Product Overview

Summary: This Security and Asset Protection Safe Operating Procedure provides a clear, defensible framework for protecting people, property and critical business assets across Australian workplaces. It sets out practical, step-by-step processes for preventing unauthorised access, managing security incidents, and safeguarding high‑value equipment, information and cash on site.

Security failures don’t just result in stolen assets – they can place workers and visitors at serious risk, disrupt operations and expose a business to significant legal and reputational damage. This Security and Asset Protection Safe Operating Procedure is designed specifically for Australian workplaces, providing a structured approach to controlling access, protecting physical and digital assets, and responding effectively to security incidents while aligning with WHS obligations and due diligence requirements.

The SOP translates high‑level security expectations into practical, day‑to‑day actions that frontline staff, supervisors and managers can actually follow. It covers everything from site access control, key and card management, visitor sign‑in, and CCTV use, through to securing plant, tools, IT equipment and sensitive information, as well as managing cash handling, after‑hours work and lone worker security. By implementing this procedure, organisations can reduce the likelihood and impact of theft, vandalism, workplace violence and information breaches, while demonstrating that they have taken reasonably practicable steps to protect their people and assets.

Whether you manage a single retail store, a multi‑site warehouse network, a healthcare facility or a professional office, this SOP helps you standardise security practices, clarify responsibilities and embed a culture of vigilance. It is written in clear, accessible language, ready to be tailored to your operations, and supports integration with existing WHS management systems, emergency plans and business continuity arrangements.

Key Benefits

• Strengthen protection of staff, visitors and contractors by controlling access to sites, restricted areas and critical assets.
• Reduce losses from theft, fraud, vandalism and damage through consistent, documented security practices.
• Demonstrate due diligence and support compliance with Australian WHS legislation and privacy obligations.
• Standardise security responsibilities and responses across sites, shifts and contractors for greater operational consistency.
• Improve incident response and recovery with clear procedures for reporting, escalation, evidence preservation and post‑incident review.

Who is this for?

• Business Owners
• Directors and Officers (PCBU Representatives)
• WHS Managers
• Security Managers
• Facilities Managers
• Operations Managers
• Site Supervisors
• IT and Information Security Managers
• Retail Store Managers
• Warehouse and Logistics Managers
• Healthcare Practice Managers
• Education Campus Managers
• Hospitality and Venue Managers

Hazards Addressed

• Unauthorised entry to workplaces and restricted areas
• Workplace violence, aggression and armed robbery
• Theft or tampering with plant, tools, vehicles and equipment
• Loss or compromise of confidential or commercially sensitive information
• Cash handling risks, including robbery and internal fraud
• Vandalism and deliberate damage to buildings, infrastructure and safety systems
• Security risks to lone workers and staff working after hours
• Cyber‑physical threats involving access to IT rooms, servers and network hardware

Included Sections

• 1.0 Purpose and Scope
• 2.0 Definitions and Key Terms
• 3.0 Legal and Regulatory Context (Australian WHS and Privacy)
• 4.0 Roles, Responsibilities and Authorities
• 5.0 Security Risk Assessment and Planning
• 6.0 Site Access Control and Visitor Management
• 7.0 Keys, Access Cards and Password Management Interface
• 8.0 Physical Asset Protection (Plant, Tools, Vehicles and Equipment)
• 9.0 Information and Records Protection (Physical and Digital Assets)
• 10.0 Cash Handling and Valuables Security
• 11.0 CCTV, Alarms and Electronic Security Systems
• 12.0 After‑Hours, Remote and Lone Worker Security
• 13.0 Contractor and Third‑Party Security Requirements
• 14.0 Security Incident Reporting, Escalation and Investigation
• 15.0 Evidence Preservation and Interaction with Police and Regulators
• 16.0 Emergency Response Interface (Robbery, Aggression, Threats)
• 17.0 Training, Induction and Communication
• 18.0 Monitoring, Audit and Continuous Improvement
• 19.0 Document Control and Recordkeeping

Legislation & References

• Work Health and Safety Act 2011 (Cth) and equivalent state and territory WHS Acts
• Work Health and Safety Regulations 2011 and equivalent state and territory WHS Regulations
• Safe Work Australia – How to Manage Work Health and Safety Risks: Code of Practice
• Safe Work Australia – Managing the Work Environment and Facilities: Code of Practice
• AS/NZS ISO 31000:2018 Risk management – Guidelines
• AS/NZS ISO 45001:2018 Occupational health and safety management systems – Requirements with guidance for use
• AS/NZS 4421:2011 Guard and patrol security services
• AS/NZS 2201 series – Intruder alarm systems
• Privacy Act 1988 (Cth) and Australian Privacy Principles (for CCTV and information handling)
• AS ISO/IEC 27001:2022 Information security, cybersecurity and privacy protection – Information security management systems (where asset protection includes information assets)