, email bsmusales@bsigroup.com.