Product Overview

Summary: This Security Protocol Safe Operating Procedure sets out clear, practical steps for protecting people, property, information and assets in Australian workplaces. It provides a consistent, WHS-aligned approach to managing security risks such as unauthorised access, aggression, theft and data breaches, helping businesses safeguard their staff and operations around the clock.

Security in the modern Australian workplace is no longer limited to locks and alarms. Organisations must manage a blend of physical, personal and information security risks, from unauthorised visitors and aggressive customers through to social engineering and after-hours access. This Security Protocol Safe Operating Procedure provides a structured, step‑by‑step framework for how your people should prevent, detect and respond to security incidents while maintaining compliance with WHS duties and privacy requirements. It translates high‑level security expectations into clear actions that any worker can follow.

The procedure covers the full security lifecycle: pre‑employment checks and inductions, visitor and contractor management, access control, incident reporting, duress response, managing threats and aggressive behaviour, after‑hours work, and coordination with emergency services. It helps you eliminate ad‑hoc decision‑making, reduce confusion during incidents, and demonstrate that you have taken reasonably practicable steps to protect workers and others. By implementing this SOP, businesses can strengthen their security posture, support safer work environments, and provide clear evidence of due diligence to regulators, clients and insurers.

Key Benefits

• Strengthen protection of workers, visitors and contractors through clear, repeatable security procedures.
• Reduce the likelihood and impact of security incidents such as unauthorised entry, theft, vandalism and aggression.
• Standardise how staff manage access control, visitor sign‑in, keys, passes and alarm systems across all sites.
• Improve incident reporting, escalation and post‑incident review to support continuous improvement and legal defensibility.
• Support compliance with WHS obligations, privacy requirements and client security expectations in tenders and audits.

Who is this for?

• Business Owners
• WHS Managers
• Security Managers
• Facility and Operations Managers
• HR Managers
• Frontline Supervisors
• Reception and Concierge Staff
• Control Room Operators
• IT and Systems Administrators
• Emergency Wardens and Floor Wardens

Hazards Addressed

• Unauthorised access to workplaces, restricted areas and critical infrastructure
• Workplace violence, aggression and threatening behaviour from customers, members of the public or other workers
• Theft, vandalism and deliberate damage to property, equipment or vehicles
• Security breaches involving sensitive information, records or IT systems (e.g. social engineering, tailgating)
• Personal safety risks for lone workers, after‑hours staff and staff working in remote or isolated areas
• Psychological harm arising from exposure to security incidents, threats or traumatic events
• Failure to respond appropriately to alarms, duress activations and suspicious behaviour

Included Sections

• 1.0 Purpose, Scope and Objectives
• 2.0 Definitions and Key Terms
• 3.0 Legal and Other Requirements (WHS, Privacy and Security Obligations)
• 4.0 Roles and Responsibilities (PCBU, Officers, Managers, Workers, Security Providers)
• 5.0 Security Risk Assessment and Planning
• 6.0 Access Control and Identification (Keys, Cards, PINs, Passwords, Badges)
• 7.0 Visitor, Contractor and Delivery Management
• 8.0 Physical Security Measures (Perimeter, Doors, Gates, Lighting, CCTV)
• 9.0 Personal Security and Lone / After‑Hours Work Protocols
• 10.0 Managing Aggressive, Threatening or Violent Behaviour
• 11.0 Information and Data Security Interface (Physical aspects and coordination with IT)
• 12.0 Alarm, Duress and CCTV Monitoring and Response Procedures
• 13.0 Incident Reporting, Escalation and Notification
• 14.0 Emergency Response and Coordination with AS 3745 Procedures
• 15.0 Post‑Incident Review, Debriefing and Support for Affected Workers
• 16.0 Training, Induction and Competency Requirements
• 17.0 Documentation, Records and Audit Trail
• 18.0 Continuous Improvement and Review of Security Protocols

Legislation & References

• Work Health and Safety Act 2011 (Cth) and equivalent state and territory WHS Acts
• Work Health and Safety Regulations 2011 and equivalent state and territory WHS Regulations
• Safe Work Australia – Code of Practice: Managing the Work Environment and Facilities
• Safe Work Australia – Code of Practice: Managing the Risk of Workplace Violence and Aggression in the Health and Community Sector (principles applicable across industries)
• AS 3745:2010 Planning for emergencies in facilities
• AS/NZS ISO 31000:2018 Risk management – Guidelines
• AS 4806 series: Closed circuit television (CCTV) for security applications (where CCTV is used)
• Privacy Act 1988 (Cth) and Australian Privacy Principles (for handling personal and security-related information)