Not long ago, the manager of a warehouse in the Midlands raised a concern about a rear fire door that was no longer closing as intended. The engineer dispatched to assess it was less troubled by the fault itself than by how long it had gone unremarked: several weeks. A drooping hinge had opened a gap, staff had on occasion held the door ajar to cool the building, and nobody had checked the alarm detector on that doorway since the system was fitted three years before.
In the event, no harm followed. No one got in, nothing was taken and no report was needed. Even so, a flaw of this kind is what converts an opportunistic offence into a straightforward one, and it is considerably more widespread than many owners suppose.
Figures from the Home Office’s Commercial Victimisation Survey indicate that crime of some description will affect close to a third of British businesses this year. The category is broad, stretching from customer shoplifting to violence against staff. Yet burglary and vandalism, precisely the offences that sound security exists to prevent, remain a significant component: some 8% of businesses experience a burglary or an attempt at one over any twelve-month period, with a further 8% affected by vandalism. In addition, ONS data for the period ending March 2025 recorded 78,707 burglaries of non-domestic premises throughout England and Wales. This is a substantial total, and its distribution is uneven. Some sites are plainly more attractive to offenders than others, and the distinction generally rests not on one conspicuous failing but on a small accumulation of physical and procedural shortcomings that develop over time.
Those who conduct commercial security surveys, whether the site is a single shop or a warehouse estate spanning several buildings, report encountering the same five indicators repeatedly. None is striking in isolation. Considered together, they give a reliable measure of a site’s true exposure.
1. Where the Cameras Do Not Reach
Cameras are a near-universal fixture in business. Rather less common are cameras sited to watch the points an intruder would actually use.
A familiar scenario is the commercial CCTV system fitted long ago and expanded in stages as the premises altered, with new extensions, stores or areas of parking never fully incorporated. Installers frequently encounter analogue equipment whose image quality cannot identify faces or number plates at a meaningful distance, recorders that keep footage for a matter of days before erasing it, and cameras aimed at the entrance to the car park while the loading bay at the side goes unobserved.
The remedy does not necessarily lie in the instinct to “install more cameras.” On occasion, relocating two existing units removes a blind spot; elsewhere, moving from an old DVR to IP-based NVR recording delivers alerts prompted by movement, as well as remote access and adequate retention. The relevant question is whether coverage corresponds to the building’s actual vulnerabilities, rather than to wherever units were placed a decade ago.
2. Inadequate and Uneven Exterior Lighting
Few weaknesses are cheaper to remedy, and few are so regularly missed. Vegetation that has grown across a dusk-to-dawn sensor. A floodlight on a motion sensor that failed months ago and went unreported, since no one is present after dark to observe it. Lighting specified when the building was new and never reconsidered as the grounds matured or extensions followed.
Inadequate lighting is not merely an obstacle to watching a site by eye. It also undermines CCTV directly, as even a well-specified camera performs poorly in low light unless illumination or infrared support is suited to the range it must cover. Engineers find that a five-minute circuit of the perimeter at night reveals a great deal: which areas are properly lit, which are illuminated at an unhelpful angle, and which have slipped into darkness unobserved.
3. Alarms Left Without Testing or Maintenance
Experienced installers now scarcely comment when they find an intruder alarm that has gone more than twelve months unserviced, so routine has the discovery become. After commissioning, a typical system receives little further thought until a spurious activation prompts some.
The point is significant for two reasons. The first is gradual deterioration: calibration on PIR detectors may drift, standby batteries exceed their service life, and detectors using dual technology, combining microwave with infrared, require occasional recalibration if they are to function as designed. The second, often the more consequential, is compliance. Current national policy makes a police response available to systems that conform to BS EN 50131 and are monitored through a centre accredited under NSI or SSAIB schemes. Should maintenance lapse and false alarms accumulate, that priority may be withdrawn altogether, leaving a keyholder, or a contracted third-party responder, as the business’s only recourse.
Routine maintenance, then, is more than an administrative formality. It is the means by which the system continues to perform the function for which it was installed.
4. Access Arrangements That Are Unchecked or Obsolete
Of the five, this tends to surprise owners the most, since it seldom presents as a security matter until someone sets it down in full. Master keys unchanged despite repeated staff turnover. Alarm codes circulated among colleagues years ago and left as they were. Fobs belonging to departed employees that remain active.
Consultants regularly visit premises where the site manager is genuinely unable to say how many people retain keys or codes that still work. This is no reflection on the manager. It is the ordinary consequence of years of personnel changes in the absence of an access control system that logs each entry and exit, with times.
Contemporary access control, whether the credential is a card, a fob or a biometric, achieves two things that shared keys cannot: it confines entry to set times and zones, and it generates an audit trail. Should an incident arise, that record frequently determines whether events can be established with certainty or merely surmised.
5. When Detection Leads Nowhere
An alarm that sounds continuously without anyone attending offers, in practice, little more than no alarm at all. Some premises still operate an intruder alarm that stands alone, with no route to a monitoring service, relying wholly on its own noise to discourage an intruder or attract a passer-by.
That shortfall is addressed by monitoring: a link to an accredited alarm receiving centre, supported by a keyholder list that is kept current. On receiving a signal, the ARC can verify it, call keyholders in the proper sequence and, provided the system meets the criteria, request police attendance. In the absence of such a link, the speed of any response is left to fortune: whether the alarm is heard at all, whether the listener knows whom to contact, and whether that contact can be reached.
Keyholder lists merit separate scrutiny as well. Engineers commonly find disconnected numbers, former staff, or a sequence of contacts that bears little relation to who could attend at short notice.
Seeing How the Weaknesses Connect
Taken singly, no one of these five weaknesses is catastrophic. A floodlight that is somewhat dim, or a keyholder list that has not been reviewed, will not in itself undo a business. The difficulty is that they rarely occur alone. Sites with poor lighting frequently also have ageing CCTV that has not been improved to offset the shortfall. A business careless about deactivating former employees’ fobs is often equally careless about alarm servicing. The effects are cumulative.
A thorough site review is valuable not because it uncovers a single serious defect, but because it shows how the five areas relate and bear upon one another. A warehouse may be equipped with first-rate CCTV and yet, lacking any monitored connection for its alarm, still carry a critical weakness. A retail unit whose alarm is well kept but whose cameras leave blind spots remains exposed to casual theft that the alarm would never register unaided.
Owners who see a couple of these problems reflected in their own buildings have a straightforward course open to them: arrange for a suitably qualified person to inspect the site properly, rather than leaving it to an incident to settle the matter. The warehouse manager described at the outset was fortunate; the weakness was identified before it could be exploited. Chance will not deliver that result for every business, and at present levels of commercial burglary, it is not a strategy on which to depend.
