How To Prepare

HOW TO PREPARE

Although the Act has not yet been passed and final wording is not confirmed, organisations likely to be impacted should start to prepare and begin making the likely adjustments needed in order to comply.

Understand the Threat

The key initial step should be considering and understanding the risks facing your organisation. When evaluating this, you should bear in mind that terrorist groups targets, motivations and attack methodologies tend to change over time. It is also worth considering factors that may cause your organisation to be targeted indirectly, for example, due to proximity to neighbouring organisations.

The Global Terrorism Database, media reporting of recent attacks and the National Threat Level are useful tools in understanding the threats facing your organisation.

Conduct a Risk Assessment & Incident Response Plan

Once the major threats facing your organisation have been identified, you should begin to undertake a risk assessment and identify appropriate measures to limit these risks. When undertaking this exercise, it's worth noting that organisations can be held responsible for either failing to identify an existing threat or for failing to contain the situation in the event of an attack.

Additionally, organisations under Protect Duty are required to have an incident response plan in place. This should detail not just how you and your staff would respond to an incident occurring inside your organisation, but also how you would respond to an incident outside or near to you.

Implement Protective Measures

When conducting your risk assessment and incident response plan there are likely to be gaps identified where new measures are required. This could include physical security measures such as;

Security doors
Blast-resistant glazing
Fences
Bollards
CCTV
Electronic access control
Intruder detection systems

Alternatively, less invasive technology could be implemented. For example, technology solutions that support the identification of potential threats, limit the opportunity for an attack and coordinate the response in the event of an attack.

Ensure Staff are Trained

Before the Protect Duty comes into place it is essential that staff have a clear understanding of the measures and response plans in place.

Staff should also be trained to carry out pre-event checks. This should include checking all security measures are working as expected, including CCTV, metal detectors and emergency exits.

Specific Counter Terrorism training has been developed by Act Counters Terrorism ACT Awareness e-Learning to provide standardised and consistent counter terrorism action across organisations. It is available to all organisations, their staff and the general public and can be used to provide evidence that protective measures have been taken in the event of an investigation.

When implementing new protective measures, such as technology solutions, it's vital staff are trained on how to properly use them. This training should be re-visited at least annually and available to all new starters when they join the organisation.

After an Event

After an event has taken place, it's key to reflect on the lessons learnt. This should include reviewing the measures currently in place to identify what has gone well and what could be improved, as well as determining if any new measures are required.

Your plans should constantly be evolving and improving in line with organisational and wider environmental changes.

It is important that any guidance, training and measures are reviewed and refreshed regularly to reflect changes to risks and threats over time.

Protect duty consultation – LGA response